Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/71FD6FA8F2E311F098475965426F56BC.roa
File:                     71FD6FA8F2E311F098475965426F56BC.roa (raw, json)
Hash identifier:          5HXjK8kqpM3j7Dq/3YKkV0LQHLdyempUvfhW1aKXLTA=
Subject key identifier:   5B:92:BB:89:A8:0F:98:37:90:C9:C3:30:0D:FB:BC:8F:36:8C:7A:3E
Certificate issuer:       /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
Certificate serial:       18A2
Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/71FD6FA8F2E311F098475965426F56BC.roa
Signing time:             Sun 01 Mar 2026 17:39:12 +0000
ROA not before:           Fri 16 Jan 2026 13:58:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154373
IP address blocks:        103.77.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl
                          rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6306 (0x18a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
        Validity
            Not Before: Jan 16 13:58:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a479c0-d1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:67:85:4f:22:02:3c:ff:40:04:ab:f8:2e:3b:
                    32:fb:27:e6:d0:fd:87:6d:c6:21:cc:c3:06:b8:40:
                    7c:fd:4f:17:2f:51:0c:25:fe:73:ea:4e:0b:87:9c:
                    53:5b:e4:0b:08:87:57:62:72:1a:cd:3f:e4:63:9b:
                    13:e6:81:f3:11:39:b0:b6:97:95:cc:38:41:08:6f:
                    5f:04:fc:2a:ce:ea:95:68:4e:e0:72:da:58:0a:e3:
                    4f:0a:83:d1:6b:19:2e:60:5f:b0:bb:43:0e:c5:7a:
                    63:fd:a1:0a:04:25:b9:bd:0a:af:65:c4:84:7e:dc:
                    4c:bf:e3:64:3d:87:3c:fc:f9:df:74:e2:1b:79:ec:
                    7a:6a:ef:c0:c8:bd:fe:60:a3:ee:d1:21:e2:03:9c:
                    a9:6c:cb:5d:c9:49:d4:c1:02:64:17:0f:25:94:ea:
                    2e:89:7f:7e:f3:ed:e8:c1:26:d0:d7:90:dd:34:4d:
                    0e:1a:28:e4:cf:38:50:e6:2e:4f:ae:2f:95:5d:00:
                    e4:af:2c:81:dd:ea:63:8c:80:e1:71:8c:7b:ba:0b:
                    32:6c:90:3b:48:87:fc:84:a1:7f:8a:c1:4e:0a:6d:
                    e6:97:8e:22:a7:32:54:77:99:23:a5:d4:77:e8:8b:
                    8b:52:da:23:be:42:a3:e0:89:4d:70:e8:e8:8d:f7:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:92:BB:89:A8:0F:98:37:90:C9:C3:30:0D:FB:BC:8F:36:8C:7A:3E
            X509v3 Authority Key Identifier:
                keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/71FD6FA8F2E311F098475965426F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:f0:e9:c3:9d:51:cf:28:5b:95:2e:f3:86:31:8a:57:04:
         80:55:8e:90:52:7e:87:63:48:dd:a7:a8:76:93:da:7d:d8:60:
         fd:5e:fc:df:a3:72:0d:f5:fc:04:dd:53:3c:69:03:4b:0a:0e:
         c2:f8:7f:76:d6:b3:15:86:86:7f:9a:bb:a7:57:d4:97:0f:82:
         7e:8a:f4:eb:b6:32:ff:e1:55:c9:4e:f4:58:3f:5e:16:6a:77:
         09:9f:6f:cc:59:b2:50:ff:ab:b3:9f:80:b1:06:b5:f4:b8:da:
         6e:c1:a3:af:38:28:88:f7:59:d0:96:b2:cc:e6:d8:73:15:bd:
         7c:33:15:fa:77:f0:ed:3a:11:ea:3a:33:b8:57:59:40:5c:42:
         d8:73:6e:ac:57:76:3d:d2:cb:9c:10:50:ad:ab:f2:8d:ea:74:
         aa:b0:da:15:43:21:44:fb:e8:01:a3:46:fc:67:9b:bb:56:ba:
         11:e5:ea:94:8c:13:82:a5:9a:a8:46:d9:24:62:b7:61:5c:a9:
         cc:32:45:09:71:d4:c2:12:c2:c5:13:de:04:62:49:51:57:90:
         ba:86:60:7f:40:f2:3a:86:b3:ab:d3:f9:1b:7d:12:eb:58:91:
         dd:c5:f4:74:c6:5d:4a:11:4c:ab:ea:5f:cf:a6:1a:6d:75:c8:
         9d:90:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:13:33 2026 by rpki-client