Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa
File:                     0D99319006F011EFA8C8D445C4F9AE02.roa (raw, json)
Hash identifier:          tl+G5ekHv2stjdoVIxoXWZP4YaNvive/+qpzZWCgzmw=
Subject key identifier:   3F:F1:7F:1C:7B:E5:58:34:85:FF:4F:E5:E3:68:15:5B:81:38:5C:C0
Certificate issuer:       /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Certificate serial:       0200
Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:34:20 +0000
ROA not before:           Sun 01 Mar 2026 04:23:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     800
IP address blocks:        103.68.188.0/22 maxlen: 24
                          103.147.48.0/23 maxlen: 23
                          203.27.19.0/24 maxlen: 24
                          2405:a9c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
                          rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
        Validity
            Not Before: Mar  1 04:23:05 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3ebfc-7e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:f4:e7:4a:2e:3d:4d:93:15:23:9f:cf:f5:
                    c0:37:28:8e:13:eb:7a:56:57:75:17:17:eb:4e:8d:
                    d2:1d:22:b3:44:2d:a4:bf:78:67:88:e9:ea:85:b5:
                    7c:b1:62:1f:d3:83:03:93:6e:aa:5e:cd:d7:72:dd:
                    bb:b5:64:8c:36:2b:9c:84:37:2e:d9:05:b3:1e:47:
                    56:d6:b9:cb:bd:2e:59:52:e2:0c:50:a2:2e:18:26:
                    b2:26:0b:9e:28:09:06:c9:3e:f5:b8:e3:9d:7b:6d:
                    02:25:10:2a:b8:fb:59:88:54:9c:7a:d8:81:81:37:
                    c8:9e:a2:76:57:05:ac:e6:b7:4a:a6:b9:56:9c:36:
                    6c:37:6f:a0:bb:ba:74:0c:29:e6:a9:a7:6e:0f:75:
                    2a:13:96:40:56:9d:c9:ae:fb:46:91:5b:80:04:b4:
                    31:6a:6e:98:db:4f:2f:e9:52:5d:17:dc:36:0c:d9:
                    91:4d:49:57:34:4a:ee:35:7e:12:d3:75:3e:1f:44:
                    d6:de:74:14:9c:ec:01:4b:bc:10:fd:94:57:58:d3:
                    cc:90:8c:16:e9:2d:b7:77:c5:af:2a:dd:a3:9f:f8:
                    5c:65:65:60:ab:a9:8b:d8:7a:c7:8d:3d:e9:24:ad:
                    27:6b:25:21:86:b7:c6:0f:2f:2d:d8:a1:c4:e7:ee:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F1:7F:1C:7B:E5:58:34:85:FF:4F:E5:E3:68:15:5B:81:38:5C:C0
            X509v3 Authority Key Identifier:
                keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.188.0/22
                  103.147.48.0/23
                  203.27.19.0/24
                IPv6:
                  2405:a9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:5e:62:62:df:f1:21:d8:8f:e0:4a:e6:76:2f:b3:9d:7c:e7:
         5f:5c:b0:75:44:75:4f:87:68:a0:ce:4b:39:07:64:17:ed:44:
         e1:57:e0:fd:21:90:e4:df:49:0b:dd:b0:e6:ad:47:49:6d:80:
         db:7c:47:9b:d4:30:0d:26:18:34:42:b1:79:27:a7:19:df:ed:
         fe:21:75:05:a1:80:fd:5e:04:9f:ff:de:9e:26:5c:52:e2:50:
         6e:55:42:25:66:40:da:cd:4e:85:c6:63:a5:be:4b:c0:88:72:
         c5:01:27:10:b8:82:63:51:d0:1b:71:83:8e:7c:5b:64:05:46:
         d6:96:d3:66:65:40:82:98:e9:ab:e0:d0:3c:d4:87:6c:20:9d:
         96:3b:b3:30:45:ef:83:cf:12:d9:7d:d6:58:b8:ad:25:5a:48:
         9e:19:cc:eb:ad:6c:fb:03:e6:9e:37:57:70:8f:eb:64:ea:a1:
         31:b2:8c:1c:86:60:4a:62:2b:02:87:5a:6a:63:5e:9d:ea:3d:
         7a:2b:97:75:08:e9:17:f8:6a:26:8c:7e:c1:5f:46:fa:b0:1f:
         bd:15:49:e9:65:b7:e4:8b:66:05:78:b7:df:b5:ee:bf:b2:ef:
         e1:8b:74:46:0f:5c:48:cd:b4:08:d5:55:18:53:e9:a0:90:8b:
         a4:eb:bd:a7
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc3QUQxMTAvBgNVBAUTKDdDOUY3MjIyOUVEMTEyNTk0Qzc3MjJEM0MyMUI1MTA1
RTI5RkM0OEEwHhcNMjYwMzAxMDQyMzA1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWJmYy03ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArk/050ouPU2TFSOfz/XANyiOE+t6Vld1FxfrTo3SHSKzRC2kv3hniOnqhbV8
sWIf04MDk26qXs3Xct27tWSMNiuchDcu2QWzHkdW1rnLvS5ZUuIMUKIuGCayJgue
KAkGyT71uOOde20CJRAquPtZiFScetiBgTfInqJ2VwWs5rdKprlWnDZsN2+gu7p0
DCnmqaduD3UqE5ZAVp3JrvtGkVuABLQxam6Y208v6VJdF9w2DNmRTUlXNEruNX4S
03U+H0TW3nQUnOwBS7wQ/ZRXWNPMkIwW6S23d8WvKt2jn/hcZWVgq6mL2HrHjT3p
JK0nayUhhrfGDy8t2KHE5+727wIDAQABo4ICezCCAncwHQYDVR0OBBYEFD/xfxx7
5Vg0hf9P5eNoFVuBOFzAMB8GA1UdIwQYMBaAFHyfciKe0RJZTHci08IbUQXin8SK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdBRC9DRTZDMjM3QTIw
QTgxMUVFOTg2MzdGMjNDNEY5QUUwMi9mSjl5SXA3UkVsbE1keUxUd2h0UkJlS2Z4
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZKOXlJcDdSRWxsTWR5TFR3aHRSQmVLZnhJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjc3QUQvQ0U2QzIzN0EyMEE4MTFFRTk4NjM3RjIzQzRGOUFFMDIvMEQ5OTMxOTAw
NkYwMTFFRkE4QzhENDQ1QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQCZ0S8AwQBZ5MwAwQAyxsTMA0EAgACMAcDBQAkBanAMA0GCSqGSIb3
DQEBCwUAA4IBAQDEXmJi3/Eh2I/gSuZ2L7OdfOdfXLB1RHVPh2igzks5B2QX7UTh
V+D9IZDk30kL3bDmrUdJbYDbfEeb1DANJhg0QrF5J6cZ3+3+IXUFoYD9XgSf/96e
JlxS4lBuVUIlZkDazU6FxmOlvkvAiHLFAScQuIJjUdAbcYOOfFtkBUbWltNmZUCC
mOmr4NA81IdsIJ2WO7MwRe+DzxLZfdZYuK0lWkieGczrrWz7A+aeN1dwj+tk6qEx
sowchmBKYisCh1pqY16d6j16K5d1COkX+GomjH7BX0b6sB+9FUnpZbfki2YFeLff
te6/su/hi3RGD1xIzbQI1VUYU+mgkIuk672n
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:40 2026 by rpki-client