Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3772E9648FE911EC93CC6910C4F9AE02.roa
File:                     3772E9648FE911EC93CC6910C4F9AE02.roa (raw, json)
Hash identifier:          FdrGkVkbOvAiRRn+6Xea5Q91E+G2MII7VD7WT5RTZmk=
Subject key identifier:   48:3D:F7:9E:BE:9D:79:F8:F5:9A:2E:21:A1:BF:EA:08:18:F3:FD:AF
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F4D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3772E9648FE911EC93CC6910C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:38:06 +0000
ROA not before:           Fri 02 Oct 2026 15:38:06 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63764
IP address blocks:        103.77.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28493 (0x6f4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:38:06 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcfde-3661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:0d:69:98:e9:04:30:ae:c5:95:67:17:fb:
                    a0:c1:95:12:49:5f:c3:db:b8:13:30:e5:dd:aa:72:
                    ea:99:44:7b:68:bb:1a:5b:a1:cd:50:8e:04:bd:0d:
                    41:92:7d:1d:6f:31:40:f6:10:66:9a:3d:65:d3:3d:
                    1b:30:b9:54:aa:e9:dd:33:14:d6:ba:64:38:b4:11:
                    69:9a:d3:54:b4:76:3a:85:91:ba:c4:9f:f6:96:03:
                    be:16:d0:2d:64:f0:40:43:81:43:a0:c8:30:31:c5:
                    5c:ba:35:99:2e:3f:d3:e0:0f:63:db:0c:a4:5e:77:
                    ee:de:6d:99:13:41:ef:f1:1d:6f:1f:99:d6:a8:80:
                    cb:f4:b4:cc:a4:86:3d:bf:22:de:2f:67:62:25:58:
                    d7:4a:c4:f0:76:c5:1a:26:9f:fc:91:c4:e0:8e:ca:
                    22:81:0b:92:44:55:b6:1f:d8:6f:9a:3b:2f:fb:6b:
                    53:43:d9:4f:9f:cd:5f:35:f8:b8:fd:7c:bc:64:bf:
                    9f:6c:bd:88:93:16:57:22:bb:ad:52:b2:ea:7f:39:
                    a3:85:10:c2:95:3d:8f:b2:ce:61:34:28:4b:fa:92:
                    e3:c4:2b:64:1c:7a:c4:4a:46:cf:d0:8c:b4:27:80:
                    20:d9:21:eb:5b:3c:97:41:cd:85:ee:cd:3c:76:46:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3D:F7:9E:BE:9D:79:F8:F5:9A:2E:21:A1:BF:EA:08:18:F3:FD:AF
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3772E9648FE911EC93CC6910C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:79:db:b7:78:b8:55:b6:04:30:fc:fa:99:06:04:a1:c4:2d:
         74:02:60:b0:64:39:62:23:48:14:07:d3:21:a0:90:43:de:b0:
         c7:73:70:4a:e4:fd:9f:a8:46:ca:68:ed:fa:67:b1:eb:e1:e3:
         23:1e:bc:25:41:59:0f:be:ff:a3:c0:ee:9b:0f:78:46:3f:b0:
         93:48:ef:eb:cf:6f:58:13:44:33:8c:8e:e6:f1:9c:15:09:2e:
         c1:29:2b:e4:d8:f5:80:be:06:e9:eb:3d:7d:11:c8:73:0c:10:
         d9:ac:5b:ec:a5:d8:82:f1:d4:e4:96:9b:fc:4f:f3:4d:a9:5c:
         8f:ac:93:0b:e6:77:00:21:22:dc:b0:80:eb:dd:bc:2d:47:fd:
         40:7c:7a:b7:41:98:b5:d6:a1:25:b0:96:dd:d3:3b:d3:a9:41:
         c8:0b:11:29:11:81:43:4c:e0:5d:1e:1d:57:13:64:25:2c:55:
         e5:1c:c7:21:14:d0:83:1f:d2:d9:2b:2b:a4:53:54:77:82:42:
         df:57:a8:24:66:42:f7:5c:7e:e7:fd:59:17:f8:1f:8a:d5:63:
         7a:dc:1d:bc:98:0c:b2:db:35:7a:8c:34:37:7b:0f:f7:f2:3e:
         4f:f2:d9:a2:83:f4:e7:5c:b6:78:e2:99:33:ff:47:ba:f7:5b:
         53:95:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:46 2026 by rpki-client