Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa
File:                     BEB34436FE3211EFAA1D9A4EC4F9AE02.roa (raw, json)
Hash identifier:          rcOga+YGZldqreiF0WCdj8lf5Z59J1hOmyY6+goJTWY=
Subject key identifier:   0A:FE:49:C8:D0:87:E2:14:49:CC:10:4C:A7:FE:37:80:BC:B4:51:33
Certificate issuer:       /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial:       055A
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:19:54 +0000
ROA not before:           Tue 16 Dec 2025 23:20:18 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9230
IP address blocks:        103.177.72.0/24 maxlen: 24
                          103.177.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
                          rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
        Validity
            Not Before: Dec 16 23:20:18 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a51df9-6e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f4:90:77:79:12:28:1b:85:d5:e5:e6:ed:ee:
                    ad:67:c6:17:21:8e:91:d1:1b:ad:d2:fc:a1:af:39:
                    8e:8e:70:d6:33:43:97:bc:9c:f2:e5:13:37:74:be:
                    4b:8c:ce:f7:6a:b5:f8:8a:b4:7c:85:95:64:88:18:
                    a1:71:74:d7:62:99:ae:a7:26:a6:36:c8:66:8f:46:
                    7a:64:20:40:5e:dd:34:0d:00:38:0a:92:77:16:6a:
                    48:55:71:03:90:e0:42:c1:dc:4d:35:e5:ae:2e:e1:
                    b3:a3:31:34:43:d5:df:2c:18:9c:66:50:cc:c1:d5:
                    e0:17:60:e5:a3:8d:90:f3:f8:27:77:b6:f9:b3:e1:
                    69:9f:fa:0f:ea:46:78:5f:8f:8d:89:9e:b9:d6:be:
                    1f:0f:2f:bc:b3:13:f9:49:07:5f:e3:cb:3b:70:af:
                    84:04:8a:4c:4c:b5:1e:a3:d0:c0:a9:f3:f2:e4:bc:
                    ac:e0:89:af:6b:70:a1:c6:17:8f:92:61:24:87:ee:
                    77:5e:ca:9f:34:2a:e1:a5:90:9c:cc:74:fa:a8:dc:
                    e6:12:4f:4b:21:6c:15:5e:40:02:33:3b:cb:c5:d8:
                    05:42:c1:cb:b0:f3:bf:7c:92:cd:fa:cd:8d:2e:73:
                    da:87:20:33:53:a5:61:29:29:83:63:99:53:26:27:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FE:49:C8:D0:87:E2:14:49:CC:10:4C:A7:FE:37:80:BC:B4:51:33
            X509v3 Authority Key Identifier:
                keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/BEB34436FE3211EFAA1D9A4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:cd:67:62:ad:fd:d3:66:c5:b0:7e:ea:01:fe:76:4f:f1:
         19:f1:6b:03:7b:f1:12:45:cb:8e:29:a4:0f:dd:e6:a5:9e:8f:
         9b:9f:c1:2b:84:12:7a:e9:01:f5:c8:29:28:7a:3a:00:d0:90:
         56:eb:da:6d:86:6e:3c:24:b7:cf:ab:bf:b0:57:39:55:a9:7f:
         fd:07:4e:5b:a2:f3:e9:ec:26:1a:f6:66:fd:2c:fc:02:7c:a9:
         0a:54:26:67:91:24:d5:84:94:25:e0:f0:41:8f:d1:f1:67:b8:
         39:0e:df:a4:6b:56:a2:1b:30:42:e1:d7:36:5c:c7:00:5a:27:
         de:a2:85:33:5f:33:d7:4a:79:e2:c0:98:00:4f:8a:4d:db:91:
         ef:00:14:f8:95:95:7b:3c:4b:f6:a8:b1:90:68:38:20:ff:c4:
         14:30:ec:80:60:7b:5d:74:b3:63:66:ab:cc:8a:2f:49:b3:be:
         60:e9:f7:9d:42:dd:e7:4b:18:11:3d:0b:66:f1:ac:03:7f:4a:
         55:f9:40:93:55:e8:13:9d:cd:1a:43:c3:09:12:86:d8:56:4d:
         e9:ba:fb:00:66:3e:8a:a4:a7:65:21:af:58:19:7c:ae:92:f8:
         92:e9:a8:9a:f3:8b:12:95:09:f3:a9:15:e8:8a:a2:ee:e6:49:
         90:c1:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:02:17 2026 by rpki-client