Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/1BBB533AB72811F19011CF447111F970.roa
File:                     1BBB533AB72811F19011CF447111F970.roa (raw, json)
Hash identifier:          gfsJQ4x2b8BpAwWEEkHcNeSZVsHItjhQy+lVE/8kG2g=
Subject key identifier:   4B:ED:79:BE:00:0E:8C:7B:78:BA:96:50:D7:7A:33:A7:35:85:FC:48
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       0458
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/1BBB533AB72811F19011CF447111F970.roa
Signing time:             Wed 23 Sep 2026 08:23:52 +0000
ROA not before:           Wed 23 Sep 2026 08:23:52 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     211422
IP address blocks:        103.209.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Sep 23 08:23:52 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ab38c98-e684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:c3:b0:6d:c4:a1:9d:f9:97:32:83:3b:14:
                    61:df:00:96:30:3d:68:2c:a7:f4:a7:c2:cd:13:48:
                    46:e5:79:4a:95:97:b0:8b:2e:e6:20:3e:42:df:0f:
                    5d:c9:92:a7:bc:5f:6a:44:b6:33:20:d3:7c:31:f6:
                    92:a5:cc:8c:e7:f4:f4:a7:24:53:6a:02:b6:18:bf:
                    a6:2f:17:7d:a1:ca:8c:e3:cc:64:5e:c4:b4:da:ce:
                    ab:48:b7:7d:c6:7d:cd:1b:2e:50:6e:69:22:c1:94:
                    35:cd:25:9a:8c:6f:9c:2b:86:d5:11:77:91:0f:f7:
                    39:1f:40:a0:0c:d3:73:15:ef:f2:79:87:54:55:b5:
                    cc:2d:c2:19:04:4f:ec:36:63:43:70:1e:2b:32:a3:
                    e2:25:3f:83:27:60:60:52:a0:b5:d6:6c:57:c8:91:
                    1e:e0:39:d6:4a:6d:af:ff:7f:68:4f:23:1e:46:07:
                    31:28:81:14:bc:e2:d7:ca:16:0a:32:77:d5:38:6a:
                    81:52:0f:76:62:ca:73:96:3c:a2:8b:04:f7:ea:6a:
                    01:82:7a:60:fc:5e:1b:1b:ca:34:24:07:4c:72:08:
                    8d:4f:f7:9f:cf:43:50:1c:8a:05:cb:fd:01:cf:92:
                    44:1a:e6:46:97:a5:19:30:ad:78:f3:9a:2b:d7:05:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:79:BE:00:0E:8C:7B:78:BA:96:50:D7:7A:33:A7:35:85:FC:48
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/1BBB533AB72811F19011CF447111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:bf:8b:c6:3d:de:ba:ca:84:8d:79:e9:df:c3:0a:d5:4c:
         01:90:fa:da:de:1c:50:10:f0:c2:5b:c8:1c:af:63:76:91:8a:
         ca:87:a2:db:51:7f:a5:93:38:ca:a4:68:83:7f:ce:02:44:07:
         1a:7f:ce:39:39:93:cf:1c:ef:89:0d:26:43:c7:ae:2f:3e:8c:
         0e:8f:d2:06:a3:70:1b:9a:8d:5a:de:03:e1:db:fb:db:6f:e9:
         c6:ea:1b:d4:11:83:c9:27:1c:87:0e:a3:1e:3f:14:eb:f9:bb:
         d6:92:8b:8f:66:d4:ed:11:93:3d:98:bf:92:56:6d:33:8f:63:
         01:5b:05:e3:b6:2a:a5:dd:85:35:ae:26:53:f8:57:54:9f:1d:
         92:75:99:a7:3c:e3:50:d4:a6:f0:d0:f1:86:56:d4:56:52:e9:
         d9:b1:c3:62:d9:dc:8c:88:58:9a:8b:44:18:65:93:e0:26:5c:
         c5:cd:43:2c:16:32:13:a7:9e:50:f7:35:48:cd:72:bb:e0:a2:
         9e:1a:9e:20:f3:9a:47:87:ac:d4:76:34:7e:8e:c3:91:4a:f8:
         96:a6:6f:81:14:ca:26:ab:89:e8:2b:da:91:25:f7:89:28:88:
         31:a2:d2:d3:ad:17:b7:44:d7:b5:72:e9:d5:6f:0b:e1:b7:15:
         42:38:e9:60
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz
NDQ2OEM3QjkwHhcNMjYwOTIzMDgyMzUyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzOGM5OC1lNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqvvDsG3EoZ35lzKDOxRh3wCWMD1oLKf0p8LNE0hG5XlKlZewiy7mID5C3w9d
yZKnvF9qRLYzINN8MfaSpcyM5/T0pyRTagK2GL+mLxd9ocqM48xkXsS02s6rSLd9
xn3NGy5QbmkiwZQ1zSWajG+cK4bVEXeRD/c5H0CgDNNzFe/yeYdUVbXMLcIZBE/s
NmNDcB4rMqPiJT+DJ2BgUqC11mxXyJEe4DnWSm2v/39oTyMeRgcxKIEUvOLXyhYK
MnfVOGqBUg92YspzljyiiwT36moBgnpg/F4bG8o0JAdMcgiNT/efz0NQHIoFy/0B
z5JEGuZGl6UZMK1485or1wUYGQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEvteb4A
Dox7eLqWUNd6M6c1hfxIMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB
RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M0RTcvOTgxQzA1NThFQUQ4MTFFQ0JDN0VFMDE1QzRGOUFFMDIvMUJCQjUzM0FC
NzI4MTFGMTkwMTFDRjQ0NzExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ9FNMA0GCSqGSIb3DQEBCwUAA4IBAQAFar+Lxj3eusqEjXnp38MK
1UwBkPra3hxQEPDCW8gcr2N2kYrKh6LbUX+lkzjKpGiDf84CRAcaf845OZPPHO+J
DSZDx64vPowOj9IGo3Abmo1a3gPh2/vbb+nG6hvUEYPJJxyHDqMePxTr+bvWkouP
ZtTtEZM9mL+SVm0zj2MBWwXjtiql3YU1riZT+FdUnx2SdZmnPONQ1Kbw0PGGVtRW
UunZscNi2dyMiFiai0QYZZPgJlzFzUMsFjITp55Q9zVIzXK74KKeGp4g85pHh6zU
djR+jsORSviWpm+BFMomq4noK9qRJfeJKIgxotLTrRe3RNe1cunVbwvhtxVCOOlg
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:02 2026 by rpki-client