Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
File:                     37FE0B120C0011EAA414FC4AC4F9AE02.roa (raw, json)
Hash identifier:          u4SRnXxFN/h4OIsUBv1jRsmNV4FZEf84nLAb4GJslCo=
Subject key identifier:   B0:65:E9:96:85:18:6E:ED:83:5E:38:58:B3:65:9B:C8:38:9F:34:D2
Certificate issuer:       /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial:       0D40
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
Signing time:             Sat 04 Jul 2026 18:18:56 +0000
ROA not before:           Sat 04 Jul 2026 18:18:56 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     40676
IP address blocks:        103.77.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
                          rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 18:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3392 (0xd40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
        Validity
            Not Before: Jul  4 18:18:56 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a494e90-af11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5c:22:69:85:43:5e:15:ba:14:98:b3:f3:b0:
                    50:4f:59:49:7a:3b:91:e6:7f:57:af:98:a9:9f:35:
                    4d:38:56:75:2b:1b:a9:c1:f5:5e:95:a4:4c:b3:04:
                    12:b3:28:42:e3:00:a6:08:cb:7e:90:3a:47:41:43:
                    7f:d7:8c:9b:8f:c2:ce:b0:f9:c0:0e:02:94:94:c4:
                    49:76:fa:1f:5b:d5:08:75:d7:28:bb:f1:f9:67:20:
                    45:48:e6:df:7a:f8:04:db:73:26:90:fb:bb:5d:d8:
                    eb:df:f3:69:ef:c9:50:b5:7c:94:83:ad:c8:52:5d:
                    49:2c:10:7d:22:71:8f:83:17:71:b4:25:04:0c:db:
                    36:43:09:48:c1:ad:43:05:77:f9:c4:6b:44:d2:f7:
                    7d:41:4e:a8:91:25:63:8d:b6:fa:ba:e2:d6:4d:28:
                    09:fa:87:41:df:92:de:5b:bc:d2:20:a5:d6:66:f3:
                    38:8e:9e:3a:49:87:e8:06:fe:9a:e6:24:04:16:80:
                    b4:47:7a:74:67:55:73:cb:0d:11:61:03:56:b7:39:
                    1c:c9:10:2e:4c:e1:3c:09:13:48:c8:a6:b0:da:c7:
                    59:a7:ed:ca:c8:a8:22:56:a5:47:b1:7f:14:4a:cd:
                    03:3f:e0:77:46:69:03:37:50:3e:14:a8:96:7f:e1:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:65:E9:96:85:18:6E:ED:83:5E:38:58:B3:65:9B:C8:38:9F:34:D2
            X509v3 Authority Key Identifier:
                keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:1b:4a:d1:2f:9a:d0:1c:27:ed:6f:6a:ca:24:f5:15:f9:4a:
         1f:86:14:c4:22:06:f1:84:fc:5b:ea:9e:85:bf:16:db:25:62:
         89:1e:3a:b7:f1:7a:7c:89:99:74:bf:11:82:af:e1:1d:09:6f:
         2b:5c:7e:20:ea:b2:e5:b3:87:d1:f5:96:45:da:d5:2c:4f:de:
         e2:3d:ba:b4:8e:ac:d0:5d:ba:50:e2:87:1c:79:f1:79:f8:a4:
         f1:ae:27:b8:0a:7b:3b:37:b9:bb:20:8a:a2:77:d1:8d:f5:fd:
         49:08:2e:99:2f:b8:83:a7:6d:ff:a3:ac:5c:63:c3:fb:9b:22:
         06:06:51:eb:ad:03:d3:a8:bb:c9:20:a2:44:e7:b4:de:17:23:
         cd:db:75:11:f3:a0:90:3c:04:f4:6a:38:51:d0:0d:d4:60:3e:
         a3:8d:85:3b:c7:a2:66:73:ff:88:e6:91:85:35:c9:2a:75:8c:
         e5:dc:85:23:39:96:d6:f7:8c:7c:aa:c2:25:52:fb:82:36:ad:
         8f:65:9c:d4:85:04:36:e6:ce:fe:79:82:63:cc:31:75:d0:18:
         36:73:b9:3c:c3:57:9c:ca:30:9c:49:b9:82:fd:ae:a9:bb:eb:
         d2:91:7e:3c:08:56:72:d9:ef:ba:b3:33:5e:35:db:f0:46:05:
         59:cd:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:39:31 2026 by rpki-client