Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/7A7B776A1F0E11EA92AA6824C4F9AE02.roa
File:                     7A7B776A1F0E11EA92AA6824C4F9AE02.roa (raw, json)
Hash identifier:          gxk+S+SUlMn2ngV82PSC9JOZzFOOnOePusJT8k4+nyo=
Subject key identifier:   79:52:DA:B7:85:0C:76:90:05:9F:9F:AC:D4:7B:7E:C0:75:A7:41:97
Certificate issuer:       /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial:       0C7C
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/7A7B776A1F0E11EA92AA6824C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:02:18 +0000
ROA not before:           Wed 18 Dec 2024 19:17:26 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     139849
IP address blocks:        103.146.66.0/23 maxlen: 23
                          103.146.66.0/24 maxlen: 24
                          103.146.67.0/24 maxlen: 24
                          2001:df2:4e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
                          rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
        Validity
            Not Before: Dec 18 19:17:26 2024 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69a4630a-9893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:25:cf:f1:a2:e2:13:b5:04:f4:6e:67:3d:
                    b4:8e:8d:fb:fb:80:f2:e0:2f:7a:5e:50:12:10:24:
                    af:5b:79:11:8d:dc:1d:56:74:4e:e0:d6:ae:76:91:
                    99:ee:f0:70:9d:08:db:83:1b:bf:c6:a4:cf:88:73:
                    eb:f6:2e:93:f8:63:d3:91:38:8f:26:e9:f0:cf:26:
                    e1:3d:d2:56:89:90:e0:2d:a1:2a:7d:9d:ff:46:6a:
                    f4:37:2e:83:18:65:d0:70:fa:13:88:cf:82:2e:d1:
                    c1:9e:a5:52:41:c2:9a:13:81:4c:a8:8b:03:70:d1:
                    3c:f3:3d:5b:36:7b:a4:51:28:d8:f7:d3:7e:91:95:
                    28:a6:37:f3:dc:d5:19:a7:cc:42:b7:85:27:1d:4e:
                    00:4a:36:3f:e4:99:13:67:9d:6c:98:aa:04:d6:6f:
                    eb:05:78:32:d5:32:44:a5:a5:a8:d4:6c:3a:57:9d:
                    07:87:da:99:52:4e:8f:5d:98:d5:6c:36:9a:c9:f3:
                    2f:f5:64:ba:c7:6f:00:01:16:72:22:35:b5:97:56:
                    7a:49:e5:63:97:a1:20:ac:81:3d:4c:b2:98:aa:ca:
                    7c:8d:22:0a:64:b0:a3:05:45:c3:b9:72:58:e1:6f:
                    10:02:43:f3:0e:a4:bf:13:95:d8:d6:09:63:31:9e:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:DA:B7:85:0C:76:90:05:9F:9F:AC:D4:7B:7E:C0:75:A7:41:97
            X509v3 Authority Key Identifier:
                keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/7A7B776A1F0E11EA92AA6824C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.66.0/23
                IPv6:
                  2001:df2:4e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:b0:f3:64:5d:dd:4f:37:85:a4:64:9b:49:f4:d3:33:8e:4f:
         bc:c6:93:0f:71:df:c0:97:69:3d:0c:84:1e:88:dd:56:c8:3e:
         bd:95:e1:48:c8:35:7e:d6:7f:44:c3:f2:61:ef:12:ae:41:cd:
         f1:df:f5:63:61:7d:aa:b4:00:c7:97:10:20:d8:7c:ce:f7:3c:
         d7:ef:ff:88:0d:fe:14:66:40:d0:2a:69:5c:de:2f:88:6f:9a:
         f0:2f:e8:91:e1:6e:4f:b1:6a:5b:e2:55:ef:a2:f2:e4:5d:e0:
         ba:77:82:bb:bc:05:1e:53:0d:45:01:42:c8:40:dd:b8:1a:b3:
         4a:82:bd:7b:bf:17:dd:4c:a5:00:81:82:56:ab:86:67:41:77:
         a8:34:d0:8c:9e:22:0d:ae:0c:e3:5f:88:2b:f8:11:a5:06:ef:
         52:52:bc:9e:bd:db:f3:85:be:a6:e7:5c:3f:64:e9:c9:cc:2a:
         d3:5a:6a:28:30:e3:61:5f:14:b6:9f:85:63:75:68:f0:86:b9:
         a3:ee:92:b0:79:75:d8:7b:a2:1d:b0:89:e7:68:cc:80:fe:f7:
         7c:b9:ba:b9:1f:8d:23:f4:2c:09:14:ff:ae:32:ec:dc:36:c7:
         8d:1e:ea:88:53:cc:3f:3c:03:c1:f6:8a:0b:20:00:2b:ac:c7:
         26:12:f2:18
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND
OEZEODU5MzkwHhcNMjQxMjE4MTkxNzI2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjMwYS05ODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApawlz/Gi4hO1BPRuZz20jo37+4Dy4C96XlASECSvW3kRjdwdVnRO4NaudpGZ
7vBwnQjbgxu/xqTPiHPr9i6T+GPTkTiPJunwzybhPdJWiZDgLaEqfZ3/Rmr0Ny6D
GGXQcPoTiM+CLtHBnqVSQcKaE4FMqIsDcNE88z1bNnukUSjY99N+kZUopjfz3NUZ
p8xCt4UnHU4ASjY/5JkTZ51smKoE1m/rBXgy1TJEpaWo1Gw6V50Hh9qZUk6PXZjV
bDaayfMv9WS6x28AARZyIjW1l1Z6SeVjl6EgrIE9TLKYqsp8jSIKZLCjBUXDuXJY
4W8QAkPzDqS/E5XY1gljMZ4xVQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHlS2reF
DHaQBZ+frNR7fsB1p0GXMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB
NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTc4NkEvMTI2REZDOTYxQTU1MTFFQTg4MDQyMjExQzRGOUFFMDIvN0E3Qjc3NkEx
RjBFMTFFQTkyQUE2ODI0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5JCMA8EAgACMAkDBwAgAQ3yToAwDQYJKoZIhvcNAQELBQADggEB
AG6w82Rd3U83haRkm0n00zOOT7zGkw9x38CXaT0MhB6I3VbIPr2V4UjINX7Wf0TD
8mHvEq5BzfHf9WNhfaq0AMeXECDYfM73PNfv/4gN/hRmQNAqaVzeL4hvmvAv6JHh
bk+xalviVe+i8uRd4Lp3gru8BR5TDUUBQshA3bgas0qCvXu/F91MpQCBglarhmdB
d6g00IyeIg2uDONfiCv4EaUG71JSvJ692/OFvqbnXD9k6cnMKtNaaigw42FfFLaf
hWN1aPCGuaPukrB5ddh7oh2wiedozID+93y5urkfjSP0LAkU/64y7Nw2x40e6ohT
zD88A8H2igsgACusxyYS8hg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:07 2026 by rpki-client