Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
File:                     4DC77C600A9111EEB13EAF44C4F9AE02.roa (raw, json)
Hash identifier:          2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=
Subject key identifier:   6A:A7:82:DD:1C:3B:7F:99:AB:4E:E3:56:BB:D3:AA:64:82:CD:89:8A
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0C67
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:46:48 +0000
ROA not before:           Thu 08 Jan 2026 19:15:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     64098
IP address blocks:        103.143.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Jan  8 19:15:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47b87-b505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:80:c7:28:b9:b3:64:a9:03:a1:f2:d7:60:
                    4b:ad:10:25:eb:8a:50:70:1c:09:49:3a:de:db:50:
                    f6:d8:af:6f:08:1d:54:31:5a:14:c1:53:61:62:da:
                    b9:34:34:4b:1f:83:97:b9:4d:c1:db:2a:ef:7e:70:
                    61:47:04:b1:7a:75:bb:ba:93:11:6a:ae:59:24:4a:
                    1f:49:33:bd:59:f1:d7:1e:da:9e:ac:91:57:d5:19:
                    00:f3:11:3e:a6:89:65:69:e1:33:85:82:42:fd:78:
                    26:6d:c0:90:56:48:11:fc:da:93:4e:a4:ee:85:66:
                    4f:1f:b5:01:55:3d:48:3b:5e:9b:bb:c2:56:d5:fb:
                    8a:01:dc:11:b5:a5:85:78:e5:77:96:f1:f5:7c:6f:
                    c7:28:ef:76:e5:ef:a7:43:a1:d4:21:47:5d:bb:7c:
                    af:b1:dc:e1:8e:dd:c3:a0:3c:94:a9:37:44:5d:60:
                    d7:d5:67:8a:0c:54:d0:c9:fa:b4:c1:9e:ab:45:fb:
                    53:f9:a4:8a:5b:08:ca:f8:00:8d:e7:73:0b:b3:0c:
                    30:4d:84:02:64:2d:27:da:84:80:21:14:18:28:64:
                    1d:16:f6:7d:f1:ea:88:62:cf:e3:17:78:09:16:e7:
                    93:a3:1c:60:76:92:2b:9f:94:f5:7e:05:6a:26:35:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:82:DD:1C:3B:7F:99:AB:4E:E3:56:BB:D3:AA:64:82:CD:89:8A
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:89:00:b1:51:50:68:81:42:bd:24:f0:c8:b0:3c:8d:d2:5a:
         22:6f:07:ea:fd:64:f9:7f:73:ec:cd:d5:f1:3c:7a:38:df:83:
         b8:fb:e8:67:a6:88:1e:d3:68:e2:de:86:aa:c6:88:8a:6b:71:
         fd:9f:b0:d9:0c:f4:d6:8c:2a:6a:1b:b5:fe:c8:f9:93:bc:a6:
         18:d8:5f:51:cc:b8:9e:0f:8f:87:f7:33:03:a3:76:31:e8:65:
         9a:3b:b7:db:c4:6e:1c:74:50:a7:7e:38:c1:73:d3:6b:28:79:
         8c:03:81:c8:cc:39:6f:75:79:58:51:56:e7:7e:af:ba:75:2f:
         a2:78:b3:8f:08:f2:ad:af:f2:a4:f1:c2:a2:ef:4b:b3:3d:ad:
         04:ee:5d:9a:03:97:a9:8c:e0:f8:6a:f5:3f:1b:58:a1:4e:11:
         1c:5e:62:ce:ca:aa:a4:fe:71:49:cc:ee:9e:7d:6b:84:2d:10:
         54:ce:81:13:c6:0c:73:3b:fd:00:7e:23:31:8d:63:df:47:35:
         86:50:16:92:d8:b6:ed:95:30:dd:7f:ab:2b:7c:c0:dc:ac:0a:
         8e:99:58:c2:d5:f5:63:69:7e:f6:11:8a:fa:23:26:ed:fe:d2:
         f2:a2:39:81:47:36:69:96:2a:98:ed:0f:35:1e:46:2c:a4:30:
         34:91:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:58:15 2026 by rpki-client