Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa
File:                     7C754058415411ED8133414DC4F9AE02.roa (raw, json)
Hash identifier:          3NZIaXm/Fuu5xqcOIyakB97VoyqSD45XgTx1AB8MEJ4=
Subject key identifier:   4F:AA:A0:8A:37:7F:07:AF:67:DE:B1:6C:36:2E:58:D0:E2:02:28:94
Certificate issuer:       /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial:       0376
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa
Signing time:             Wed 23 Sep 2026 00:50:24 +0000
ROA not before:           Wed 23 Sep 2026 00:50:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150125
IP address blocks:        103.191.77.0/24 maxlen: 24
                          2001:df1:5540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
                          rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
        Validity
            Not Before: Sep 23 00:50:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ab32250-f4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:8c:fe:da:87:fb:86:db:cb:ab:8a:4b:cc:
                    95:c6:6e:a2:53:f5:59:1a:ca:cd:0f:3e:af:d2:3a:
                    bc:8f:cd:92:7e:60:a0:fd:59:6e:3d:ec:b2:35:e5:
                    84:1f:44:7f:2a:a2:cb:4e:7a:97:e9:8e:8c:53:ba:
                    64:6c:b2:dd:e9:23:73:82:8a:45:3d:9e:4f:b1:0b:
                    74:10:84:5a:df:9c:e4:75:c6:50:f4:81:68:c6:a3:
                    74:86:da:88:9a:49:08:4c:e9:e0:e9:12:1e:16:66:
                    0b:b2:8e:68:cc:23:94:56:c6:1e:b8:e1:ed:6d:e9:
                    c7:df:e0:8f:cf:84:92:b9:bc:f0:23:65:45:d2:5a:
                    12:ee:08:60:2d:46:39:c0:32:50:3c:1c:4f:cf:81:
                    c5:61:b6:99:b4:ef:e8:70:9b:ea:be:a3:1e:ac:b2:
                    aa:89:5e:79:98:a3:7f:fb:af:e1:2e:70:23:5f:ed:
                    ca:19:22:19:ec:aa:ee:2e:03:c1:57:10:45:f4:f2:
                    f6:68:34:eb:90:47:46:df:cb:49:e7:a1:45:5a:ec:
                    c1:da:5c:22:2d:93:08:d7:2b:5d:97:5d:5e:92:f8:
                    1c:db:fe:ad:c7:99:d8:f7:20:12:23:27:a4:b2:4a:
                    39:12:5f:b9:82:48:72:aa:a8:0b:87:34:a8:f1:a0:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AA:A0:8A:37:7F:07:AF:67:DE:B1:6C:36:2E:58:D0:E2:02:28:94
            X509v3 Authority Key Identifier:
                keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.77.0/24
                IPv6:
                  2001:df1:5540::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:fa:48:2c:54:75:98:cb:5f:85:72:ca:04:f8:70:62:98:
         e7:ba:f8:4d:75:2f:55:65:e6:9d:61:5c:08:d4:2d:db:1b:cf:
         e2:c0:c5:41:9a:91:da:db:22:57:1a:01:4e:ee:6b:4e:eb:c3:
         4a:34:8b:a4:8b:bf:b5:e7:ec:59:5f:7e:30:e8:66:de:39:20:
         3a:88:52:a4:09:55:72:14:cf:45:19:a8:bb:95:3f:4a:9f:a4:
         c5:5a:1b:36:6a:77:5d:be:4e:4f:e9:0d:d6:39:a4:88:21:69:
         f8:63:52:1c:0b:0a:e3:9c:25:73:00:0f:51:41:2a:8d:ec:4b:
         c9:1c:25:30:67:f8:09:92:34:e1:55:3b:76:a5:70:48:ea:d6:
         c1:17:09:d1:90:7b:da:75:ce:9d:06:cc:68:44:7c:6a:83:50:
         70:af:ea:4e:fb:06:c5:d9:0a:20:4e:6b:5b:d9:44:db:e4:f4:
         04:9c:d7:29:bc:b7:91:2c:73:68:03:40:1f:c6:34:0b:3c:73:
         bf:02:d1:a4:ef:0c:67:9b:b9:3f:fe:b6:a6:fe:46:45:07:5a:
         7f:1f:f1:9c:0a:2d:c4:f6:f9:a5:8f:c9:a7:a8:76:74:f1:31:
         35:b9:b8:f1:99:4b:8a:2b:4a:28:8d:c1:93:22:30:7c:13:41:
         f4:91:85:7d
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYyREUxMTAvBgNVBAUTKERGODI2Q0IzQkI3QThCQjJBMTFFRTRCQUUyRTA4N0VB
QzNBNzIxRDIwHhcNMjYwOTIzMDA1MDI0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzMjI1MC1mNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZCM/tqH+4bby6uKS8yVxm6iU/VZGsrNDz6v0jq8j82SfmCg/VluPeyyNeWE
H0R/KqLLTnqX6Y6MU7pkbLLd6SNzgopFPZ5PsQt0EIRa35zkdcZQ9IFoxqN0htqI
mkkITOng6RIeFmYLso5ozCOUVsYeuOHtbenH3+CPz4SSubzwI2VF0loS7ghgLUY5
wDJQPBxPz4HFYbaZtO/ocJvqvqMerLKqiV55mKN/+6/hLnAjX+3KGSIZ7KruLgPB
VxBF9PL2aDTrkEdG38tJ56FFWuzB2lwiLZMI1ytdl11ekvgc2/6tx5nY9yASIyek
sko5El+5gkhyqqgLhzSo8aAxsQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFE+qoIo3
fwevZ96xbDYuWNDiAiiUMB8GA1UdIwQYMBaAFN+CbLO7eouyoR7kuuLgh+rDpyHS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjJERS8xNzY3OTRENDE1
NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3S2hIdVM2NHVDSDZzT25J
ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM0SnNzN3Q2aTdLaEh1UzY0dUNINnNPbklkSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTYyREUvMTc2Nzk0RDQxNTVBMTFFREIwQTEyNzIwQzRGOUFFMDIvN0M3NTQwNTg0
MTU0MTFFRDgxMzM0MTREQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ79NMA8EAgACMAkDBwAgAQ3xVUAwDQYJKoZIhvcNAQELBQADggEB
AHsB+kgsVHWYy1+FcsoE+HBimOe6+E11L1Vl5p1hXAjULdsbz+LAxUGakdrbIlca
AU7ua07rw0o0i6SLv7Xn7FlffjDoZt45IDqIUqQJVXIUz0UZqLuVP0qfpMVaGzZq
d12+Tk/pDdY5pIghafhjUhwLCuOcJXMAD1FBKo3sS8kcJTBn+AmSNOFVO3alcEjq
1sEXCdGQe9p1zp0GzGhEfGqDUHCv6k77BsXZCiBOa1vZRNvk9ASc1ym8t5Esc2gD
QB/GNAs8c78C0aTvDGebuT/+tqb+RkUHWn8f8ZwKLcT2+aWPyaeodnTxMTW5uPGZ
S4orSiiNwZMiMHwTQfSRhX0=
-----END CERTIFICATE-----
Generated at Mon Oct 5 22:49:06 2026 by rpki-client