Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/77F3A8B44D1A11F1A20E0EADB9833773.roa
File:                     77F3A8B44D1A11F1A20E0EADB9833773.roa (raw, json)
Hash identifier:          njgB4GyznC4WbAXjnMUKLhBAaTqFgRbORUoYNqNFmn0=
Subject key identifier:   8C:D6:16:15:8B:11:09:98:D5:9B:EE:1B:5B:CC:C8:29:CF:40:3E:C0
Certificate issuer:       /CN=A9147067/serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
Certificate serial:       02
Authority key identifier: 97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/77F3A8B44D1A11F1A20E0EADB9833773.roa
Signing time:             Mon 11 May 2026 09:19:10 +0000
ROA not before:           Mon 11 May 2026 09:19:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     45758
IP address blocks:        202.44.64.0/24 maxlen: 24
                          202.44.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl
                          rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147067, serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
        Validity
            Not Before: May 11 09:19:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a019f0e-cb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:2c:65:eb:66:32:4c:e6:0a:64:39:c1:f7:
                    77:3e:1b:60:d1:d1:0e:75:a7:75:98:60:e3:da:14:
                    82:ff:db:44:8d:55:f1:93:1a:7f:80:96:c7:12:31:
                    46:de:37:56:aa:42:d2:8d:05:6d:88:53:9a:be:24:
                    b9:4b:7f:08:af:b3:66:2d:5c:45:11:8e:17:56:08:
                    65:25:bf:45:51:6e:f7:7c:a9:1c:e1:a6:79:9e:e3:
                    1c:cb:b0:1b:b4:a8:77:86:40:80:06:32:c2:c9:dd:
                    72:51:13:39:06:4a:d7:6b:64:d1:85:ae:0b:39:64:
                    f2:cb:ed:2f:05:fb:27:3e:bc:a6:0d:30:c2:b1:aa:
                    da:a8:02:d2:e4:12:ce:7c:c7:72:ef:d9:36:0e:76:
                    63:3b:03:68:eb:1c:46:35:4a:1b:17:27:8f:af:ea:
                    a0:1b:c8:87:bd:6b:8a:81:b1:17:cb:56:ad:82:99:
                    9d:d5:69:31:7f:95:a2:0d:ae:ed:b0:2a:ae:cc:96:
                    72:0f:04:e5:4b:72:ca:e6:b3:2e:ec:b1:12:38:87:
                    16:69:94:7c:d9:13:6f:29:2d:90:0a:4d:32:ff:5c:
                    6e:0c:a4:30:f8:e5:82:c4:11:e7:ff:f0:2f:b3:5e:
                    52:1c:9b:cd:db:e4:b1:ac:dd:e9:e5:e8:84:85:12:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:16:15:8B:11:09:98:D5:9B:EE:1B:5B:CC:C8:29:CF:40:3E:C0
            X509v3 Authority Key Identifier:
                keyid:97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/77F3A8B44D1A11F1A20E0EADB9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:cd:23:89:6e:96:79:0f:37:04:9f:68:7e:ad:24:11:92:
         44:59:b9:35:76:b6:cd:19:2e:9c:b4:9f:2a:55:7e:87:07:44:
         cb:c9:40:73:b2:4d:a1:52:a8:d6:f4:72:a8:ca:65:58:a3:bc:
         0e:d3:cc:01:0a:ce:73:d9:4f:a1:ae:2a:07:9b:36:42:63:e8:
         fc:2a:a0:10:5c:95:6d:86:60:13:90:a3:da:44:3d:77:37:0d:
         50:2d:44:92:42:a7:8e:cf:55:2c:33:af:17:5b:18:d8:26:ef:
         15:81:2e:20:6f:9d:77:76:50:4a:b0:12:a4:94:33:47:31:5a:
         c9:ac:eb:d9:3b:f3:94:ff:5f:99:0d:41:34:9c:c0:11:c8:48:
         cc:98:70:fa:e8:cc:f1:79:08:ee:15:37:2e:2b:ab:71:f9:0b:
         8f:16:2f:0e:0a:b8:16:ad:5c:4f:b6:ce:2a:5e:3c:e3:03:1b:
         f8:68:48:af:f3:3e:aa:b7:41:a7:39:d2:90:1e:6f:d8:68:5b:
         9b:08:05:d4:96:0e:99:e4:b2:ef:a3:45:be:08:8c:e3:03:b4:
         a9:a4:cb:40:2a:b6:af:46:2a:a0:02:91:f3:b1:e2:09:db:37:
         f4:9c:8b:3c:ec:c0:ea:3a:e5:21:2b:68:02:f6:42:5b:02:80:
         e6:43:b2:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 14:47:23 2026 by rpki-client