Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/95C77970B7F011F0819F626AC4F9AE02.roa
File:                     95C77970B7F011F0819F626AC4F9AE02.roa (raw, json)
Hash identifier:          H/6JljXNVLF3ZyLYlvEQptLlxaALDK1WeJa15vHt6/A=
Subject key identifier:   32:F8:9A:7F:C6:F1:BA:92:45:2A:8A:9B:DF:2E:01:4E:B0:C0:1D:98
Certificate issuer:       /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial:       052D
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/95C77970B7F011F0819F626AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:50:15 +0000
ROA not before:           Tue 02 Dec 2025 22:57:08 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     206675
IP address blocks:        103.177.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
                          rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113066, serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
        Validity
            Not Before: Dec  2 22:57:08 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46e47-1e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:12:92:29:54:fb:f2:49:09:7a:d8:3e:5e:
                    98:e3:bc:53:f9:96:bd:ab:50:91:96:42:0a:e3:07:
                    bf:72:7a:4a:d8:3c:9c:17:e1:05:3e:f6:9b:56:ed:
                    30:52:20:76:23:a9:73:3e:bb:1f:23:05:bf:27:d8:
                    1a:dc:7a:cb:e7:1a:78:42:99:b3:f5:14:41:64:e4:
                    24:4c:0f:b5:01:29:d5:a1:dd:bb:be:5c:73:dc:e5:
                    ca:aa:97:0d:60:03:bf:71:40:ff:18:52:55:18:a5:
                    a2:65:e8:af:0a:24:62:85:1e:05:4c:e3:94:59:fa:
                    83:35:83:ed:6b:e6:45:40:a3:ca:49:47:d2:1f:4a:
                    78:d4:97:57:e0:c3:04:06:77:b2:65:f0:c4:43:0f:
                    72:91:52:3b:71:f5:e3:3d:23:73:ab:ae:98:2b:58:
                    14:8a:df:1f:a9:ef:6c:4b:ab:1f:b5:31:0e:cd:9c:
                    85:27:ed:e2:84:01:4f:5f:56:6a:16:50:b7:18:69:
                    e4:ec:49:73:73:b8:89:f0:4e:93:d8:27:7f:c8:78:
                    78:2d:87:a1:a5:ad:a4:56:67:89:a8:60:4d:38:3b:
                    cc:84:a5:78:22:cb:2a:0a:e2:85:5d:3c:a6:e8:6c:
                    28:4a:c8:10:4c:66:04:16:d8:ff:4d:08:d1:48:82:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F8:9A:7F:C6:F1:BA:92:45:2A:8A:9B:DF:2E:01:4E:B0:C0:1D:98
            X509v3 Authority Key Identifier:
                keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/95C77970B7F011F0819F626AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:fc:73:62:b9:79:09:9f:24:31:a4:ea:92:c2:ce:9b:a2:
         9f:29:b0:33:c3:b6:82:9f:02:66:fa:e0:83:42:46:4c:f1:86:
         0c:9c:73:e6:f1:a1:4b:3c:bf:ec:28:ad:c1:dc:4c:0b:31:b3:
         46:27:7e:77:6c:1d:b7:88:5d:d5:3d:ec:1b:9b:e9:9f:23:71:
         1f:03:df:4c:88:66:72:32:b1:47:84:1b:be:10:2f:f3:97:62:
         8e:d6:5d:3b:ad:dd:f2:22:6d:c0:fc:96:be:98:5d:03:2d:b3:
         0d:f3:94:de:65:d3:a4:ec:fb:2a:5e:65:fc:d3:c5:c2:35:18:
         61:53:c8:2c:f2:37:50:1c:d8:94:d8:bb:df:8f:80:0a:c5:c1:
         3c:1e:a1:b2:e8:25:e5:34:7c:18:84:9b:99:51:77:e9:48:f9:
         dd:46:14:41:52:d7:bf:5f:e5:34:70:55:a7:99:fe:ce:2f:0c:
         87:e4:44:cf:c6:51:fe:65:a8:14:88:af:b9:61:2c:cb:13:d6:
         11:e2:d6:5a:0f:f6:1e:07:a3:3a:d3:88:13:34:ba:81:04:e4:
         8b:ed:22:b4:df:ae:eb:79:e2:fe:bd:d1:cb:98:22:e4:63:1f:
         7a:81:2d:b7:6a:26:f9:32:0b:a3:a3:54:de:e0:d4:99:2d:f0:
         83:3b:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:52 2026 by rpki-client