Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/7BD12E3A480811EE8C512B0DC4F9AE02.roa
File:                     7BD12E3A480811EE8C512B0DC4F9AE02.roa (raw, json)
Hash identifier:          a/aSh7H+9BOPAN+WcSvePCOi0af08D3dWGvwlCEpYQk=
Subject key identifier:   4A:40:98:9C:35:31:93:56:78:18:A8:A6:A0:E2:F1:BF:73:12:1A:67
Certificate issuer:       /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial:       1072
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/7BD12E3A480811EE8C512B0DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:39:29 +0000
ROA not before:           Thu 10 Apr 2025 17:56:43 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     4237
IP address blocks:        203.12.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
                          rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4210 (0x1072)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
        Validity
            Not Before: Apr 10 17:56:43 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a479d1-c420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:73:57:ae:54:ff:05:2d:cd:c9:23:6d:32:
                    1f:73:29:c2:05:aa:ba:ad:72:3a:7f:33:d2:d5:5e:
                    6f:ee:74:bc:6a:ec:7e:bb:b6:81:7d:bb:c6:ae:33:
                    63:ef:49:3d:3a:ea:b4:3d:66:a4:1f:81:8d:82:d5:
                    aa:7b:a6:10:92:16:fe:ba:7c:98:58:3a:78:83:27:
                    15:21:62:62:f9:4b:9c:a8:35:64:f0:5e:6a:62:75:
                    62:ca:c9:28:cc:c8:c8:19:ea:3b:09:ac:58:d1:d9:
                    a7:6f:06:34:7a:67:1c:c8:47:92:59:47:d9:d5:63:
                    a6:84:65:6f:7e:60:db:94:9e:dd:01:88:57:9e:cc:
                    14:4a:23:07:d2:16:0b:32:a3:41:58:dd:cf:0f:0f:
                    b7:ae:28:f4:a1:ed:29:9c:0b:e8:1e:7a:9c:73:b8:
                    20:95:27:79:8a:ca:3f:4e:0d:26:32:8a:e4:17:3d:
                    1a:5a:fb:14:07:cf:a2:4c:6f:db:92:97:8c:42:9e:
                    45:f4:40:87:6e:5d:f2:c1:3c:8b:24:b7:48:9c:5e:
                    83:fe:19:42:be:36:eb:6e:98:e4:70:e6:d1:b2:a0:
                    46:7a:74:ba:5c:71:bc:60:b9:79:e8:47:1c:48:cb:
                    5d:f5:8a:a0:04:ee:8a:fd:52:d1:62:2f:47:ad:cd:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:40:98:9C:35:31:93:56:78:18:A8:A6:A0:E2:F1:BF:73:12:1A:67
            X509v3 Authority Key Identifier:
                keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/7BD12E3A480811EE8C512B0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:00:51:c4:30:93:5c:f8:0a:f3:26:12:aa:9e:21:ad:64:a0:
         c2:2d:0b:c1:97:1c:9d:89:98:57:7b:91:49:a4:34:bc:89:ad:
         ef:7d:61:8d:f8:2f:06:92:16:3d:18:5e:96:de:5c:b2:e4:42:
         0f:f4:0e:d4:aa:06:44:1d:0e:65:61:98:7b:2e:b2:90:f7:1a:
         11:99:fd:c5:0b:ab:ff:9e:2a:ea:d7:5c:dd:87:c9:82:e9:6d:
         e4:33:a4:52:ab:9c:cd:65:5c:c8:11:52:3c:48:0b:85:77:0a:
         d5:ff:48:04:51:0b:c8:12:2a:0a:b5:81:2b:9b:87:bf:a7:57:
         4c:3a:30:83:a3:f5:75:15:b4:8b:ec:57:39:31:ca:ec:ab:00:
         7d:77:9f:ea:05:81:fc:c1:07:a4:bc:20:5a:17:e4:98:0f:09:
         e7:ac:00:0c:78:62:50:4b:fd:bd:5e:ba:9d:3b:7b:8a:14:60:
         30:49:a1:41:ec:9b:f4:76:a7:93:cd:36:c4:9a:9d:7a:0f:90:
         f9:1a:51:7c:e6:3d:d4:a4:be:9a:d3:34:ad:dc:b6:f8:20:b7:
         24:3f:dd:46:27:30:59:68:3b:d2:29:9a:6a:2b:d0:d0:e6:76:
         76:fd:c4:4e:48:f2:d7:c4:a7:fe:b8:2d:26:e3:c5:09:d6:4b:
         53:aa:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:11 2026 by rpki-client