Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/9D77DCA4599A11ECA574BF52C4F9AE02.roa
File:                     9D77DCA4599A11ECA574BF52C4F9AE02.roa (raw, json)
Hash identifier:          +QpDQgaKDgA4jgwCETbDA10J+dE7YQ9N+DpzerwOFaY=
Subject key identifier:   98:64:E4:6D:66:69:B4:20:CB:87:A1:FA:54:09:6E:15:5B:1A:B4:C5
Certificate issuer:       /CN=A91A65C4/serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821
Certificate serial:       04DB
Authority key identifier: 3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/9D77DCA4599A11ECA574BF52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:19:56 +0000
ROA not before:           Thu 18 Dec 2025 23:20:15 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149281
IP address blocks:        103.177.220.0/23 maxlen: 24
                          2001:df0:2bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl
                          rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A65C4, serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821
        Validity
            Not Before: Dec 18 23:20:15 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44b0c-d914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:24:d5:c5:25:92:34:27:61:cf:33:76:9f:
                    a8:05:af:0c:4e:c0:62:ec:b5:f2:7d:7e:3c:67:74:
                    57:f2:95:e6:bf:95:4b:e5:48:b2:84:10:65:d8:5d:
                    cd:5c:84:49:de:6b:ea:22:80:9f:10:57:09:b2:ec:
                    7d:84:98:8e:49:34:38:df:1a:ed:40:15:72:fe:15:
                    ee:87:b4:c7:18:4a:ab:44:01:47:1e:b4:78:52:4e:
                    80:1a:d8:3e:3a:63:3e:e0:e7:be:f9:e4:93:55:b6:
                    7f:01:fd:bb:ed:23:0e:72:99:71:28:27:82:36:6c:
                    57:aa:d6:c8:b2:d3:9d:bf:52:f7:6a:eb:da:37:a1:
                    15:03:19:fa:29:9c:c6:10:51:3e:27:d7:74:70:64:
                    01:92:24:c4:13:e1:f9:58:40:c2:87:61:68:e3:af:
                    ee:30:11:42:8e:56:b7:87:d4:1a:b6:c1:bc:41:f3:
                    8e:d8:21:df:97:ea:c2:69:a9:80:ae:ca:0e:77:82:
                    f1:49:bf:0d:77:7e:5c:ae:4b:3f:51:eb:d2:58:44:
                    f7:5a:76:ac:4c:aa:b6:dd:27:ec:c2:50:e0:f5:b9:
                    4d:79:e3:cf:4d:a8:13:2a:cf:f8:c3:42:bb:a7:50:
                    25:38:4e:44:16:80:a5:09:03:96:a8:27:dd:61:08:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:64:E4:6D:66:69:B4:20:CB:87:A1:FA:54:09:6E:15:5B:1A:B4:C5
            X509v3 Authority Key Identifier:
                keyid:3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/9D77DCA4599A11ECA574BF52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.220.0/23
                IPv6:
                  2001:df0:2bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:84:8d:12:c1:3d:4e:46:eb:32:7a:b8:81:83:d5:2e:ca:80:
         92:70:b4:0c:ab:c3:98:5a:3e:86:a1:08:e5:54:8d:2c:e5:7b:
         56:fa:0d:15:8b:a2:a7:33:4a:d2:4f:2e:ec:d2:2a:f2:5f:41:
         7a:0d:1c:f6:d5:94:b7:bb:9e:b6:e7:1e:56:8f:2f:ab:97:e2:
         2c:a2:b8:e0:d6:88:f7:72:b4:61:be:c0:9e:39:66:8b:c2:17:
         62:ba:71:5b:c6:53:63:56:35:16:bc:19:95:c6:59:3c:d8:18:
         90:b3:99:43:76:0d:f4:cb:50:9b:3e:d2:ee:0d:32:11:d4:54:
         47:dc:fb:31:24:c4:63:42:e9:ec:4e:64:41:93:d5:a9:65:aa:
         27:5c:43:ab:94:f1:1f:92:1e:78:88:52:89:5a:24:be:04:64:
         d5:7b:57:31:83:98:b8:f2:9d:37:52:28:b8:e5:86:1e:96:11:
         ba:a5:8a:af:a5:5c:33:51:cf:a4:c7:e0:b3:71:94:64:1a:c8:
         63:d7:7a:e7:68:e5:dc:ef:44:aa:26:ce:f9:04:f6:ea:c6:87:
         17:6e:05:a1:95:aa:d3:0d:3e:73:95:c3:a8:0b:de:a5:e1:92:
         92:8a:77:30:cc:ba:f7:e5:ac:fa:73:1b:12:71:b6:88:c4:d1:
         3e:3e:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:12 2026 by rpki-client