Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3772E9648FE911EC93CC6910C4F9AE02.roa
File:                     3772E9648FE911EC93CC6910C4F9AE02.roa (raw, json)
Hash identifier:          m+k6xfFvT2J/J94ndqaTDZvH+0QHPP6t1zQe0bqqBGQ=
Subject key identifier:   69:27:E7:BC:11:D3:93:C3:BE:A8:B7:FA:90:D7:30:E2:FB:4B:29:99
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4E50
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3772E9648FE911EC93CC6910C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:58:10 +0000
ROA not before:           Thu 28 Aug 2025 14:58:10 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63764
IP address blocks:        103.77.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20048 (0x4e50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:58:10 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e82-923e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:07:2b:65:c9:97:55:07:b8:2b:ab:8c:f7:
                    74:22:22:73:f1:7c:66:7f:c4:54:76:03:31:4f:63:
                    1b:e2:2d:f3:ac:ea:a6:86:70:bb:ff:12:4e:b9:7d:
                    0e:aa:7a:2d:ad:3e:30:74:05:b3:c0:e6:d4:26:8c:
                    8d:28:79:4a:68:c9:cc:71:65:07:da:5e:44:7c:94:
                    93:d9:0b:b2:61:26:fb:ff:20:36:08:f9:d1:d8:57:
                    4c:fd:99:d7:a8:bd:e9:4f:f4:71:e7:51:3b:2c:04:
                    0c:1b:38:58:5c:91:04:7a:c4:32:b3:9f:23:03:13:
                    ce:91:1c:30:ed:31:3b:fe:92:da:85:72:43:ec:90:
                    e1:ec:d8:be:bc:d9:65:50:1e:57:45:3f:45:19:65:
                    f0:81:8d:2c:a3:60:de:10:e6:31:d4:80:8a:0c:97:
                    3c:f2:37:c7:25:23:65:1f:bd:da:5d:7d:3c:1e:ce:
                    b4:e5:ce:e0:a0:40:5c:a3:87:9e:cf:e0:d3:5a:c1:
                    42:2d:59:8f:3c:8e:a2:65:42:17:87:f1:0b:45:d3:
                    ed:de:6d:02:f2:a4:e3:89:f5:c3:56:76:f3:a2:d8:
                    d1:be:d9:c5:01:7d:e1:f7:23:86:17:96:b7:01:c4:
                    ed:a2:67:b2:8b:57:d0:86:6f:e4:b5:23:ef:04:96:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:27:E7:BC:11:D3:93:C3:BE:A8:B7:FA:90:D7:30:E2:FB:4B:29:99
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3772E9648FE911EC93CC6910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:da:cd:f6:f0:a5:8b:44:07:7e:d8:35:d4:78:08:86:86:3e:
         aa:ed:ec:72:7b:33:9f:a5:47:fc:ef:b5:7e:2c:17:76:3a:cc:
         72:73:96:87:62:bc:c5:97:d2:74:c8:8f:66:6f:a6:91:3f:d8:
         c3:b9:ef:18:62:6a:60:46:7b:a6:b9:ff:38:df:de:e4:b0:5d:
         dc:81:ad:99:25:46:51:af:d9:8c:4b:1a:81:3c:73:1b:ca:c1:
         12:51:6f:95:66:e3:44:9b:e7:fd:a0:e3:5c:05:02:eb:e1:d5:
         4e:37:f0:8b:85:1b:c5:3a:be:fc:76:d2:05:be:11:1f:bd:c0:
         da:2f:9d:3f:4d:77:7d:4b:9a:67:dc:95:df:d3:65:89:6a:ba:
         f8:81:49:f0:73:da:72:c8:0d:81:25:e7:c6:87:4b:13:4b:21:
         9d:b1:84:e0:51:03:66:f0:09:70:36:11:d2:04:4f:70:53:ac:
         96:54:1e:5d:ac:76:80:86:6b:3e:cd:0c:26:2a:80:64:54:22:
         cc:a8:14:1b:54:2e:96:b9:e3:1a:cf:89:0b:77:47:3a:27:11:
         27:48:b2:16:5f:cb:34:d6:7a:6f:77:26:b1:55:d5:e9:8e:de:
         44:bb:6a:d4:30:14:09:31:6a:d7:60:20:bd:8d:94:36:08:a9:
         f8:26:e2:23
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICTlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1ODEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmU4Mi05MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnwYHK2XJl1UHuCurjPd0IiJz8Xxmf8RUdgMxT2Mb4i3zrOqmhnC7/xJOuX0O
qnotrT4wdAWzwObUJoyNKHlKaMnMcWUH2l5EfJST2QuyYSb7/yA2CPnR2FdM/ZnX
qL3pT/Rx51E7LAQMGzhYXJEEesQys58jAxPOkRww7TE7/pLahXJD7JDh7Ni+vNll
UB5XRT9FGWXwgY0so2DeEOYx1ICKDJc88jfHJSNlH73aXX08Hs605c7goEBco4ee
z+DTWsFCLVmPPI6iZUIXh/ELRdPt3m0C8qTjifXDVnbzotjRvtnFAX3h9yOGF5a3
AcTtomeyi1fQhm/ktSPvBJb3KwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGkn57wR
05PDvqi3+pDXMOL7SymZMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzc3MkU5NjQ4
RkU5MTFFQzkzQ0M2OTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnTagwDQYJKoZIhvcNAQELBQADggEBACPazfbwpYtEB37Y
NdR4CIaGPqrt7HJ7M5+lR/zvtX4sF3Y6zHJzlodivMWX0nTIj2ZvppE/2MO57xhi
amBGe6a5/zjf3uSwXdyBrZklRlGv2YxLGoE8cxvKwRJRb5Vm40Sb5/2g41wFAuvh
1U438IuFG8U6vvx20gW+ER+9wNovnT9Nd31Lmmfcld/TZYlquviBSfBz2nLIDYEl
58aHSxNLIZ2xhOBRA2bwCXA2EdIET3BTrJZUHl2sdoCGaz7NDCYqgGRUIsyoFBtU
Lpa54xrPiQt3RzonESdIshZfyzTWem93JrFV1emO3kS7atQwFAkxatdgIL2NlDYI
qfgm4iM=
-----END CERTIFICATE-----
Generated at Mon Sep 8 05:43:27 2025 by rpki-client