Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/F27C04B8779E11E997C0204AC4F9AE02.roa
File:                     F27C04B8779E11E997C0204AC4F9AE02.roa (raw, json)
Hash identifier:          gcXkSl5BDm7BPmptXZao6xrfNU8xKrBthGWtRyIpA9Y=
Subject key identifier:   3B:C5:21:C0:A7:24:D3:66:05:AA:64:41:54:55:F4:78:E4:30:F7:73
Certificate issuer:       /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial:       0FEB
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/F27C04B8779E11E997C0204AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:48:26 +0000
ROA not before:           Tue 28 Oct 2025 17:36:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134702
IP address blocks:        103.77.188.0/22 maxlen: 22
                          103.77.188.0/23 maxlen: 23
                          103.77.188.0/24 maxlen: 24
                          103.77.189.0/24 maxlen: 24
                          103.77.190.0/23 maxlen: 23
                          103.77.190.0/24 maxlen: 24
                          103.77.191.0/24 maxlen: 24
                          2407:9d80::/32 maxlen: 32
                          2407:9d80::/48 maxlen: 48
                          2407:9d80:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
                          rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 17:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4075 (0xfeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
        Validity
            Not Before: Oct 28 17:36:05 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a443aa-f524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:ca:89:b5:08:e5:47:27:18:9d:78:4e:f5:
                    50:5f:33:03:71:b7:72:b3:f8:42:55:c6:d7:5d:f0:
                    2c:1d:57:68:8f:7e:1c:37:d6:db:d5:bf:18:5a:a7:
                    87:9b:fd:7a:94:45:2d:e5:28:7f:4c:b6:60:cc:95:
                    50:39:d2:08:0a:ec:2c:fa:86:9b:d2:f8:c9:d3:90:
                    de:00:16:8e:01:1c:0b:59:28:c0:dd:de:7c:f1:2d:
                    a7:fc:80:b6:ff:e1:2c:78:30:f4:fc:3c:36:11:bc:
                    73:cf:a2:f3:99:62:93:d0:e5:50:46:b7:1f:8b:3f:
                    4b:dc:20:d1:e0:88:f5:b2:45:94:fa:95:f6:2f:31:
                    c6:b1:24:55:1a:b3:b4:8e:04:7e:20:85:31:ad:2d:
                    b9:68:29:06:d9:af:56:3a:14:ce:ce:e1:88:ba:6b:
                    91:48:2f:0f:11:f0:b2:88:56:8c:5e:ae:80:5c:7e:
                    80:32:51:ce:61:bb:68:ed:3a:80:a3:48:02:70:ae:
                    01:cc:f6:0a:e7:9c:8e:72:93:41:3b:a4:14:aa:1f:
                    6f:f7:a2:23:51:05:81:5e:a6:26:c7:4c:15:d3:9d:
                    46:9c:44:c1:36:41:15:c9:56:29:f9:5b:fa:86:25:
                    4f:65:9e:d9:85:af:dc:37:dd:fd:61:5c:db:f7:a5:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C5:21:C0:A7:24:D3:66:05:AA:64:41:54:55:F4:78:E4:30:F7:73
            X509v3 Authority Key Identifier:
                keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/F27C04B8779E11E997C0204AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.188.0/22
                IPv6:
                  2407:9d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:53:e8:80:f7:96:76:a5:97:37:33:15:cb:d0:4d:3e:b9:6b:
         a0:5d:53:00:c4:a1:db:bf:de:05:16:ce:d0:b9:6f:83:5c:68:
         6c:b7:b5:9c:a1:de:b3:0a:d2:3e:5e:84:69:4f:ea:04:37:97:
         b5:c4:c8:52:9d:ac:2b:d1:69:a7:17:d0:bd:47:24:99:95:64:
         40:11:08:f5:fc:e2:2a:db:5e:24:93:3d:7c:d0:0d:ce:96:f5:
         50:af:5b:93:d2:12:64:7a:4d:5d:c0:f5:d5:d6:77:c2:20:bc:
         0a:da:3e:67:46:7e:18:03:82:f0:9c:a1:be:a1:a4:87:f3:a3:
         59:d6:4a:ec:de:17:64:81:b3:ff:92:cb:00:ec:03:05:31:aa:
         22:36:4e:37:aa:e9:1e:e2:ed:39:59:c3:16:97:88:5d:3e:39:
         39:32:24:ef:51:c4:69:b3:27:3a:8d:64:66:eb:61:d3:19:08:
         60:31:45:fe:32:f3:40:01:31:1e:55:de:6c:b6:75:28:fb:b2:
         3b:6c:7e:02:40:6b:4e:d7:f5:f8:8e:58:e5:21:46:bc:c4:0a:
         da:ab:1a:59:e5:64:85:58:d9:11:1b:5f:58:d8:91:f2:97:92:
         5d:e9:dd:95:3b:9f:6d:b8:58:c8:b2:c0:ef:41:23:c6:7f:c8:
         b8:72:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:55:17 2026 by rpki-client