Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/3726AAFA0C0011EAA414FC4AC4F9AE02.roa
File:                     3726AAFA0C0011EAA414FC4AC4F9AE02.roa (raw, json)
Hash identifier:          AZJ9Ikn6w4HKM1tU6KflkZ7ElKv1SQQyJlfS833ElRI=
Subject key identifier:   03:88:1E:A5:A8:03:83:A2:8B:5D:96:51:CC:E5:42:75:BF:E0:4A:00
Certificate issuer:       /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial:       0CF9
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/3726AAFA0C0011EAA414FC4AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:35:28 +0000
ROA not before:           Wed 18 Jun 2025 18:22:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        103.77.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
                          rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3321 (0xcf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
        Validity
            Not Before: Jun 18 18:22:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a45cc0-d4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:05:0f:d6:be:6c:a8:f0:38:01:a6:ae:f4:
                    5c:d3:40:da:31:51:8e:6f:b5:d8:84:f9:34:08:b7:
                    22:09:79:0a:d6:09:f6:6a:5e:d4:67:f1:3c:c0:b3:
                    be:9f:19:45:c8:e6:18:16:1e:db:cf:84:14:00:ca:
                    a6:1f:42:a4:43:a1:03:99:43:ed:6c:02:35:03:e9:
                    61:28:76:e9:cb:a2:75:82:f9:2f:51:b8:62:63:f3:
                    b8:3a:ac:0d:fb:82:cc:62:86:45:92:1c:38:c9:fd:
                    2b:fb:29:67:95:00:57:dd:29:d1:ab:b6:03:0b:6f:
                    f4:7d:73:44:ca:13:fa:23:36:fb:50:63:f4:28:e3:
                    83:21:ba:be:6b:2b:5f:7e:2a:f9:9f:02:df:cf:bc:
                    9c:69:61:b1:43:a2:a4:64:6c:6a:c6:63:01:a2:e1:
                    f0:5b:8c:0c:d6:e9:c2:e4:83:21:88:5f:c7:64:36:
                    3e:94:8a:5d:b3:25:1c:41:25:c4:11:02:46:a3:17:
                    21:e2:d3:9a:5e:16:e6:f2:4c:7a:6d:8f:66:79:de:
                    6f:5e:62:1a:8b:e4:9f:84:69:98:73:f2:75:b0:60:
                    04:52:97:70:d0:40:e3:ca:76:71:d3:b9:a0:1f:7e:
                    98:02:92:1f:0e:9b:43:b1:63:5a:08:ab:98:64:85:
                    3d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:88:1E:A5:A8:03:83:A2:8B:5D:96:51:CC:E5:42:75:BF:E0:4A:00
            X509v3 Authority Key Identifier:
                keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/3726AAFA0C0011EAA414FC4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:22:dc:ca:13:13:96:73:7d:96:5f:b2:e1:06:fe:7e:8b:5a:
         1c:2d:ee:60:e5:17:46:22:36:4e:d4:54:24:14:46:59:8b:9b:
         c0:bf:d8:f7:f8:75:29:e8:7b:a4:00:b8:86:e7:f3:22:35:41:
         99:43:d2:bc:6c:be:8b:95:89:29:d2:46:27:ca:66:84:b7:0c:
         23:86:ba:a4:3d:33:8b:31:1f:c9:2d:8a:df:33:02:25:31:7e:
         6b:5b:db:a5:db:17:2d:8d:11:24:36:f2:65:41:fd:28:86:69:
         e0:bd:31:59:e3:32:dc:02:04:5f:0a:c8:86:ac:43:ea:c6:bf:
         2f:47:39:92:24:f5:9e:01:70:19:5b:22:cd:4d:77:62:5c:09:
         a8:bd:e3:6f:c3:53:29:21:ef:9f:c8:a3:9d:06:2e:2e:89:03:
         e8:e5:62:b5:35:f3:27:3a:a0:e3:68:16:fe:7f:c1:c0:87:96:
         46:d6:6e:1c:21:c9:d2:18:6e:66:42:0b:00:a1:91:34:f1:9f:
         5d:3f:53:54:dd:c0:32:08:23:8c:da:15:d9:1b:e0:a0:80:94:
         fc:75:8d:3c:b8:ea:3d:2e:3c:4b:cd:ad:bf:ee:18:2d:ab:5c:
         ec:a8:59:ee:71:95:38:46:ab:76:ce:f4:d1:96:83:df:3e:5f:
         72:57:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:02 2026 by rpki-client