Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
File:                     76D77AC4DEE211F08292771D536F56BC.roa (raw, json)
Hash identifier:          I8A0BRWtFoiO6HPJbiHupABxhkv49Fv07jCrHqTGOzg=
Subject key identifier:   65:17:6D:36:1E:71:90:F9:52:84:A0:42:83:C6:3C:FD:0B:02:76:3B
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       0150
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
Signing time:             Sun 29 Mar 2026 05:17:47 +0000
ROA not before:           Sun 29 Mar 2026 05:17:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        45.121.215.0/24 maxlen: 24
                          103.62.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Mar 29 05:17:46 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69c8b5fa-72c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:8e:5a:32:d1:7a:89:82:be:32:75:3c:e5:
                    68:e5:b4:02:e3:a3:b1:f8:27:1f:4d:72:22:cd:ec:
                    31:b3:9e:79:89:30:04:31:6f:48:a2:d1:5e:e6:3e:
                    01:d6:92:90:56:c1:db:d2:27:b0:b0:a6:44:9f:42:
                    5a:6a:21:cd:db:f8:39:a8:68:15:80:68:46:bb:0a:
                    1e:6f:92:3f:9c:80:5d:1c:b9:6d:ee:f0:5e:c8:65:
                    ea:87:d7:8b:65:ed:e9:84:b5:df:ac:ed:3d:98:a0:
                    25:57:26:77:83:15:44:f4:28:d5:75:b8:42:03:7f:
                    9b:a3:a9:cb:cd:c9:e2:d0:77:94:f7:b9:02:2d:c0:
                    70:9c:ba:3d:07:2e:8d:56:5d:a4:c1:5d:46:74:3e:
                    6e:11:a7:f2:d4:65:57:3f:e5:9f:3b:49:76:e6:66:
                    c4:f8:e6:b4:72:33:80:fd:52:48:70:1b:c3:d8:e2:
                    e9:90:49:d4:67:ef:41:97:8a:d6:a4:22:dd:d0:5b:
                    de:c9:b2:5b:b3:3d:65:98:04:a0:ac:a2:ee:ef:3f:
                    f3:66:32:39:3a:b9:22:e0:5b:db:ad:2a:3e:36:71:
                    f6:d9:af:bc:3d:bf:ae:e9:e6:94:27:e4:2b:73:8d:
                    bb:22:f3:1a:87:d5:4b:f7:dc:78:50:63:81:e7:12:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:6D:36:1E:71:90:F9:52:84:A0:42:83:C6:3C:FD:0B:02:76:3B
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.215.0/24
                  103.62.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:6f:b9:fc:a3:b2:e1:23:77:ff:b7:98:de:af:86:95:22:
         65:3b:79:98:7d:b9:84:82:e9:6d:47:00:14:c2:bc:79:cc:70:
         cc:9f:94:2c:d9:ca:62:30:18:a3:c1:ca:1d:d7:19:69:e6:f9:
         4e:80:95:d4:66:d7:0c:a7:e2:bb:8b:84:92:cb:c2:b8:34:88:
         a7:c6:22:53:fc:47:2a:55:81:d6:20:90:ea:55:18:78:75:e3:
         f5:4b:09:74:38:3c:79:00:82:ca:a7:85:ca:51:32:83:24:e8:
         39:dc:3f:2a:cc:9c:f5:81:fc:a1:07:8b:9b:48:33:35:cf:5a:
         03:12:f8:12:f6:d9:e2:5b:4d:a4:97:4d:9d:93:bd:07:99:66:
         1d:46:ce:ab:e0:1c:46:4a:ae:b6:bd:fd:55:1a:eb:02:fb:c3:
         a1:5a:d6:af:81:4a:c5:94:34:90:e1:a4:b9:1d:ff:62:a2:e1:
         a9:4c:45:20:a7:41:da:32:59:ef:1d:c7:a6:6b:a1:c2:0e:96:
         0f:52:22:b2:4d:7a:b4:1f:24:5a:15:6f:17:18:25:83:dd:ec:
         a5:81:61:5f:59:15:7d:8c:d5:d0:94:64:c5:85:00:a9:c1:61:
         f2:da:35:e7:86:83:48:5c:b2:45:ca:35:29:a5:b3:31:08:4c:
         d7:32:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:13:49 2026 by rpki-client