Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/77A9961E2CAB11F1BF46ABE0C7833773.roa
File:                     77A9961E2CAB11F1BF46ABE0C7833773.roa (raw, json)
Hash identifier:          Q5XGonUjw8sQ01LaKIAaeB4qGlcPxvCGGCZQLk20yVo=
Subject key identifier:   EF:D1:B2:8B:89:83:89:78:23:D1:CB:53:75:DF:55:D2:BD:EA:82:89
Certificate issuer:       /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
Certificate serial:       0115
Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/77A9961E2CAB11F1BF46ABE0C7833773.roa
Signing time:             Fri 05 Jun 2026 06:38:28 +0000
ROA not before:           Fri 05 Jun 2026 06:38:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     215748
IP address blocks:        103.56.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl
                          rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275
        Validity
            Not Before: Jun  5 06:38:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a226ee4-7d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:d2:30:5f:87:3a:0a:2d:00:57:d7:95:d2:
                    cb:e9:6e:5b:09:28:57:f4:b0:b2:e9:7c:76:5d:f2:
                    e5:40:c2:08:76:2e:95:c1:5f:06:35:28:34:b2:eb:
                    61:4f:46:93:d8:c5:fe:9e:f3:3f:f0:d1:79:0b:d6:
                    3f:f8:1b:f8:30:73:92:12:ec:d2:a6:d0:ed:55:d7:
                    a3:a9:c8:8c:52:65:b5:a0:e9:09:ed:58:6a:29:de:
                    9c:11:6a:d5:72:9a:84:55:57:19:7a:2f:98:b1:3c:
                    1a:99:4f:b9:ad:ad:c5:2a:f2:75:77:27:2b:4b:59:
                    56:41:30:06:ce:fd:ef:15:29:47:02:af:c5:45:e6:
                    ad:0d:65:b3:09:21:11:64:a2:d4:51:75:a9:9c:22:
                    af:ad:8e:3e:24:22:3a:13:80:62:f0:e6:97:ba:1a:
                    52:e1:a0:aa:b8:93:d7:fc:da:d5:da:03:9e:d8:21:
                    ec:3f:71:ed:0d:e6:84:eb:a9:bd:c9:e6:aa:1f:13:
                    cb:e7:ae:4b:d5:d8:6e:91:cb:f7:15:2a:4c:8e:b2:
                    21:e7:39:01:6c:c3:71:fa:d2:db:ad:5c:85:b8:50:
                    ad:f2:b8:bc:6a:85:a6:1e:27:a9:24:ee:93:d6:f6:
                    3d:af:dc:05:c0:11:c7:42:89:04:99:5e:99:ca:21:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D1:B2:8B:89:83:89:78:23:D1:CB:53:75:DF:55:D2:BD:EA:82:89
            X509v3 Authority Key Identifier:
                keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/77A9961E2CAB11F1BF46ABE0C7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:48:d1:38:d5:2b:ed:e6:f7:17:3f:70:9d:f6:12:4c:fb:7b:
         57:d3:bf:0b:57:df:03:c5:45:3d:f7:42:02:13:af:71:7a:07:
         be:56:af:0c:ba:d2:2b:be:a9:3e:9c:cb:a4:6e:20:cf:04:ad:
         b7:36:9f:2b:e5:3a:c5:c6:6a:8c:ce:bd:e1:74:1a:ac:bc:94:
         3b:4f:99:61:f3:29:31:99:97:ad:cf:2a:31:20:8c:53:38:fc:
         77:fa:8b:fa:a6:25:05:f4:93:f3:42:a6:c4:5d:6e:c5:6b:3b:
         bf:d2:02:91:5b:2a:89:d2:72:bd:f9:02:a8:9c:f1:ee:98:48:
         5b:ca:e7:f9:f3:7e:02:98:97:70:b1:a0:7b:d7:98:c2:5d:7f:
         ab:21:d9:91:6a:54:9a:2e:89:b9:90:49:a4:1e:d1:3f:8c:6c:
         e8:3d:cc:f1:c5:be:69:7b:22:c4:4d:68:0d:d0:6f:cf:13:4c:
         d6:b6:c9:d7:c1:b2:6b:b9:4c:7f:69:23:3e:76:49:d8:30:75:
         a9:82:64:a4:f2:a2:0d:02:e1:4f:36:70:d8:31:84:89:5f:8f:
         da:35:c7:12:11:80:51:4b:31:33:bb:a1:00:8a:4b:86:0d:86:
         c7:4a:c8:35:74:62:e0:d5:95:46:ad:d2:09:f4:b9:a6:9b:50:
         45:24:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:35:50 2026 by rpki-client