Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/54E77A985F1F11EFA979694FC4F9AE02.roa
File:                     54E77A985F1F11EFA979694FC4F9AE02.roa (raw, json)
Hash identifier:          Ja29sSxE8KanVMjVphZgBthiKCRYqnTpDRjm76mlvD4=
Subject key identifier:   C8:F4:AE:9E:7A:F4:DC:C8:5B:CB:BF:D8:12:BF:B0:BB:F8:8D:A9:C4
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       05D7
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/54E77A985F1F11EFA979694FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:40:05 +0000
ROA not before:           Sat 17 May 2025 00:14:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.116.4.0/24 maxlen: 24
                          103.116.5.0/24 maxlen: 24
                          103.116.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: May 17 00:14:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a433a4-2521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:58:71:c8:bb:27:4d:94:90:d8:5a:27:18:
                    f9:5d:d5:80:e9:cf:d1:b0:13:42:cc:f2:2f:00:e9:
                    a4:97:9d:04:1e:97:48:3c:e0:48:38:5c:b4:47:82:
                    64:c1:3f:03:1b:78:d9:3c:51:6f:50:fb:63:06:18:
                    41:34:29:ea:9d:f7:bc:18:54:48:82:11:90:15:f8:
                    be:61:c2:68:25:5a:84:09:74:ef:0a:51:5c:f7:1e:
                    0c:f0:49:9f:69:8f:34:a2:55:e0:0a:79:f2:47:65:
                    63:bc:3c:31:37:26:2f:c4:51:43:94:d9:9e:e3:67:
                    37:00:44:50:7f:1b:db:d5:f8:fa:fc:2d:ea:05:04:
                    fe:27:f7:8f:6e:67:39:f0:c2:f3:3f:0a:ee:fb:a1:
                    12:c6:7d:cb:6d:4b:0d:1b:0f:72:0a:03:cc:94:92:
                    1a:cd:b1:c1:df:d4:cf:4f:62:c9:81:1d:06:e5:e3:
                    42:12:33:be:ec:8d:11:46:4d:1c:06:89:36:39:23:
                    2e:73:32:1d:2f:e2:fc:af:b2:46:40:b1:45:18:42:
                    44:c8:6e:20:9d:c2:94:c7:be:6e:9f:74:89:ce:a7:
                    53:c7:1d:9a:bd:6e:80:55:f8:9c:52:d1:fe:ad:a3:
                    5d:c6:ea:b3:72:a9:24:aa:d1:dc:00:4c:37:1a:02:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F4:AE:9E:7A:F4:DC:C8:5B:CB:BF:D8:12:BF:B0:BB:F8:8D:A9:C4
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/54E77A985F1F11EFA979694FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.4.0-103.116.6.255

    Signature Algorithm: sha256WithRSAEncryption
         71:ff:e7:33:92:fb:51:92:bf:ab:1e:67:4f:05:f0:f4:7e:3b:
         ae:bb:25:5b:73:01:2d:e7:0a:86:25:33:87:38:ac:0d:94:e9:
         eb:72:3c:58:a0:fe:c0:f2:51:f6:54:ce:ff:b8:40:dc:c6:64:
         7e:be:af:b5:32:f5:93:1e:49:4a:6a:15:89:84:f8:05:7d:96:
         84:65:a9:1f:7b:5f:11:50:d7:1e:f0:f4:09:5c:96:e1:ce:7f:
         82:bb:1f:ab:80:4f:f9:61:be:ec:f0:5c:64:cc:b1:fb:22:0b:
         ca:e0:c9:f0:06:d1:34:7c:8d:69:b9:60:88:f8:17:1b:40:cf:
         f1:51:a9:b1:ba:18:03:70:bb:90:7a:d9:4c:47:3a:fa:f5:c6:
         da:e9:4d:f6:80:b1:cb:ec:42:65:5a:03:59:b9:d9:27:92:c0:
         7a:8c:f1:3a:79:6d:1c:36:f7:19:51:ae:e3:78:aa:a6:96:37:
         39:40:b1:ef:58:a4:07:21:7f:af:47:bb:ce:48:04:b9:48:cd:
         d0:a4:1c:ce:6d:a9:69:8c:79:8d:ac:24:9c:df:84:62:4b:db:
         d0:95:7d:9d:2f:01:c1:87:a4:89:88:cf:76:58:64:80:11:ff:
         21:f0:e4:16:4a:78:5e:e5:6d:ab:76:3a:d7:ca:93:d3:10:43:
         7f:c4:3f:41
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG
NjZENEM3MzUwHhcNMjUwNTE3MDAxNDM2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzNhNC0yNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGFYcci7J02UkNhaJxj5XdWA6c/RsBNCzPIvAOmkl50EHpdIPOBIOFy0R4Jk
wT8DG3jZPFFvUPtjBhhBNCnqnfe8GFRIghGQFfi+YcJoJVqECXTvClFc9x4M8Emf
aY80olXgCnnyR2VjvDwxNyYvxFFDlNme42c3AERQfxvb1fj6/C3qBQT+J/ePbmc5
8MLzPwru+6ESxn3LbUsNGw9yCgPMlJIazbHB39TPT2LJgR0G5eNCEjO+7I0RRk0c
Bok2OSMuczIdL+L8r7JGQLFFGEJEyG4gncKUx75un3SJzqdTxx2avW6AVficUtH+
raNdxuqzcqkkqtHcAEw3GgLXlwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFMj0rp56
9NzIW8u/2BK/sLv4janEMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG
MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjIwMzkvRkI3MERGNkFGRjIwMTFFQjgxNjBBQzUxQzRGOUFFMDIvNTRFNzdBOTg1
RjFGMTFFRkE5Nzk2OTRGQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAJndAQDBABndAYwDQYJKoZIhvcNAQELBQADggEBAHH/5zOS+1GS
v6seZ08F8PR+O667JVtzAS3nCoYlM4c4rA2U6etyPFig/sDyUfZUzv+4QNzGZH6+
r7Uy9ZMeSUpqFYmE+AV9loRlqR97XxFQ1x7w9AlcluHOf4K7H6uAT/lhvuzwXGTM
sfsiC8rgyfAG0TR8jWm5YIj4FxtAz/FRqbG6GANwu5B62UxHOvr1xtrpTfaAscvs
QmVaA1m52SeSwHqM8Tp5bRw29xlRruN4qqaWNzlAse9YpAchf69Hu85IBLlIzdCk
HM5tqWmMeY2sJJzfhGJL29CVfZ0vAcGHpImIz3ZYZIAR/yHw5BZKeF7lbat2OtfK
k9MQQ3/EP0E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:09 2026 by rpki-client