Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa
File:                     776893761C9F11EAB9B84F25C4F9AE02.roa (raw, json)
Hash identifier:          4ablXLJzigDQjMav8RJlsCl5xohBbLZT5yMn2LFHDVg=
Subject key identifier:   69:F4:40:19:81:2D:18:7A:56:26:E5:38:85:E6:E2:2D:42:F9:45:E0
Certificate issuer:       /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Certificate serial:       0C67
Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:43:10 +0000
ROA not before:           Thu 22 Jan 2026 19:15:39 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138605
IP address blocks:        103.134.72.0/24 maxlen: 24
                          103.155.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
        Validity
            Not Before: Jan 22 19:15:39 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4507e-67f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:aa:09:8a:46:2e:c6:40:73:81:80:94:b3:
                    56:71:52:5a:6b:9b:b3:fe:ec:8b:9c:f6:80:95:cf:
                    e9:54:be:af:5b:a9:50:99:7a:8c:60:2f:54:2d:a5:
                    2c:f1:76:6a:40:25:e2:2e:4b:e9:cf:9d:48:52:a2:
                    6f:f5:a9:b8:47:99:b6:1a:ad:a3:73:65:2e:c0:70:
                    f4:92:cb:84:7f:8b:37:fe:c5:87:a2:10:12:f4:54:
                    9d:f0:8a:7e:0e:a6:6c:a9:62:c6:06:56:c7:bc:79:
                    3d:30:01:66:b1:23:43:f9:bd:60:20:f1:4a:e8:e9:
                    68:da:f7:e0:c4:c4:b9:72:a1:7a:74:17:99:b2:1b:
                    b8:69:03:52:86:94:d8:a9:1d:49:5a:6f:77:6b:9c:
                    ba:10:f4:72:be:c7:67:c7:3f:76:b2:dc:c2:41:18:
                    e6:2e:b8:cf:f1:12:f1:87:07:d2:50:38:13:d3:51:
                    40:0a:32:47:69:ee:03:f3:7f:8b:d9:85:cd:9b:a4:
                    13:9f:6d:97:8f:83:f3:8c:56:d0:99:5f:77:4d:f8:
                    d3:5b:3b:94:64:2f:5b:ae:f7:42:a8:39:02:72:a8:
                    96:09:53:92:4b:5c:12:fc:58:0f:e9:86:da:63:2e:
                    68:73:35:98:99:b0:fa:e4:df:13:71:1b:d0:aa:98:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:40:19:81:2D:18:7A:56:26:E5:38:85:E6:E2:2D:42:F9:45:E0
            X509v3 Authority Key Identifier:
                keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.72.0/24
                  103.155.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f3:5b:f3:e4:36:2c:a7:1d:59:3b:46:ea:a6:1b:ea:cf:09:
         97:fb:48:be:d5:c2:7a:9b:94:e6:8a:70:b9:a2:69:2c:0e:f4:
         aa:8d:ff:8b:1e:5e:8c:a0:3c:43:00:63:9f:e5:76:bc:51:40:
         2d:49:79:6a:08:81:85:5a:06:a3:2e:1b:31:6f:43:e0:f9:f6:
         90:fe:6a:4c:b3:96:8e:6c:92:d5:e7:2d:5a:50:69:f2:7c:ea:
         ad:e5:06:3f:6d:8e:a0:15:5b:d7:6b:3d:13:4d:3c:8f:e8:9c:
         3f:aa:63:0a:db:e1:ef:dd:66:1e:7f:d8:01:2b:92:21:d6:df:
         d7:f6:22:b2:a8:80:c1:e2:24:2d:a7:e1:34:c3:a8:a0:a4:84:
         32:0a:1e:0a:e7:47:92:9c:91:d1:9d:d5:ee:b0:cd:22:c7:52:
         cf:c6:f0:53:4e:15:31:00:62:8a:d3:3f:e7:5d:82:29:c9:ce:
         da:ce:f2:0b:a5:99:9a:5a:78:31:21:8c:c8:96:31:f7:5d:fd:
         21:8d:b9:d3:e9:e6:9f:17:15:35:99:26:07:70:48:a4:43:30:
         f3:cb:1a:5a:a3:dd:81:2b:19:4d:0f:4f:f5:fa:5e:9c:1d:a9:
         ee:b4:47:1f:c5:21:96:83:c8:1b:54:f8:67:65:31:62:43:99:
         62:77:0c:11
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE
NjlCQzJGMzQwHhcNMjYwMTIyMTkxNTM5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTA3ZS02N2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOaqCYpGLsZAc4GAlLNWcVJaa5uz/uyLnPaAlc/pVL6vW6lQmXqMYC9ULaUs
8XZqQCXiLkvpz51IUqJv9am4R5m2Gq2jc2UuwHD0ksuEf4s3/sWHohAS9FSd8Ip+
DqZsqWLGBlbHvHk9MAFmsSND+b1gIPFK6Olo2vfgxMS5cqF6dBeZshu4aQNShpTY
qR1JWm93a5y6EPRyvsdnxz92stzCQRjmLrjP8RLxhwfSUDgT01FACjJHae4D83+L
2YXNm6QTn22Xj4PzjFbQmV93TfjTWzuUZC9brvdCqDkCcqiWCVOSS1wS/FgP6Yba
Yy5oczWYmbD65N8TcRvQqpgLtQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGn0QBmB
LRh6ViblOIXm4i1C+UXgMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD
OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTgyNTkvNTFCQjYyNUMxQzlBMTFFQUFCMThGQzE2QzRGOUFFMDIvNzc2ODkzNzYx
QzlGMTFFQUI5Qjg0RjI1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ4ZIAwQAZ5vNMA0GCSqGSIb3DQEBCwUAA4IBAQAx81vz5DYspx1Z
O0bqphvqzwmX+0i+1cJ6m5TminC5omksDvSqjf+LHl6MoDxDAGOf5Xa8UUAtSXlq
CIGFWgajLhsxb0Pg+faQ/mpMs5aObJLV5y1aUGnyfOqt5QY/bY6gFVvXaz0TTTyP
6Jw/qmMK2+Hv3WYef9gBK5Ih1t/X9iKyqIDB4iQtp+E0w6igpIQyCh4K50eSnJHR
ndXusM0ix1LPxvBTThUxAGKK0z/nXYIpyc7azvILpZmaWngxIYzIljH3Xf0hjbnT
6eafFxU1mSYHcEikQzDzyxpao92BKxlND0/1+l6cHanutEcfxSGWg8gbVPhnZTFi
Q5lidwwR
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:55 2026 by rpki-client