Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/234A77E28D2111ECB33BB01AC4F9AE02.roa
File:                     234A77E28D2111ECB33BB01AC4F9AE02.roa (raw, json)
Hash identifier:          rD0K63hEtFRbmUFMwp16mvboZk+CtCmdJfPRvsaFveU=
Subject key identifier:   01:75:A6:81:A8:5E:80:2E:17:49:87:C5:0D:D5:EC:59:A5:B5:EB:41
Certificate issuer:       /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
Certificate serial:       1DFD
Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/234A77E28D2111ECB33BB01AC4F9AE02.roa
Signing time:             Mon 22 Jun 2026 16:18:57 +0000
ROA not before:           Mon 22 Jun 2026 16:18:57 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149429
IP address blocks:        103.178.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl
                          rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7677 (0x1dfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9
        Validity
            Not Before: Jun 22 16:18:57 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a396071-554c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:fb:2a:b2:77:fb:24:cc:2d:7e:aa:58:10:
                    94:08:a4:13:35:51:b2:44:df:18:13:da:e8:9e:96:
                    26:0f:f4:09:72:b8:4e:47:cd:04:13:2e:ff:8b:5f:
                    23:4a:6a:33:62:e6:06:b9:f3:38:45:ba:6c:0c:0d:
                    7a:d0:80:98:ed:55:d2:73:d4:9d:50:52:bf:55:e6:
                    ce:d8:f6:97:4f:67:f1:d4:3a:23:e1:42:4d:e0:70:
                    52:07:8d:02:9c:56:90:73:56:8f:e3:00:c4:44:69:
                    93:c7:c0:1c:81:31:ea:23:d5:46:35:a8:f7:7b:9f:
                    f3:00:02:7d:14:93:2b:66:5a:e2:a9:99:54:99:50:
                    09:aa:b5:a6:77:14:40:e2:e9:0d:21:5c:20:15:5c:
                    60:50:85:48:ad:a8:c5:53:70:8c:29:02:bc:6c:04:
                    b7:92:3d:ea:ca:ba:82:56:69:0e:8d:16:b9:99:3c:
                    30:be:88:37:76:e3:f0:83:0d:bf:d9:c0:9e:7e:6e:
                    1f:c3:3a:d1:f8:bf:7d:86:71:3c:3c:0b:53:27:cc:
                    23:60:95:74:be:66:73:5d:af:08:e2:60:9d:76:7a:
                    8a:37:f1:e8:8e:28:8e:46:bd:b7:87:89:8a:63:39:
                    1e:7f:67:5c:c0:2b:71:ba:e9:78:20:a3:aa:30:b2:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:A6:81:A8:5E:80:2E:17:49:87:C5:0D:D5:EC:59:A5:B5:EB:41
            X509v3 Authority Key Identifier:
                keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/234A77E28D2111ECB33BB01AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:64:b0:24:f3:01:54:b5:3d:a2:33:ac:5f:e7:c6:11:53:a2:
         f9:af:92:1c:51:98:b3:33:ff:9f:1c:dd:0b:da:82:27:5c:43:
         c0:5b:21:ab:7e:a8:f1:14:c8:84:4f:dc:36:e4:22:eb:54:cd:
         33:da:a5:92:d6:32:5d:b2:d2:1a:f8:f2:1b:27:8d:3b:e7:a7:
         f2:5f:1d:bb:a8:4f:49:c0:ec:78:7a:06:5d:ea:28:11:11:ba:
         5f:ad:69:28:dc:62:15:45:24:d9:55:d2:26:93:20:36:3b:b7:
         40:6c:21:95:7b:4e:03:11:a9:bf:58:81:6e:4c:04:17:ab:41:
         a3:1c:89:95:ca:99:97:0a:f3:b1:94:86:aa:f0:e7:c9:e4:29:
         3a:f0:83:f3:5b:46:cd:1c:6a:2e:d7:8e:c4:4f:a4:ec:eb:fd:
         51:d0:14:d2:8f:fb:a7:62:e6:81:99:ca:70:ab:19:ca:7c:3c:
         bc:2f:bd:a7:c5:e5:f5:a7:c5:cf:bc:50:11:dc:d5:95:17:68:
         07:cd:03:7f:8d:3b:2b:92:8a:55:df:db:56:da:93:e3:c3:51:
         f2:e2:24:a4:eb:89:4d:f8:cf:5d:96:20:2b:d0:a2:ee:45:a4:
         26:06:6f:83:44:4b:21:7d:3e:05:94:3e:ff:94:5c:32:5b:68:
         09:87:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:09 2026 by rpki-client