Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/77139F3054EF11E783C5A42EC4F9AE02.roa
File:                     77139F3054EF11E783C5A42EC4F9AE02.roa (raw, json)
Hash identifier:          KRl8ea3V85bmsmtzGvJljwpOXv+hiqOfQdmXTFhqfM0=
Subject key identifier:   C4:C4:76:35:2F:DB:C9:49:B5:5A:10:02:08:6A:18:08:4B:49:C3:65
Certificate issuer:       /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Certificate serial:       25FD
Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/77139F3054EF11E783C5A42EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:27:17 +0000
ROA not before:           Tue 06 May 2025 15:53:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     63987
IP address blocks:        103.58.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
                          rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9725 (0x25fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
        Validity
            Not Before: May  6 15:53:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42295-6177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9a:bb:3d:32:99:1f:91:3e:d9:7e:d0:c0:fc:
                    21:72:45:a1:e0:e5:bb:9a:d1:ce:b6:6c:70:d4:07:
                    2d:f4:f9:66:a3:48:fa:29:14:04:a6:62:7b:1c:1b:
                    53:e9:1d:af:57:7d:c2:91:f7:2c:17:f2:da:b5:4c:
                    b0:d3:bc:77:a1:bc:21:65:da:31:94:bd:08:0b:4e:
                    22:21:28:f9:d8:00:73:00:75:e4:59:da:51:c1:be:
                    28:c4:84:12:ca:45:91:54:82:3d:4b:46:b7:cc:04:
                    61:d6:ea:89:cc:3a:73:ba:ee:6f:ab:d0:08:21:9c:
                    a8:fe:17:b0:b1:1c:7a:6f:2c:9b:84:e9:17:70:d5:
                    77:52:db:e2:42:e0:4e:26:0e:d6:7a:6f:64:31:c6:
                    a7:8b:fc:8c:86:b7:1a:38:3d:9b:f6:e4:28:7f:73:
                    30:7f:1b:58:4d:15:68:80:3c:b7:3d:f3:6f:95:65:
                    13:a0:79:60:a2:64:46:54:61:1a:82:f9:55:d5:16:
                    c7:4b:f4:4b:46:c1:8d:94:71:aa:90:14:94:e3:7a:
                    f1:24:dd:c5:a2:f7:5f:38:ad:46:69:99:c0:2c:53:
                    a4:9b:45:25:43:7e:64:05:4d:46:86:9e:a7:e9:32:
                    1b:34:16:61:9e:61:0e:29:f8:c1:2a:a5:53:76:f2:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C4:76:35:2F:DB:C9:49:B5:5A:10:02:08:6A:18:08:4B:49:C3:65
            X509v3 Authority Key Identifier:
                keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/77139F3054EF11E783C5A42EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:36:7c:7a:85:c1:c7:0b:a3:79:71:08:2e:b5:ca:5b:7d:f7:
         2a:b0:45:2f:f5:65:a6:9f:b9:48:c0:9c:d5:5c:3a:79:99:1e:
         2a:1a:2f:7b:f8:1d:4e:3f:32:87:79:5c:e3:79:21:a0:ca:9f:
         c9:91:b9:d1:09:45:fc:0d:03:0e:b8:cc:27:02:78:6d:92:15:
         94:8f:20:df:b1:d2:2e:d7:52:58:bb:c6:e4:c7:51:15:41:6b:
         78:8a:83:8a:c5:2a:95:c6:5f:d1:86:d9:42:03:b6:b3:04:be:
         94:cd:d2:ef:db:29:18:70:c9:36:66:f6:5d:d3:89:f0:af:6b:
         5b:31:a5:0c:7e:15:14:51:bc:81:26:51:e9:75:d4:1e:ac:59:
         c2:67:b9:96:8a:1e:63:12:12:17:db:47:f3:f8:d0:ab:d4:3e:
         4b:53:66:e5:28:ba:f9:0a:00:72:06:ed:18:1f:c3:89:f0:56:
         83:bd:14:35:5d:e0:59:71:a6:21:85:48:eb:d9:ff:71:09:33:
         7c:45:26:85:2b:bc:29:f1:92:94:1a:b4:d0:ae:dd:24:5c:fe:
         81:05:fe:c2:26:e4:ad:c0:c9:ac:a7:38:3a:c6:fb:06:33:ca:
         11:26:80:75:1d:6d:38:99:bd:80:52:ee:0c:e8:b3:3b:45:f6:
         a5:be:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:23 2026 by rpki-client