Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/5773966456D011EE9C8F8C56C4F9AE02.roa
File:                     5773966456D011EE9C8F8C56C4F9AE02.roa (raw, json)
Hash identifier:          V94XCH+V6AH+/jsR1uuPC4R2sBLnX4SmOxfv0adXwxs=
Subject key identifier:   02:92:C3:E9:E7:16:A8:CE:DA:AF:C3:F7:9C:B5:2C:16:31:43:EC:53
Certificate issuer:       /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
Certificate serial:       01DB
Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/5773966456D011EE9C8F8C56C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:19:13 +0000
ROA not before:           Mon 27 Oct 2025 05:47:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151799
IP address blocks:        103.77.180.0/23 maxlen: 23
                          103.77.180.0/24 maxlen: 24
                          103.77.181.0/24 maxlen: 24
                          203.26.225.0/24 maxlen: 24
                          2401:dea0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl
                          rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
        Validity
            Not Before: Oct 27 05:47:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a458f1-67e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:c8:66:b3:8b:a8:b6:9f:f8:26:e3:6f:0a:
                    4a:b9:6c:09:fa:e6:16:df:77:9f:79:dd:e9:c8:7d:
                    22:1a:74:01:c9:cf:f9:4a:86:bf:51:39:64:22:25:
                    53:53:03:6a:62:ff:af:ad:33:97:6b:5e:f3:e1:58:
                    7c:2a:9e:93:30:97:76:96:9d:fb:ce:b0:0d:3a:5a:
                    09:4f:35:80:24:41:e5:70:bc:92:c6:9d:54:0c:c5:
                    10:4e:32:e5:1d:64:86:4b:de:1d:72:2d:8d:fd:3e:
                    90:59:26:21:6c:b7:2d:29:97:02:66:2e:cc:47:3d:
                    d6:3a:88:83:7c:12:70:a9:b8:27:f7:58:73:23:a7:
                    de:0c:87:7e:9a:28:e5:2a:b7:6b:a2:30:be:45:9f:
                    30:b6:12:28:72:ac:af:8e:8a:d3:0b:f6:6d:99:76:
                    0b:fc:ae:f8:b8:74:f5:e3:cb:ec:57:b2:5c:1c:d4:
                    3d:49:92:9a:ec:30:aa:b1:17:2e:ab:f8:79:9f:4f:
                    da:9f:ce:bb:2c:8a:6f:6f:0f:d2:17:bc:3c:22:a0:
                    7a:66:e2:a1:c4:bf:14:d9:8d:4b:25:39:cb:56:f7:
                    59:26:21:47:de:12:75:78:98:27:4f:90:03:28:b4:
                    ee:94:a2:91:1b:29:ce:32:99:dd:f0:c3:f3:cb:4f:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:92:C3:E9:E7:16:A8:CE:DA:AF:C3:F7:9C:B5:2C:16:31:43:EC:53
            X509v3 Authority Key Identifier:
                keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/5773966456D011EE9C8F8C56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.180.0/23
                  203.26.225.0/24
                IPv6:
                  2401:dea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:69:97:7f:b7:45:1f:95:ae:4d:75:7e:11:a3:0b:39:0d:
         3f:4a:76:6a:ff:05:d0:d0:92:61:ce:b5:f6:50:de:49:b9:fa:
         c4:6a:58:22:5d:42:a6:fa:95:e0:5f:f0:d6:5b:14:20:81:85:
         52:87:8b:50:02:5b:59:43:4d:59:07:9f:30:5d:04:ff:c5:d7:
         4c:89:b5:7e:30:e1:69:63:91:8e:4e:23:0e:f7:2e:72:02:96:
         04:b1:7b:25:37:6f:c5:92:f3:51:7c:45:c2:88:8a:4a:f7:8b:
         ff:e1:f9:e8:39:ba:13:40:eb:d1:61:9d:9b:53:cb:b1:b0:d7:
         95:c4:c3:ea:5e:5d:5e:fc:a1:19:be:ab:d7:43:b2:4d:72:c8:
         f0:b3:d5:49:52:25:e9:51:1c:72:54:15:2c:55:af:e3:ce:72:
         2e:82:89:31:aa:db:91:c6:18:8c:3b:a9:04:41:64:68:53:cb:
         cb:b4:a9:ce:d7:d2:d0:6c:e2:b4:d6:86:26:ea:b6:55:be:87:
         7a:fa:09:30:4c:59:90:a6:d2:a2:6c:37:6d:9c:ba:10:7d:68:
         7c:bb:13:73:b3:f7:c4:50:8c:78:80:9b:d5:24:d7:56:59:10:
         34:f8:52:a8:9a:52:e2:54:56:37:ad:96:5e:ea:8f:84:23:ab:
         cf:9a:7b:3c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQxQzMxMTAvBgNVBAUTKDE4N0EyRDM1QkFGOTA1N0MwRjBCOEQyNjJEMkU1RDYy
MjZBMzIzODIwHhcNMjUxMDI3MDU0NzM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NThmMS02N2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQDIZrOLqLaf+CbjbwpKuWwJ+uYW33efed3pyH0iGnQByc/5Soa/UTlkIiVT
UwNqYv+vrTOXa17z4Vh8Kp6TMJd2lp37zrANOloJTzWAJEHlcLySxp1UDMUQTjLl
HWSGS94dci2N/T6QWSYhbLctKZcCZi7MRz3WOoiDfBJwqbgn91hzI6feDId+mijl
KrdrojC+RZ8wthIocqyvjorTC/ZtmXYL/K74uHT148vsV7JcHNQ9SZKa7DCqsRcu
q/h5n0/an867LIpvbw/SF7w8IqB6ZuKhxL8U2Y1LJTnLVvdZJiFH3hJ1eJgnT5AD
KLTulKKRGynOMpnd8MPzy0+DlQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAKSw+nn
FqjO2q/D95y1LBYxQ+xTMB8GA1UdIwQYMBaAFBh6LTW6+QV8DwuNJi0uXWImoyOC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDFDMy9GQjcxQzU2NjU2
Q0YxMUVFQThDNTA0NTZDNEY5QUUwMi9HSG90TmJyNUJYd1BDNDBtTFM1ZFlpYWpJ
NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dIb3ROYnI1Qlh3UEM0MG1MUzVkWWlhakk0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkQxQzMvRkI3MUM1NjY1NkNGMTFFRUE4QzUwNDU2QzRGOUFFMDIvNTc3Mzk2NjQ1
NkQwMTFFRTlDOEY4QzU2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQBZ020AwQAyxrhMA0EAgACMAcDBQAkAd6gMA0GCSqGSIb3DQEBCwUA
A4IBAQCLZmmXf7dFH5WuTXV+EaMLOQ0/SnZq/wXQ0JJhzrX2UN5JufrEalgiXUKm
+pXgX/DWWxQggYVSh4tQAltZQ01ZB58wXQT/xddMibV+MOFpY5GOTiMO9y5yApYE
sXslN2/FkvNRfEXCiIpK94v/4fnoOboTQOvRYZ2bU8uxsNeVxMPqXl1e/KEZvqvX
Q7JNcsjws9VJUiXpURxyVBUsVa/jznIugokxqtuRxhiMO6kEQWRoU8vLtKnO19LQ
bOK01oYm6rZVvod6+gkwTFmQptKibDdtnLoQfWh8uxNzs/fEUIx4gJvVJNdWWRA0
+FKomlLiVFY3rZZe6o+EI6vPmns8
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:16 2026 by rpki-client