Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9442231871C311EEB4110C83C4F9AE02.roa
File:                     9442231871C311EEB4110C83C4F9AE02.roa (raw, json)
Hash identifier:          CtXBhxoisr4SYK/f9f/omh5fKwAOo6P6cylFnj5/1Yo=
Subject key identifier:   89:39:B6:98:25:ED:A1:F7:7B:6D:01:1B:77:10:8D:14:BC:9F:1E:42
Certificate issuer:       /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial:       01F8
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9442231871C311EEB4110C83C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:53:08 +0000
ROA not before:           Thu 23 Oct 2025 05:18:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151797
IP address blocks:        103.77.210.0/23 maxlen: 24
                          2401:3620::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
        Validity
            Not Before: Oct 23 05:18:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46ef4-e926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:96:30:6b:9f:2b:69:e9:71:36:43:76:91:
                    13:a5:b5:9c:96:ce:47:4a:99:f5:3b:da:90:71:4c:
                    eb:51:b7:a8:00:01:5c:2c:f0:12:9b:b8:69:f2:98:
                    be:0b:58:ce:1c:70:de:a5:85:b8:88:0d:68:04:b7:
                    13:96:3d:68:b1:af:3e:c2:4a:b1:7f:02:ed:5f:50:
                    18:5a:d1:02:0c:ab:73:09:83:21:ac:49:e2:7e:c1:
                    d7:29:33:d0:39:ac:b6:70:7b:df:e2:0a:1a:da:db:
                    7a:8b:6d:26:50:f4:9a:29:31:6b:a8:24:87:0e:a8:
                    b8:90:a4:3a:b7:cf:e4:ff:0a:a4:62:59:c5:bf:5a:
                    79:6f:58:11:db:8e:f4:b5:c6:17:39:41:80:ae:ae:
                    06:0b:0d:df:7f:1e:05:2b:b5:84:fa:a1:06:8b:23:
                    b2:40:d5:fd:39:16:94:66:ba:e8:63:4f:85:16:aa:
                    33:50:25:45:0f:1c:c2:68:a6:11:15:94:0f:ca:c6:
                    22:cf:0f:4f:90:ca:c0:80:85:0e:8d:4f:2c:6b:b5:
                    cf:aa:0e:ce:f8:20:d6:de:58:bc:6c:21:e6:09:ac:
                    44:10:b9:68:22:f0:3b:50:fc:db:b3:e1:47:9f:fc:
                    f9:3f:93:cf:d0:79:fb:cd:13:55:a4:8c:c4:c8:54:
                    e1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:B6:98:25:ED:A1:F7:7B:6D:01:1B:77:10:8D:14:BC:9F:1E:42
            X509v3 Authority Key Identifier:
                keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9442231871C311EEB4110C83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.210.0/23
                IPv6:
                  2401:3620::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:04:6d:81:a7:38:a7:93:8f:99:49:b0:3a:74:5d:fe:fc:
         35:6c:24:7e:0a:bf:88:cc:8a:9b:28:d0:8c:61:0c:1b:15:95:
         db:f6:86:9d:48:c1:a5:9f:03:3b:5e:0c:2e:6f:32:a7:e3:d4:
         f1:63:4f:b5:bd:a0:50:d0:bc:23:2b:ef:b9:20:7c:02:3f:9f:
         f6:a0:41:50:ec:bf:09:aa:29:44:aa:86:f6:1a:da:fa:50:e4:
         ac:58:8a:80:9f:f1:d2:66:26:ca:30:34:01:f8:92:80:a2:b2:
         14:d8:1a:f8:a3:ca:46:6f:3d:aa:f2:40:dd:d5:6a:48:b0:70:
         44:48:b7:b6:91:5a:3d:da:48:52:e0:09:0b:af:82:c1:be:e2:
         24:44:f5:4d:56:9c:e8:de:b3:10:29:c9:6d:7d:0e:e1:30:14:
         b4:c2:8b:0d:1c:b6:b3:44:04:57:76:bf:13:10:db:c2:ac:b6:
         3a:87:9a:c5:0f:a6:dc:a9:de:b4:bf:7c:01:8b:aa:49:5e:88:
         7e:b7:dc:c7:f4:ad:1e:67:f6:9a:43:35:bd:28:1d:48:75:18:
         74:27:0c:d0:15:11:4b:67:a2:15:48:26:a1:bd:1f:84:50:ff:
         b5:60:d8:d3:4f:8c:5b:ea:1d:28:6d:cb:aa:f2:8f:e4:36:91:
         b0:22:b6:45
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw
RjQ1QjUzNUIwHhcNMjUxMDIzMDUxODQ2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmVmNC1lOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGSWMGufK2npcTZDdpETpbWcls5HSpn1O9qQcUzrUbeoAAFcLPASm7hp8pi+
C1jOHHDepYW4iA1oBLcTlj1osa8+wkqxfwLtX1AYWtECDKtzCYMhrEnifsHXKTPQ
Oay2cHvf4goa2tt6i20mUPSaKTFrqCSHDqi4kKQ6t8/k/wqkYlnFv1p5b1gR2470
tcYXOUGArq4GCw3ffx4FK7WE+qEGiyOyQNX9ORaUZrroY0+FFqozUCVFDxzCaKYR
FZQPysYizw9PkMrAgIUOjU8sa7XPqg7O+CDW3li8bCHmCaxEELloIvA7UPzbs+FH
n/z5P5PP0Hn7zRNVpIzEyFThJQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIk5tpgl
7aH3e20BG3cQjRS8nx5CMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy
MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY3OEMvMjgyMzE1RDA1MjAwMTFFRUFBODY2QjY5QzRGOUFFMDIvOTQ0MjIzMTg3
MUMzMTFFRUI0MTEwQzgzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ03SMA0EAgACMAcDBQAkATYgMA0GCSqGSIb3DQEBCwUAA4IBAQAV
qgRtgac4p5OPmUmwOnRd/vw1bCR+Cr+IzIqbKNCMYQwbFZXb9oadSMGlnwM7Xgwu
bzKn49TxY0+1vaBQ0LwjK++5IHwCP5/2oEFQ7L8JqilEqob2Gtr6UOSsWIqAn/HS
ZibKMDQB+JKAorIU2Br4o8pGbz2q8kDd1WpIsHBESLe2kVo92khS4AkLr4LBvuIk
RPVNVpzo3rMQKcltfQ7hMBS0wosNHLazRARXdr8TENvCrLY6h5rFD6bcqd60v3wB
i6pJXoh+t9zH9K0eZ/aaQzW9KB1IdRh0JwzQFRFLZ6IVSCahvR+EUP+1YNjTT4xb
6h0obcuq8o/kNpGwIrZF
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:25 2026 by rpki-client