Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/A87EED5A7AF111EB86DC9F6CC4F9AE02.roa
File:                     A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (raw, json)
Hash identifier:          o60MWP+DlNCHL5TPTYVqrO/Lu4kM0QYf6Eyv0LamcPA=
Subject key identifier:   CF:09:D8:6D:F1:53:96:EB:9F:E3:BD:CC:39:DF:7E:0B:05:13:DA:D1
Certificate issuer:       /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Certificate serial:       131C
Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/A87EED5A7AF111EB86DC9F6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:46:09 +0000
ROA not before:           Thu 04 Dec 2025 16:46:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45577
IP address blocks:        103.77.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
                          rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4892 (0x131c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
        Validity
            Not Before: Dec  4 16:46:37 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a44321-810c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:0c:42:d8:d3:26:d4:de:57:66:eb:41:96:
                    29:25:19:97:6e:07:3e:96:8d:83:2a:d8:cd:08:47:
                    01:7e:ec:2a:5d:f4:0d:21:e5:ee:c6:dd:00:16:6f:
                    f9:f6:27:9a:97:63:71:02:ee:1f:e1:94:a4:9e:c3:
                    14:7b:47:d6:9b:b5:9d:4d:59:d5:9c:40:4a:9e:ba:
                    21:14:f8:25:68:d0:71:ec:24:53:b2:79:db:8f:19:
                    f5:f9:9e:3d:cc:de:2f:6d:8b:26:56:de:d2:61:9c:
                    65:48:7f:ed:b7:4d:a9:35:04:b9:35:08:38:ff:0e:
                    3e:62:97:7c:c9:52:4b:52:5d:12:dc:56:65:9e:79:
                    b9:c8:48:63:32:40:93:e7:f8:ec:fc:f5:6d:47:6c:
                    2a:b8:1f:18:92:54:f3:c5:8e:a7:72:21:d6:07:32:
                    48:9e:96:dc:e3:d7:a5:b2:85:fc:7d:2c:34:38:75:
                    09:75:f2:cb:f9:87:2f:f1:21:ac:2c:f9:1c:87:9e:
                    90:93:41:74:0c:87:05:4f:06:a5:52:fb:8c:6a:c2:
                    8d:4d:7a:29:07:b5:a6:49:ad:83:b3:b9:c8:c6:fd:
                    ec:80:6f:c8:3f:c6:48:d0:f3:cd:82:60:af:9e:9f:
                    1a:16:9b:ed:a9:e2:57:7c:f3:b0:04:9e:a7:ce:8f:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:D8:6D:F1:53:96:EB:9F:E3:BD:CC:39:DF:7E:0B:05:13:DA:D1
            X509v3 Authority Key Identifier:
                keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/A87EED5A7AF111EB86DC9F6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:b0:99:40:5d:ea:54:57:f3:89:69:3f:56:d4:f5:09:32:9b:
         59:3e:22:ca:43:b8:f7:ff:e8:32:18:91:00:f9:4a:82:0b:d8:
         6b:c0:9b:1c:67:d2:3c:84:12:d3:78:a0:9c:f7:68:8e:70:18:
         f9:cf:3d:76:ff:34:9c:f9:49:44:0b:ca:f9:44:61:d2:d1:13:
         8d:bf:36:8f:42:df:c4:a7:a9:87:e4:c9:b0:bf:5a:85:c3:b9:
         ca:02:a1:fa:0a:30:42:91:81:47:05:a2:66:97:46:a7:a8:f2:
         74:62:58:2d:35:5b:ee:3f:4c:44:de:64:0b:d1:96:17:ec:08:
         17:e2:5a:6f:d7:5d:93:f0:d7:9b:63:8b:81:6c:7a:a7:02:84:
         9e:d5:b3:e3:83:d7:0b:96:8a:d7:95:0e:6e:61:b8:6d:c2:7a:
         a8:3f:47:b7:a9:e0:14:a4:a8:51:66:85:0e:b3:b4:2a:8f:ff:
         e2:35:01:11:ca:ba:0d:6a:fe:e4:c6:55:3e:75:4e:45:7a:06:
         9a:c8:97:ce:c5:da:a6:08:ab:e6:e0:2d:f8:dc:57:cb:9a:d2:
         9d:e4:fb:31:62:a8:75:c7:43:b3:92:e3:6d:0d:a1:f7:34:61:
         57:fe:6b:cd:fc:e7:89:58:34:de:71:ba:18:bd:09:6a:74:12:
         aa:3c:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:11 2026 by rpki-client