Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/769DD8E65D9F11F1B674B26C98833773.roa
File:                     769DD8E65D9F11F1B674B26C98833773.roa (raw, json)
Hash identifier:          4e/ZxAHLtqfsmhUL7ic9nxXvBz6f3VjlIDuaZXKFxQ4=
Subject key identifier:   46:C1:49:01:0D:EA:4B:A6:E3:CF:E1:F7:8D:98:2B:D6:46:E1:E9:7F
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       0409
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/769DD8E65D9F11F1B674B26C98833773.roa
Signing time:             Mon 01 Jun 2026 09:51:30 +0000
ROA not before:           Mon 01 Jun 2026 09:51:30 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     209396
IP address blocks:        103.209.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Jun  1 09:51:30 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a1d5622-b9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:d7:57:5d:18:75:9f:41:06:7f:fe:90:11:
                    b1:f4:a9:c4:a4:5b:cc:94:12:3d:e9:b4:41:91:45:
                    8b:c0:34:f0:9f:e8:4e:70:97:6b:90:76:4d:44:50:
                    b5:0c:7b:30:71:03:03:b6:0b:ac:24:d7:87:3c:0b:
                    a4:33:20:09:a8:29:ce:f0:47:f5:d4:e1:5b:b4:66:
                    d6:9b:03:15:18:73:37:f5:6d:a7:a2:26:3d:08:52:
                    55:6d:3c:d5:3d:44:0e:5f:b6:fb:35:45:bb:09:0e:
                    54:ba:f1:eb:fc:e5:a1:fd:ba:ba:00:28:b6:79:d4:
                    0f:7d:35:27:ac:c8:a6:50:03:8f:c3:4b:d0:58:a2:
                    dc:4a:cc:cd:a0:37:dd:61:63:8b:eb:c1:dd:d8:7e:
                    61:2e:3f:1e:64:cf:d5:36:a4:e4:2c:59:4f:11:84:
                    35:ba:f2:83:82:a2:04:75:e4:27:75:ad:80:7a:c0:
                    ee:68:6a:f8:be:5b:93:3c:db:b5:07:47:39:9f:37:
                    6f:e9:ad:2a:bf:96:dc:4a:09:38:40:d7:ad:b1:1c:
                    fa:b3:48:3d:a5:ae:ed:6a:d2:05:9e:d7:69:20:2b:
                    4a:60:33:4e:b2:1a:ad:74:12:98:82:e7:e2:be:d4:
                    bc:ba:ad:eb:a6:2c:b7:23:6e:55:f4:92:97:33:36:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C1:49:01:0D:EA:4B:A6:E3:CF:E1:F7:8D:98:2B:D6:46:E1:E9:7F
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/769DD8E65D9F11F1B674B26C98833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:85:6f:44:a5:e2:5d:a4:3d:71:7a:29:37:29:02:bf:c7:1a:
         7e:cc:77:c0:61:82:84:8f:11:c1:6f:57:66:ca:50:86:d1:25:
         af:15:1b:70:b8:f6:4e:41:0e:22:fb:0a:33:25:c2:b8:15:b9:
         a6:9f:a3:df:99:28:aa:50:88:45:c7:5e:c7:fd:4a:17:74:f7:
         23:7c:39:9a:81:f2:17:dd:48:33:8b:26:de:ac:c8:b4:b8:b8:
         55:6f:f1:65:26:12:d3:06:37:96:12:f6:71:bb:44:86:f4:bf:
         05:4c:44:0c:98:03:5c:e3:d7:6d:a8:69:76:5a:95:c0:bf:36:
         98:ad:44:70:2c:0a:3f:42:a3:7b:29:fe:f9:1d:00:47:11:8b:
         02:22:58:74:20:9d:40:bc:72:19:bb:19:34:d1:44:81:29:f5:
         cc:9f:05:fd:4f:06:10:57:aa:ad:6c:eb:55:f1:7a:f6:6c:68:
         68:ac:29:e2:29:ef:ab:00:1f:59:95:98:e1:18:69:50:75:d6:
         43:e3:3c:7e:d4:84:af:64:ec:ce:c0:bb:f6:7f:f0:c7:98:50:
         cf:20:aa:f2:90:b4:46:6f:e8:3e:8a:8c:07:c3:b7:ea:ec:e0:
         82:58:97:f5:af:e3:90:e3:32:5b:c9:1e:45:9c:a4:c4:26:0a:
         86:7a:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:44 2026 by rpki-client