Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
File:                     77465F12874511EEBEA58225C4F9AE02.roa (raw, json)
Hash identifier:          EbdZVxWbh3R/FncALnqSzB9R0M4Mq7JJdCNgH/e/Tds=
Subject key identifier:   0A:0A:DF:DA:6A:F6:A1:23:73:68:48:DF:77:EE:83:FF:BC:C8:C6:7F
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       05E9
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:58:50 +0000
ROA not before:           Mon 08 Sep 2025 23:34:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     1299
IP address blocks:        103.168.34.0/24 maxlen: 24
                          103.168.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 22:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
        Validity
            Not Before: Sep  8 23:34:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4542a-864e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:22:fd:ee:2a:0e:5c:35:29:9a:36:53:8c:
                    36:a4:84:77:2d:f8:31:a1:87:53:eb:f5:05:e6:be:
                    d2:85:09:c2:70:88:ad:9d:f2:09:1a:b1:71:6a:74:
                    33:88:22:f2:7d:6b:60:cf:8f:29:47:f7:77:2a:af:
                    c2:f7:ce:fe:c3:05:c7:17:1a:3a:7c:66:8b:26:5c:
                    d0:0d:15:02:66:49:0d:dc:bf:ee:91:bd:02:76:47:
                    d6:ce:a3:e4:1c:97:4e:46:09:99:83:12:2a:9c:06:
                    96:68:72:ae:44:4e:02:b3:bb:9c:33:39:c6:49:ff:
                    c3:18:b0:fc:40:f2:12:a0:7e:9c:49:06:b1:e0:e9:
                    73:37:61:0b:5b:f8:f9:7e:c3:15:4e:ae:c4:30:2e:
                    e4:51:f1:0f:42:47:98:03:ae:12:33:0f:fc:6e:5b:
                    03:4d:c7:64:c6:32:19:66:a7:a1:f1:fb:37:69:3c:
                    40:8b:15:a5:e3:4d:72:4c:af:ee:7b:e5:f6:ba:65:
                    57:50:1e:3b:18:31:e0:9a:5b:ac:ba:42:cb:c9:1d:
                    64:e7:87:37:62:f3:7d:e9:b7:57:7e:5f:7e:e4:7a:
                    0e:78:e8:1c:21:98:03:e4:5a:d9:b2:cb:c2:45:c4:
                    59:86:e0:fc:dc:f3:da:39:11:7b:e6:7e:5f:65:a6:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0A:DF:DA:6A:F6:A1:23:73:68:48:DF:77:EE:83:FF:BC:C8:C6:7F
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:21:77:13:91:27:39:7e:98:cb:02:92:b2:21:50:6e:93:19:
         b4:f9:0a:1b:d4:59:a3:37:14:0c:e8:45:8c:8e:64:bc:c0:94:
         12:04:aa:71:63:d9:d2:d3:bf:17:33:f4:12:c4:6b:eb:77:9e:
         40:fa:d7:e9:39:5f:b1:2a:56:95:a2:e4:32:3f:27:5d:9f:94:
         9f:c0:1f:0c:32:58:b8:e6:19:2f:86:11:9b:77:8f:f8:45:c1:
         46:80:92:55:2f:c1:70:1d:10:db:a2:39:36:d1:e8:65:52:31:
         8d:90:17:8c:9c:df:01:e9:12:eb:4b:a5:f3:0e:92:29:84:49:
         6e:a6:5b:9b:9b:14:13:f2:de:d6:50:a5:0f:60:f6:50:78:e6:
         ba:4c:c8:5a:f3:92:6c:e8:c9:ad:c1:80:c1:99:1e:7b:35:34:
         88:66:63:b9:a6:1a:8f:cc:e2:3e:99:dc:5e:88:7f:80:1b:9b:
         a4:a3:3f:b7:b0:cc:c0:1a:e4:b6:4f:c1:14:04:4c:23:bf:09:
         36:29:dc:38:47:e4:e4:cb:6d:40:61:10:ed:a6:46:ab:04:60:
         25:a3:a3:b3:ad:b8:54:65:de:e4:b2:e8:30:ef:24:53:73:1d:
         d7:73:7a:e3:05:54:62:02:87:b0:f1:a6:b7:e1:61:ac:3e:2f:
         c4:71:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:16:17 2026 by rpki-client