Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
File:                     81764BC4235511EC976AC464C4F9AE02.roa (raw, json)
Hash identifier:          migaqbEcW6XD+P9JpAfJqP9HFbVfjDU1wFPykXbQFyI=
Subject key identifier:   42:74:64:16:A7:45:24:C3:80:E6:E6:E5:E2:34:FA:D6:F0:54:ED:0A
Certificate issuer:       /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3
Certificate serial:       055F
Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:56:29 +0000
ROA not before:           Tue 29 Jul 2025 00:35:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136751
IP address blocks:        103.95.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl
                          rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3
        Validity
            Not Before: Jul 29 00:35:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40d4d-80b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:6c:ed:26:14:b9:4a:d4:f7:dd:98:1b:75:
                    2b:18:65:35:95:7e:ff:03:7d:0e:a2:c6:d8:ef:91:
                    d1:30:a4:46:24:c4:52:b4:bc:fa:78:a8:cc:0b:d9:
                    bc:ce:bf:a5:1c:aa:f2:20:c2:6d:c8:2e:80:52:6d:
                    46:50:0a:40:7d:72:71:b8:e4:5d:d8:2e:03:f3:94:
                    7b:c0:d0:da:5d:35:17:1a:11:da:64:eb:d1:e0:f0:
                    f4:cc:a8:8c:de:3b:e0:5e:5b:16:a4:5f:4f:10:bc:
                    d7:c7:87:e7:0d:8c:6f:47:69:d1:82:df:03:39:e4:
                    97:a2:22:a2:b8:61:28:75:58:fb:ee:0b:74:b6:58:
                    43:b4:e2:85:56:e1:83:4a:92:1c:41:b5:8f:70:5c:
                    a4:95:04:7e:da:90:a3:fb:dd:b5:9c:8b:a9:ac:cb:
                    b7:69:f5:78:6a:25:b8:be:db:42:2d:7d:86:2d:5a:
                    8d:5e:55:34:00:5a:d5:f7:b5:25:66:69:6b:ed:c9:
                    85:50:da:35:d7:cd:21:39:f7:f0:ab:29:cb:1a:1d:
                    cb:be:95:07:c4:77:92:aa:1e:e4:a4:5d:88:11:75:
                    98:7c:8b:1c:cb:69:86:35:41:72:9f:a4:7a:c8:68:
                    b4:8c:c9:a8:06:9e:3e:c3:5b:aa:ec:a7:48:ed:5e:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:74:64:16:A7:45:24:C3:80:E6:E6:E5:E2:34:FA:D6:F0:54:ED:0A
            X509v3 Authority Key Identifier:
                keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/81764BC4235511EC976AC464C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:ed:50:2e:e7:d5:d1:25:ce:6e:88:b6:9b:c2:2f:cf:78:
         74:b6:59:69:0c:ac:6a:60:c1:8f:05:43:1f:bd:09:22:cb:22:
         d0:4c:e2:12:6b:a4:7c:98:e4:69:b9:b9:5c:99:d8:8e:2b:bb:
         fd:73:39:85:9a:6f:c7:0e:df:2e:9a:bd:df:0d:43:94:f9:59:
         73:62:5d:37:d6:a4:29:26:59:7a:04:ef:f0:f1:a6:be:8a:71:
         7a:c8:69:8d:8a:af:2c:5e:7f:c2:d8:6b:f2:cc:c3:22:bf:79:
         b1:37:eb:8c:ca:90:fd:44:a2:a8:90:ef:9f:b3:4c:f3:34:39:
         20:88:81:5d:01:fc:14:2f:f8:45:4a:52:b9:dd:f3:b6:fb:95:
         11:57:c7:c9:2e:15:07:9d:78:cf:a9:a0:01:3e:5b:8f:f8:c4:
         cb:e6:af:0c:b4:67:86:77:67:98:5b:6d:51:74:28:04:a7:d1:
         e3:6e:ce:ab:81:4f:a9:b2:8c:d8:ca:ba:19:48:e8:97:62:73:
         0e:b7:44:ca:a7:05:08:10:59:3f:92:f5:15:38:b2:d5:c4:fa:
         14:d7:c7:15:75:c0:fe:d3:40:3e:45:09:10:08:6d:a6:3d:b3:
         c8:85:6e:d6:e1:7f:fb:10:e2:12:70:62:38:6b:b8:5d:0b:71:
         f6:03:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:25 2026 by rpki-client