Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/D5F2D9B05B3011EDB926E484C4F9AE02.roa
File:                     D5F2D9B05B3011EDB926E484C4F9AE02.roa (raw, json)
Hash identifier:          zHIuXhJuua3d/FrfHB2nn1+uLtJTB4Dt0l0B9tO8EvY=
Subject key identifier:   C0:FC:8B:59:34:64:AE:2C:5C:70:80:D7:D3:6F:F3:4E:5A:C7:EA:D4
Certificate issuer:       /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A
Certificate serial:       0276
Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/D5F2D9B05B3011EDB926E484C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:54:25 +0000
ROA not before:           Fri 27 Feb 2026 01:21:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133422
IP address blocks:        103.77.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl
                          rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A
        Validity
            Not Before: Feb 27 01:21:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69a43701-0e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:e4:f5:37:f2:ee:8e:37:df:df:ea:18:16:
                    93:79:11:57:70:63:c7:16:31:a6:38:05:42:fa:be:
                    78:f1:e1:20:5c:18:db:bb:7e:4b:01:11:c9:6f:f0:
                    98:24:69:6e:8f:6e:84:f0:f1:02:bc:80:02:12:99:
                    f3:47:25:14:83:4a:12:8f:a5:ec:b6:0b:85:fa:4a:
                    25:af:8c:cf:e9:18:78:24:cf:01:80:9f:32:74:95:
                    7e:03:e5:9c:8d:34:92:09:96:0d:cf:6c:83:8d:f2:
                    4e:fa:cc:e3:b1:ef:49:4d:fd:f2:e1:93:5f:60:02:
                    59:4e:a8:85:a2:0d:fb:9c:42:dc:ad:32:20:19:7a:
                    1a:70:ed:71:e3:fb:66:29:47:8f:42:fd:cb:18:71:
                    64:0c:74:b9:40:79:4c:a7:dd:57:2f:5e:f6:da:55:
                    1a:66:19:7e:73:2d:d7:6e:79:0b:9d:21:dd:2e:ab:
                    d7:58:24:f9:2f:8f:9a:4f:46:da:3d:32:31:6f:28:
                    c5:e5:6d:79:a9:1a:47:fa:54:29:a1:a4:26:60:9c:
                    ff:d2:d4:ca:42:90:fe:c7:66:83:c5:7d:e4:a6:f7:
                    98:f4:02:04:c2:50:c6:2b:2e:db:77:ea:c3:c6:9d:
                    4d:f3:3a:fb:49:97:7e:e3:f3:2a:62:ee:96:24:f6:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:8B:59:34:64:AE:2C:5C:70:80:D7:D3:6F:F3:4E:5A:C7:EA:D4
            X509v3 Authority Key Identifier:
                keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/D5F2D9B05B3011EDB926E484C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:5d:52:92:45:d7:a2:97:ab:52:d3:1d:8f:b8:73:f9:aa:06:
         fd:e1:7e:83:e7:75:a3:22:04:1c:f2:16:44:a6:bd:4e:7d:66:
         28:62:15:da:ec:ff:44:9f:4d:9b:b4:2c:72:7a:c0:e7:ca:66:
         b1:85:95:13:d6:37:94:47:b8:d2:1c:4c:ca:44:21:b7:98:ea:
         35:73:d5:a7:c4:d5:78:7a:f4:ca:84:3c:2d:06:a4:be:fd:e5:
         e0:a0:27:a4:2f:dc:c2:03:a8:65:76:3c:7f:72:7f:97:06:4a:
         62:cd:6a:35:f7:e5:72:b8:1a:1f:84:21:da:2c:ce:8c:29:4a:
         77:ba:49:8e:17:f5:bc:94:8a:cc:54:2c:b9:92:c7:c7:9c:88:
         da:88:9c:e2:07:70:e6:78:f4:e6:1f:d4:73:5f:a2:ae:c7:f4:
         56:32:2b:e4:e1:c8:db:ef:22:f7:d6:2d:e3:0b:8b:f8:9e:43:
         60:5b:e1:91:6a:69:0f:db:14:4c:33:d5:9d:91:85:00:e6:b0:
         85:97:11:0c:f5:df:ae:5d:42:c9:7a:c0:ff:3d:bf:43:df:95:
         07:4d:f8:a2:d1:fe:58:95:45:69:f4:51:9a:c5:ef:07:9e:42:
         bb:43:54:29:c3:fe:e6:56:26:51:b7:a1:6c:49:7b:7a:30:e6:
         88:b1:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:51 2026 by rpki-client