Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa
File:                     7C754058415411ED8133414DC4F9AE02.roa (raw, json)
Hash identifier:          yWFxqgc57Lpty88+MtSZirY1smEBvRoN1cv9SnBzAuw=
Subject key identifier:   61:8E:12:FD:0D:05:35:32:3E:80:CD:79:60:87:CC:E9:6B:81:DC:BA
Certificate issuer:       /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial:       0308
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:27:54 +0000
ROA not before:           Tue 23 Sep 2025 02:20:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150125
IP address blocks:        103.191.77.0/24 maxlen: 24
                          2001:df1:5540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
                          rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 01:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
        Validity
            Not Before: Sep 23 02:20:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a44cea-1a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:d4:66:c1:ea:cf:d1:86:35:e9:6a:92:e0:
                    ea:14:42:bb:8e:b1:de:46:6b:dd:2b:3a:57:58:83:
                    20:d9:9a:ad:01:24:91:8d:5f:ee:f7:91:c5:d7:4d:
                    ba:0c:f8:85:c3:3d:d9:e4:6d:30:5f:30:2e:40:3b:
                    88:ad:74:8a:a8:2e:e2:6b:5f:e6:65:ca:5d:9b:96:
                    00:f7:6f:be:e1:86:ac:0c:b2:0d:f1:fc:ca:3a:7d:
                    66:2a:a3:52:b0:f3:37:20:3d:3f:c8:a0:9d:81:b1:
                    35:06:9c:cf:c3:5a:01:50:03:74:c1:24:a8:56:f5:
                    4f:59:eb:3c:9a:bb:07:c5:18:56:53:03:98:ae:5d:
                    6f:60:5b:18:48:e1:a9:60:4d:2d:58:c0:54:a4:c2:
                    ed:58:1a:c5:8f:7b:60:3c:5c:d9:27:51:49:62:f8:
                    71:c9:bc:dd:92:b1:13:b8:21:5d:e3:5e:bb:a8:7d:
                    d9:af:a3:2b:90:56:69:0a:27:8c:c4:a6:8c:71:0e:
                    69:58:89:fd:d7:42:9d:8d:65:43:6d:01:1a:7b:35:
                    19:ed:8d:e7:be:28:dc:51:ce:4b:5a:b6:68:fa:df:
                    bc:72:16:fa:7f:c4:5d:34:58:5d:e7:cb:d8:9e:43:
                    f9:2d:50:21:ca:c9:3f:6e:df:ef:68:33:85:45:3d:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8E:12:FD:0D:05:35:32:3E:80:CD:79:60:87:CC:E9:6B:81:DC:BA
            X509v3 Authority Key Identifier:
                keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/7C754058415411ED8133414DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.77.0/24
                IPv6:
                  2001:df1:5540::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:23:3b:d8:07:35:33:40:67:dd:af:b5:cb:e7:a8:ee:2f:4f:
         e6:43:45:c4:25:7c:2e:cc:82:d8:18:9e:57:b9:8b:7b:0e:c3:
         63:c9:84:e8:0c:29:92:ed:94:6a:ba:22:b4:0c:9a:6d:65:f6:
         2e:57:23:9a:d4:ee:6b:67:8b:71:48:8f:aa:a3:ef:6b:84:a7:
         aa:11:42:af:5b:2c:3c:fd:55:95:8f:8c:6a:c9:88:dc:5e:53:
         a0:2f:4c:3a:93:a6:8e:35:35:35:04:ee:88:31:09:4f:1a:1c:
         d0:7e:d3:d1:0f:dc:ae:b5:e1:ae:4e:a0:d1:56:12:c2:ac:62:
         50:f1:38:17:87:ee:50:21:1c:bb:c8:74:b6:f5:84:6d:42:44:
         30:5e:da:20:ca:5f:a1:b8:54:80:c6:87:c2:62:33:86:8a:27:
         2f:70:77:be:38:a5:a5:52:86:01:b1:bf:d1:b0:41:b1:a2:68:
         1c:2f:df:38:44:bd:7c:bd:b4:62:2c:3c:43:de:33:d7:43:a9:
         49:5b:d8:49:a9:42:72:70:53:fd:7d:3c:0a:c0:e3:c0:61:df:
         1e:41:d6:06:78:e6:32:4c:8d:da:4e:5e:c4:08:a3:e3:1a:e3:
         25:f3:08:67:65:0d:7a:81:f0:a9:c4:fe:47:96:39:fb:bc:2b:
         73:5c:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:22:10 2026 by rpki-client