Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
File:                     777244A4506A11EE8D08A11BC4F9AE02.roa (raw, json)
Hash identifier:          cHa7YclYlDuD3d6uVoFpYSql4Y83b6GnqkLI1omuRXw=
Subject key identifier:   57:AB:C2:02:D4:34:7F:81:28:EF:53:CB:B3:E7:B0:2C:76:CB:79:15
Certificate issuer:       /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Certificate serial:       025F
Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:26:09 +0000
ROA not before:           Wed 27 Aug 2025 03:07:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     131465
IP address blocks:        103.49.146.0/24 maxlen: 24
                          2001:df2:e940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
        Validity
            Not Before: Aug 27 03:07:43 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3ea11-af46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:e5:4f:1d:90:eb:db:1b:d0:1c:ef:09:1c:
                    3f:37:c1:a4:62:e0:6d:10:33:52:8d:88:ad:4b:6e:
                    b2:14:26:97:a4:cc:09:2c:c3:4c:b8:44:09:dd:39:
                    08:77:fd:c6:bc:87:d1:30:a5:50:ab:52:fd:28:eb:
                    3d:20:7a:03:6f:99:23:9b:bb:08:e9:4f:2a:6c:b0:
                    9f:10:26:a4:f2:ea:cf:2a:52:79:25:eb:60:bf:ce:
                    df:d8:b9:ed:14:e8:67:59:a9:9f:41:94:c3:1e:60:
                    69:20:54:68:9a:a4:29:e3:ca:42:73:33:23:51:84:
                    3e:e2:e1:89:ca:6d:d6:b9:56:cd:2d:2a:fc:08:69:
                    43:fd:76:bb:6e:a0:85:56:f7:e6:7a:bd:8f:32:0e:
                    89:a0:2a:4d:2b:78:32:04:10:6c:1e:83:0e:1f:cd:
                    26:51:0d:9e:e9:d4:d8:a0:9f:dc:31:42:c0:84:eb:
                    da:fd:d6:4d:e5:c5:94:ed:0e:62:45:c9:93:c8:63:
                    4e:bf:9e:6c:c3:11:55:bc:2e:e6:3a:19:3c:39:98:
                    fc:a5:9f:ce:50:2a:6f:e1:00:8c:06:fe:28:38:44:
                    07:52:e0:4a:2a:b1:8e:dd:b0:7f:c4:ef:81:2b:b4:
                    c7:bc:5a:b8:1d:c8:49:2c:19:2a:14:4e:90:8c:2b:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:C2:02:D4:34:7F:81:28:EF:53:CB:B3:E7:B0:2C:76:CB:79:15
            X509v3 Authority Key Identifier:
                keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.146.0/24
                IPv6:
                  2001:df2:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:33:7a:3b:15:2f:4b:38:33:ba:86:2e:a5:6b:cf:04:ad:38:
         2e:69:4a:03:32:44:8c:a2:16:73:02:a5:ed:8f:ab:50:74:94:
         75:c5:db:06:cd:c0:69:42:61:de:33:31:c9:40:fc:7a:ce:78:
         cf:8f:08:db:bc:6d:47:13:1a:03:63:35:8f:12:9d:77:31:be:
         3b:42:4c:e7:8c:7c:9c:c3:c9:a9:8f:27:15:ad:9b:27:f7:63:
         62:f7:70:3b:94:f3:49:46:a5:c5:0b:84:78:7e:12:53:ef:f4:
         8a:c6:74:98:1a:d4:aa:0e:1b:fe:eb:b0:2c:83:43:ff:b6:19:
         cc:7c:39:e0:fa:65:63:cd:24:82:9a:7c:13:6b:9a:17:a2:eb:
         00:8b:67:14:6a:a1:d1:11:0c:05:c0:72:d0:c8:58:a1:7d:91:
         e1:2c:86:44:de:d7:1f:47:78:de:7a:c6:70:6c:53:21:ec:76:
         47:f3:77:99:6e:b9:96:fe:60:8d:c6:ac:d9:65:18:3d:97:c2:
         d6:0f:a6:55:0b:a3:dd:5f:02:3a:70:54:0a:7e:7a:5c:1d:ea:
         30:79:20:a2:96:1b:db:be:90:b8:91:cf:31:e8:78:b7:93:7e:
         6a:f6:9e:bc:e9:28:71:29:cf:a2:d3:b8:1b:01:b2:74:b3:7e:
         e9:00:56:bd
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1
QkE2REMxOTQwHhcNMjUwODI3MDMwNzQzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWExMS1hZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvnlTx2Q69sb0BzvCRw/N8GkYuBtEDNSjYitS26yFCaXpMwJLMNMuEQJ3TkI
d/3GvIfRMKVQq1L9KOs9IHoDb5kjm7sI6U8qbLCfECak8urPKlJ5Jetgv87f2Lnt
FOhnWamfQZTDHmBpIFRomqQp48pCczMjUYQ+4uGJym3WuVbNLSr8CGlD/Xa7bqCF
Vvfmer2PMg6JoCpNK3gyBBBsHoMOH80mUQ2e6dTYoJ/cMULAhOva/dZN5cWU7Q5i
RcmTyGNOv55swxFVvC7mOhk8OZj8pZ/OUCpv4QCMBv4oOEQHUuBKKrGO3bB/xO+B
K7THvFq4HchJLBkqFE6QjCtVrwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFerwgLU
NH+BKO9Ty7PnsCx2y3kVMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC
RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDZERUMvRDQyMTc5NEE4QkVFMTFFREE3QjNENTIyQzRGOUFFMDIvNzc3MjQ0QTQ1
MDZBMTFFRThEMDhBMTFCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZzGSMA8EAgACMAkDBwAgAQ3y6UAwDQYJKoZIhvcNAQELBQADggEB
AEszejsVL0s4M7qGLqVrzwStOC5pSgMyRIyiFnMCpe2Pq1B0lHXF2wbNwGlCYd4z
MclA/HrOeM+PCNu8bUcTGgNjNY8SnXcxvjtCTOeMfJzDyamPJxWtmyf3Y2L3cDuU
80lGpcULhHh+ElPv9IrGdJga1KoOG/7rsCyDQ/+2Gcx8OeD6ZWPNJIKafBNrmhei
6wCLZxRqodERDAXActDIWKF9keEshkTe1x9HeN56xnBsUyHsdkfzd5luuZb+YI3G
rNllGD2XwtYPplULo91fAjpwVAp+elwd6jB5IKKWG9u+kLiRzzHoeLeTfmr2nrzp
KHEpz6LTuBsBsnSzfukAVr0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:38 2026 by rpki-client