Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa
File:                     B7A19306B43111EEB373D20BC4F9AE02.roa (raw, json)
Hash identifier:          TAeUlSS/3SuXhVXoQ+jDKJP2E5hO1fIx1p84HRUh3ww=
Subject key identifier:   00:35:C8:F9:6F:A2:59:D1:9A:B9:29:95:3D:21:EE:61:83:69:F4:9C
Certificate issuer:       /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial:       0250
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 02:35:55 +0000
ROA not before:           Thu 09 Apr 2026 02:35:55 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     150783
IP address blocks:        103.94.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
                          rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
        Validity
            Not Before: Apr  9 02:35:55 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d7108b-7754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:d8:ab:69:c3:47:1e:df:0a:c5:f2:3b:5e:
                    42:5d:d5:31:af:bb:b4:9e:eb:fb:18:c3:3e:a3:e7:
                    2f:68:51:32:19:2f:53:c5:e2:84:29:78:b4:1c:da:
                    0c:6c:0c:40:f8:84:2c:56:07:3a:6c:36:18:4f:7b:
                    8b:97:79:79:16:a0:91:1e:23:a2:8d:0a:2a:6c:ad:
                    cc:42:d9:c7:da:95:5e:2f:42:a2:52:0f:68:a9:0e:
                    c0:30:0d:48:5f:9f:5d:47:e2:0f:8b:b1:6b:f8:ac:
                    d5:94:da:90:58:23:fa:6a:d5:4a:76:e0:4e:25:6b:
                    a8:b6:48:0e:f3:48:de:c3:b3:53:dd:6f:92:55:90:
                    63:f8:7e:3e:4d:9d:d2:44:76:6a:99:42:06:95:db:
                    2f:4c:5b:0d:7a:04:61:74:65:84:f0:6b:6e:ff:67:
                    c8:c1:a5:80:cc:49:21:ba:fa:1e:52:86:14:80:40:
                    38:d3:95:03:7a:11:10:a8:4a:aa:6b:f8:77:e8:ac:
                    24:c6:e8:68:19:6b:b5:18:bc:e8:bd:3a:1e:45:25:
                    43:13:a3:47:6a:18:76:6f:94:45:d9:3d:e7:70:10:
                    73:35:ce:36:d0:03:95:5f:a2:e4:a7:ad:48:f8:9b:
                    5b:23:64:cc:28:0e:99:2f:27:69:e1:af:6d:66:75:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:35:C8:F9:6F:A2:59:D1:9A:B9:29:95:3D:21:EE:61:83:69:F4:9C
            X509v3 Authority Key Identifier:
                keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:d0:00:b6:ac:56:b3:3e:a9:f0:85:43:2e:30:9f:87:17:bd:
         8f:2e:5b:e6:72:e1:e9:a7:33:2a:0f:52:3d:35:72:65:df:1b:
         25:9f:fc:07:d2:92:96:96:87:dd:53:39:64:10:ae:52:e8:a0:
         f5:f4:8e:a6:cf:f1:96:30:6c:64:cf:6b:2c:c5:76:38:07:6d:
         7a:0f:4e:b8:d2:c4:1a:88:29:fe:93:b2:5f:64:10:7f:88:32:
         0b:b1:2a:ff:1f:f2:ac:98:1c:bd:f3:69:b0:23:f5:22:c1:7e:
         b1:31:ae:c6:c5:f4:81:90:61:b2:83:d5:30:78:9f:1c:2d:da:
         70:a8:c2:f4:27:88:58:38:70:70:b5:ad:52:0f:52:16:15:39:
         64:41:82:5e:19:d1:58:89:7e:5d:21:e9:a9:c0:6e:8e:77:0c:
         85:6a:56:d8:ff:f3:9a:9a:5e:a0:d9:e9:03:e2:07:4a:8b:28:
         6e:0c:7f:f6:29:d4:5d:82:e8:23:ec:87:3c:29:e1:aa:a9:71:
         ac:90:32:0d:f3:34:ba:8c:e7:77:71:9a:b3:01:c4:66:b5:30:
         4f:cb:94:a3:97:29:62:56:8c:00:8f:96:9a:33:b7:86:f3:3f:
         fc:7e:f2:cb:42:43:0b:99:7d:f9:b0:29:a6:88:5e:cd:47:b2:
         b2:57:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:44 2026 by rpki-client