Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa
File:                     AA13A4AC58BA11F08C19015DC4F9AE02.roa (raw, json)
Hash identifier:          ko2iUI+6VJrdx0BgTYfNfhBY0Rxq/g01bkhis7NPnhk=
Subject key identifier:   85:F1:27:86:85:CF:69:50:9F:19:29:25:0A:58:9F:F9:42:BE:70:36
Certificate issuer:       /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
Certificate serial:       83
Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:55:41 +0000
ROA not before:           Thu 01 Jan 2026 02:21:38 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     135632
IP address blocks:        103.77.9.0/24 maxlen: 24
                          103.77.10.0/24 maxlen: 24
                          103.77.11.0/24 maxlen: 24
                          116.206.164.0/24 maxlen: 24
                          116.206.165.0/24 maxlen: 24
                          116.206.166.0/24 maxlen: 24
                          116.206.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl
                          rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003
        Validity
            Not Before: Jan  1 02:21:38 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a48bad-ad07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:49:f8:49:e0:ce:95:fe:01:a5:7d:04:33:
                    70:45:b8:40:e9:d1:eb:71:52:ae:04:78:21:13:a2:
                    60:05:17:e5:b1:b2:14:2f:8b:33:bf:ed:78:b6:48:
                    4d:5a:e5:29:95:67:4e:6f:10:b6:4c:c7:08:45:37:
                    e5:df:03:aa:c6:9c:f2:44:ad:b3:01:29:2c:95:8e:
                    41:4b:0c:7b:2b:0e:36:20:c7:6a:d5:61:2d:c3:59:
                    70:5d:a4:e1:01:cf:86:c3:9c:c1:e6:fe:66:c6:ea:
                    e2:9a:f1:e4:cf:f6:cf:22:c8:a4:ef:ed:39:0a:84:
                    8d:e0:3c:df:93:84:d3:4a:df:c9:42:92:52:58:1f:
                    84:8d:5d:6c:4b:65:bb:60:68:98:03:d9:71:4b:bb:
                    35:85:22:f2:8e:d2:f1:7b:1a:7a:ae:36:e5:8d:06:
                    bc:fa:21:33:a8:b2:4f:03:56:d4:e9:f9:fc:60:d0:
                    c8:92:60:96:4f:b5:89:d9:9f:02:0c:45:64:f4:80:
                    81:c0:c2:e0:23:9e:1c:9c:a4:e5:c7:e2:0c:d8:be:
                    62:39:6e:a2:57:d4:24:3e:2a:a4:4d:0d:ae:6d:52:
                    eb:15:d7:d7:cc:5e:b8:ec:de:1e:f9:10:d6:6d:b2:
                    ee:c2:2c:ae:26:e9:f4:03:27:f2:ed:c7:16:63:97:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F1:27:86:85:CF:69:50:9F:19:29:25:0A:58:9F:F9:42:BE:70:36
            X509v3 Authority Key Identifier:
                keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.9.0-103.77.11.255
                  116.206.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:f3:81:a7:ee:7f:f4:06:8d:86:6a:5b:9b:0d:56:7e:04:
         ab:d0:79:5f:d8:d9:96:9c:32:7a:24:3a:cb:2b:5b:64:7e:5a:
         8d:c2:09:7e:8c:21:9a:d4:c1:11:94:f5:86:d7:d4:00:25:62:
         e9:ae:dd:98:57:a4:af:dd:52:47:3a:72:be:97:dc:73:6c:4c:
         fb:9e:57:e1:df:bd:3d:97:75:80:a5:cb:73:81:ba:05:4a:cb:
         f2:50:47:7c:c9:98:9d:8f:64:a7:ac:69:b5:52:f0:6c:eb:28:
         33:07:99:67:cc:3f:05:dd:b5:96:15:6f:a3:61:b8:d6:9a:68:
         cd:ea:eb:f6:02:5c:08:f8:21:7f:9d:e6:3e:27:2a:a2:3c:4a:
         8b:9e:6d:1f:9a:ec:35:37:1d:ef:33:0a:af:cd:9b:b6:57:a9:
         a0:bb:d5:40:b0:ad:99:6c:c1:c5:f1:3d:7e:3a:69:5f:1f:f7:
         04:27:4d:af:c3:b1:f6:ed:f7:0c:94:f6:ab:62:ba:8f:2e:4c:
         9d:11:42:ea:c9:17:62:c1:72:e2:57:45:6e:a4:54:a8:30:74:
         a0:74:4e:84:fe:29:e3:e0:cc:db:01:8e:a9:b3:49:4e:cc:a5:
         e8:78:f7:46:52:76:35:4c:72:83:d5:51:06:1c:34:1d:79:fe:
         57:a6:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:21 2026 by rpki-client