Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/22A96640A36111F08EA36434C4F9AE02.roa
File:                     22A96640A36111F08EA36434C4F9AE02.roa (raw, json)
Hash identifier:          SCl/8KbBZR/MQZWxzElYUH2fN8GfYWzc9n4GwayI3fs=
Subject key identifier:   57:37:21:27:66:50:57:33:F2:FB:C1:A9:3F:48:75:52:B9:B0:2A:38
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0431
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/22A96640A36111F08EA36434C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:52:04 +0000
ROA not before:           Fri 17 Oct 2025 07:41:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     62610
IP address blocks:        103.215.124.0/24 maxlen: 24
                          103.215.127.0/24 maxlen: 24
                          157.119.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Oct 17 07:41:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47cc4-6f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:58:19:17:01:26:6d:bd:16:10:91:6c:81:
                    ec:6e:1c:63:48:00:4d:3c:09:26:0f:de:02:d8:92:
                    99:b9:d7:0b:c2:09:0e:87:10:ab:a1:2b:28:5c:fa:
                    00:9e:5b:83:df:02:a4:c5:e7:60:3b:1f:88:17:98:
                    4d:0a:bc:cb:3c:85:5a:72:d7:9d:2c:22:7c:46:b1:
                    99:db:46:c6:21:b7:73:04:8e:77:f4:18:01:1a:c7:
                    a0:3d:16:f3:8b:63:49:0c:a7:7f:b2:ce:a6:c3:17:
                    f5:85:38:86:15:9e:b5:60:05:49:b5:c9:58:b8:0d:
                    3d:36:e9:0c:b4:57:cf:1f:ca:df:99:67:3c:90:09:
                    2d:44:48:10:b9:89:71:87:71:c8:57:df:6f:28:95:
                    20:1d:86:c3:7c:95:35:f4:ed:a3:9e:89:b2:fc:f2:
                    25:4f:8c:fa:3c:68:03:dd:75:99:c4:16:ee:af:b5:
                    a4:b4:24:cc:89:71:55:68:69:a8:48:cf:96:89:de:
                    35:86:a3:65:06:ab:ab:ce:db:0a:94:bf:8d:b7:c5:
                    8f:93:f6:fa:3b:01:b1:1a:88:37:48:5a:5b:9a:69:
                    9e:02:ee:83:d1:8d:a6:81:1f:7a:d6:09:16:ca:43:
                    39:8a:e3:f8:27:18:00:c1:31:ed:99:e4:f5:3d:26:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:21:27:66:50:57:33:F2:FB:C1:A9:3F:48:75:52:B9:B0:2A:38
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/22A96640A36111F08EA36434C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.124.0/24
                  103.215.127.0/24
                  157.119.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:df:53:17:81:89:1c:bb:ca:e9:4e:09:ef:ed:5f:e5:32:
         1e:2a:9a:6f:aa:73:67:3d:50:b7:00:61:4b:13:0a:93:75:22:
         a9:e0:8c:fa:73:0a:7f:69:4f:6c:17:d0:67:a9:23:5a:75:9c:
         6f:ee:83:af:fc:69:06:55:21:95:5f:24:1c:ba:dd:02:63:8d:
         94:df:2c:32:e6:37:dc:25:88:bf:57:59:db:11:4f:1d:aa:b4:
         95:6b:35:51:0e:1a:42:e8:db:ac:fd:7c:80:29:36:31:11:fa:
         2c:58:9a:df:f8:9e:7a:d0:ea:ce:8a:64:11:51:33:22:f3:28:
         a6:7a:42:95:36:6f:1b:15:94:59:3f:9c:8a:76:0e:80:38:36:
         b8:89:58:13:fe:56:0d:e6:e4:b9:12:18:ea:9b:3f:cf:a7:ae:
         99:a7:b9:5b:0b:22:a4:95:ab:e8:3e:62:fe:4e:91:b2:27:b5:
         cf:87:0f:1b:f6:ea:4a:7f:77:3a:82:d6:50:36:c7:8c:4c:87:
         f8:3b:ed:81:c9:e9:40:91:28:41:80:da:6e:6a:c3:91:ba:74:
         a7:06:5b:26:fa:46:ea:d1:4a:3d:cc:65:79:83:5c:b4:ae:5a:
         8c:65:69:5b:17:25:63:00:62:83:c5:cf:4d:fc:06:b3:cb:57:
         7d:ed:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:28 2026 by rpki-client