Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/77B72AD6944E11F0AE3B5D3BC4F9AE02.roa
File:                     77B72AD6944E11F0AE3B5D3BC4F9AE02.roa (raw, json)
Hash identifier:          KtvTVjgCAWOcBuPKSwBd9An16OYSBYspJW9eNvVNuDM=
Subject key identifier:   25:D8:91:FE:9E:9B:22:DE:7B:E3:3B:F3:C8:AC:DE:C5:2C:6A:F4:CF
Certificate issuer:       /CN=A915A797/serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
Certificate serial:       83
Authority key identifier: 99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/77B72AD6944E11F0AE3B5D3BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:18:02 +0000
ROA not before:           Fri 13 Feb 2026 06:26:55 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132616
IP address blocks:        103.17.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl
                          rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 06:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A797, serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
        Validity
            Not Before: Feb 13 06:26:55 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a474ca-5265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:b5:d7:4a:ef:37:11:3e:66:75:fa:65:6b:
                    7c:c5:f1:c4:01:df:a8:cc:5e:72:75:52:d2:67:db:
                    88:17:5c:c0:65:48:a3:dc:89:8d:26:bc:e2:7d:e9:
                    ab:15:f2:ae:fc:80:e0:c9:dd:51:6b:f3:f8:4e:67:
                    bb:67:58:ce:64:52:5b:4e:c7:0c:54:0d:79:34:19:
                    67:24:fd:be:c6:df:95:de:0c:72:c0:fb:61:cf:1f:
                    d4:23:37:8d:7c:db:5c:54:c2:00:6c:47:cc:29:10:
                    11:ed:7b:bd:c0:b7:08:62:e3:f7:36:c2:db:9b:17:
                    7d:8a:de:7a:a9:b1:1b:34:0f:90:c8:f6:03:ca:67:
                    42:30:e6:c7:80:e2:41:06:4d:d0:fa:81:94:48:12:
                    ac:09:f7:e3:39:a3:10:ad:25:10:50:9d:c0:ab:3c:
                    45:74:f1:88:4f:e0:9b:36:ce:c4:5d:5a:07:92:93:
                    a1:41:ac:f4:49:24:12:db:29:9f:f7:69:5a:c8:51:
                    5a:e7:59:c8:26:9a:7a:05:6c:4b:e7:04:54:00:9c:
                    ba:66:f8:91:46:b4:e5:dd:50:39:4e:b7:05:12:d7:
                    76:ce:a8:df:64:f5:7b:7e:4a:ea:84:23:25:57:48:
                    b3:c8:63:5c:7a:d8:e4:77:79:de:fe:39:f3:a3:d0:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D8:91:FE:9E:9B:22:DE:7B:E3:3B:F3:C8:AC:DE:C5:2C:6A:F4:CF
            X509v3 Authority Key Identifier:
                keyid:99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/77B72AD6944E11F0AE3B5D3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:b9:7e:f2:22:81:05:18:b0:c0:e6:c3:41:bf:63:f3:a2:a0:
         61:3f:06:cc:55:91:23:3e:96:92:7c:fa:c6:4d:5d:28:eb:3f:
         2d:39:76:98:a3:68:e8:08:7f:db:aa:3c:c7:10:d8:e9:77:d8:
         20:9a:1a:38:51:f3:e3:18:c9:c6:b9:e6:ff:aa:62:d5:db:5a:
         91:ff:3c:1c:4c:6e:5b:a5:36:6e:88:d8:f2:cc:40:19:2b:45:
         fc:08:b2:42:3a:37:e5:3f:68:a9:42:44:fa:d0:b8:62:f1:ca:
         80:33:36:bd:b2:54:72:66:41:a3:7f:5d:a8:fe:64:60:a1:8c:
         f6:ab:f6:ad:fe:95:7d:c0:11:f7:35:8b:0a:2d:d9:6b:e9:31:
         13:bb:55:c4:b7:0c:7f:3e:94:4f:91:c7:d8:c0:df:1d:0b:bd:
         51:76:14:1b:65:98:87:c0:c7:1a:bd:21:63:b3:26:2c:3e:5e:
         76:2c:32:c5:b9:49:eb:73:72:b0:80:f6:57:29:6f:c6:fa:5b:
         0a:1e:de:dc:22:1c:82:f0:e3:6e:8c:db:b1:f5:7c:71:83:e8:
         ee:6a:a3:85:16:bf:35:64:39:58:e4:da:a0:e6:02:1d:04:eb:
         12:62:b4:9f:37:c1:24:28:02:8f:76:ba:57:5d:5e:9a:d2:93:
         55:fd:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 17:41:44 2026 by rpki-client