Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/76A97C669D2C11F0AB031860C4F9AE02.roa
File:                     76A97C669D2C11F0AB031860C4F9AE02.roa (raw, json)
Hash identifier:          nYrgVLTSubmWDRhKe4G1nj7LKkIeNpniGqC8dEB+S80=
Subject key identifier:   77:29:21:04:1B:89:DF:06:6C:AA:3B:EF:22:36:A1:8B:27:98:A7:55
Certificate issuer:       /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial:       0A27
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/76A97C669D2C11F0AB031860C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:10:50 +0000
ROA not before:           Mon 29 Sep 2025 12:04:34 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        103.85.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
                          rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2599 (0xa27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
        Validity
            Not Before: Sep 29 12:04:34 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4731a-0311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b7:f2:eb:e6:fd:92:93:dc:18:cc:17:12:8d:
                    c6:b6:6d:ab:24:08:93:74:05:45:a5:5f:e9:94:d9:
                    f2:eb:2a:2f:f5:02:e2:55:88:23:a6:12:fc:74:e1:
                    e2:91:dd:f1:17:57:b9:33:8d:59:68:ac:c4:32:55:
                    01:d1:dd:0a:d0:f5:61:48:16:e9:e0:eb:f3:bb:92:
                    2c:4d:d5:b0:00:35:16:6c:af:40:b7:bc:4c:43:85:
                    85:ba:c3:98:df:17:ed:b5:17:6f:ec:6f:cd:31:20:
                    8b:5f:31:94:86:be:0f:d0:9b:57:1d:fd:4a:79:2c:
                    aa:20:b2:a6:a2:96:ab:cd:b4:14:70:a2:98:25:ff:
                    7b:72:15:cc:8f:ca:b8:07:11:cd:34:5a:3d:cf:0e:
                    c3:44:61:b8:38:6c:5f:19:94:cb:78:15:f8:46:02:
                    dd:dc:8a:89:d2:b0:df:f7:b5:20:26:6c:c8:66:30:
                    45:f3:01:c2:1e:87:3c:01:6e:40:f0:32:ee:56:24:
                    9f:5d:a5:e3:95:34:c8:02:24:9a:77:01:35:6d:a0:
                    c5:e5:51:02:11:04:6c:7a:51:b1:23:eb:92:e0:1d:
                    3c:5d:15:fd:02:1f:00:28:20:88:bf:bc:e7:26:a9:
                    96:81:47:d7:22:dd:2f:96:35:b9:46:1d:d5:6c:bc:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:29:21:04:1B:89:DF:06:6C:AA:3B:EF:22:36:A1:8B:27:98:A7:55
            X509v3 Authority Key Identifier:
                keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/76A97C669D2C11F0AB031860C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:41:be:b1:49:6f:75:0d:ee:26:e1:c5:41:99:38:8f:05:c8:
         2f:5a:6c:d6:95:61:6f:19:12:3d:78:a0:00:d2:4e:cf:33:5a:
         f2:dd:6e:cb:7f:39:34:1d:45:a1:3a:2c:85:6b:6a:ba:d5:67:
         31:d2:93:9a:f8:56:99:51:1b:92:10:a7:20:af:ba:b4:01:79:
         bb:86:23:2f:7a:3f:eb:a6:e8:10:01:a1:94:80:19:93:75:9f:
         5d:03:b6:0a:d5:80:c0:36:aa:16:b2:cb:54:b0:a3:48:50:ff:
         ac:5f:90:c5:b7:20:0e:ab:78:b6:a6:1c:0e:44:ba:6f:f2:68:
         1f:29:50:3a:2b:82:47:58:f8:2e:09:f2:9a:1d:8f:e2:ec:a3:
         f7:2c:5d:96:41:80:e6:eb:da:0c:38:d2:79:e1:cd:12:83:21:
         b9:83:05:7d:6a:f5:7f:23:bb:bf:8c:bc:9b:9f:98:c2:3b:42:
         34:07:68:0c:c4:2d:a4:0f:2b:d6:fd:ad:39:c4:84:f4:ac:93:
         19:52:ca:00:00:8b:de:bd:ac:38:50:27:c7:e8:31:33:49:63:
         8c:1c:85:2e:cb:d7:0b:21:fa:67:0f:2f:f9:15:2c:0f:7a:23:
         67:58:64:03:69:32:4c:3a:b9:aa:91:52:d0:d2:3b:21:fc:85:
         ec:f1:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:07 2026 by rpki-client