Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/77BC7D3A74F411EF8B9E1067C4F9AE02.roa
File:                     77BC7D3A74F411EF8B9E1067C4F9AE02.roa (raw, json)
Hash identifier:          Mg/0072LlJT42gzGzIhIcx7r/JH9gmfmaMyTGLHiIXk=
Subject key identifier:   02:60:86:6C:C5:7A:04:7D:12:36:46:A9:76:2F:F1:E6:D8:7A:2A:9E
Certificate issuer:       /CN=A9195A1A/serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035
Certificate serial:       011B
Authority key identifier: A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/77BC7D3A74F411EF8B9E1067C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:39:45 +0000
ROA not before:           Sun 03 Aug 2025 06:44:14 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137841
IP address blocks:        103.232.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl
                          rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A1A, serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035
        Validity
            Not Before: Aug  3 06:44:14 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58511-ebb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:cc:5f:a4:7c:d4:33:1d:08:31:a6:26:14:
                    ae:2a:f8:31:af:7f:40:a0:cc:91:4c:77:43:0c:21:
                    6c:bc:70:f6:23:96:0c:6e:6a:d6:de:10:9a:d0:d3:
                    70:32:f3:9c:05:86:d7:5e:7b:a5:0f:09:9f:b3:fc:
                    34:92:56:f0:bf:16:2f:89:11:5f:34:25:05:e8:8f:
                    5f:9e:26:c9:cc:03:81:c0:c9:44:50:81:76:b6:6f:
                    97:65:3d:72:3b:80:65:9b:40:b7:3b:a1:90:77:42:
                    35:45:e0:b5:7a:e6:e3:ef:be:46:96:4d:d6:6a:04:
                    4f:ae:29:73:b3:c6:13:4b:c5:58:17:b2:45:d5:fe:
                    a1:9e:8f:83:88:e9:53:ab:48:db:26:1e:47:c0:b1:
                    11:78:42:7c:fc:d2:c5:e9:4b:be:03:64:d5:b6:2c:
                    38:f9:82:6e:28:65:b7:0a:5d:13:0c:c0:9d:17:32:
                    3e:26:12:8a:fc:74:0b:a3:3d:04:08:7f:a2:04:bb:
                    1c:b0:75:c4:38:6d:fa:8c:ad:ec:73:91:21:ca:09:
                    1a:c4:51:b2:23:4c:18:07:e8:30:55:65:ce:70:91:
                    c1:33:28:b7:97:a3:ac:57:ff:04:5f:b0:ab:20:45:
                    b9:a5:73:46:f6:d7:a6:e2:4c:db:11:c8:15:a6:12:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:60:86:6C:C5:7A:04:7D:12:36:46:A9:76:2F:F1:E6:D8:7A:2A:9E
            X509v3 Authority Key Identifier:
                keyid:A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/77BC7D3A74F411EF8B9E1067C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:1e:c4:e2:bc:f4:bb:ca:7e:c0:b1:8c:dc:f4:68:c4:95:e6:
         6b:a2:da:50:4d:32:98:14:85:27:3a:5a:74:94:ed:b3:bd:6e:
         41:c5:07:43:ca:92:22:b3:08:de:55:9d:0a:f5:31:c1:8a:eb:
         3b:ac:0a:07:51:d7:ad:70:eb:63:1c:de:fb:5d:91:bd:a4:cc:
         46:5f:8c:f7:70:87:cb:58:a8:46:54:ab:82:77:76:58:5e:81:
         64:e8:0a:ed:4f:e2:2d:0a:f5:bf:74:d5:0f:42:28:0a:bf:d3:
         1e:84:ed:bf:d3:5f:6b:1e:e7:ef:00:06:84:72:9d:af:b1:73:
         72:aa:87:cc:0e:db:ae:17:78:c0:d3:6f:f1:00:a7:c2:63:0e:
         eb:8e:9f:75:ba:12:29:f2:6e:bd:7e:ec:d8:31:de:b4:19:4c:
         73:9f:eb:85:76:a6:06:b8:13:ea:ed:5b:b8:f1:45:1d:a7:12:
         a0:f8:fc:57:1d:a9:f5:47:e5:03:d4:61:0f:34:ee:de:07:61:
         80:9d:b3:69:f7:10:eb:37:db:d1:83:be:a1:bf:f2:de:f7:93:
         56:f3:20:62:96:0a:7f:0f:51:12:6f:f2:18:13:ad:4e:99:87:
         3a:70:0d:31:31:d7:fe:9d:63:87:5c:bc:78:84:40:5e:53:34:
         d4:2a:e3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:29 2026 by rpki-client