Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa
File:                     B91BEB86943711F08A09E30CC4F9AE02.roa (raw, json)
Hash identifier:          +KTfUQ6tg37LXnkbrgc+pkgRz7Bqgea5nS2R+G/3+0o=
Subject key identifier:   26:6D:EE:DA:4F:81:30:DF:EC:39:69:8D:79:6B:9F:F9:F7:81:C0:DB
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35C7
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:13:45 +0000
ROA not before:           Tue 31 Mar 2026 16:13:45 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     5511
IP address blocks:        122.8.64.0/22 maxlen: 22
                          122.8.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13767 (0x35c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 31 16:13:45 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf2b9-27af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:c0:16:14:6f:fa:96:7e:2c:bc:1f:a8:df:
                    0c:d3:d0:04:02:09:6a:2a:2a:15:fe:68:3c:bf:7c:
                    72:67:f6:7c:c4:17:5c:34:c4:aa:9e:e4:d0:2f:40:
                    86:28:1d:22:e4:b6:8c:97:ad:2d:c6:38:30:17:f2:
                    78:0e:d5:5a:44:54:90:7d:2d:14:6c:05:9d:ee:ee:
                    4b:bc:a6:13:fd:2d:0b:78:3f:02:99:db:53:d2:0f:
                    da:45:eb:34:f5:f8:b9:0f:16:0e:67:ab:34:94:1f:
                    4c:a3:89:8b:38:89:71:46:74:76:be:e5:c0:f2:b6:
                    82:e2:73:6b:b6:15:fe:1e:c9:34:16:16:79:af:47:
                    12:c0:17:86:38:5b:e4:c5:8c:24:78:67:e5:5b:c5:
                    9b:54:d7:57:1e:89:43:be:60:3b:79:20:77:a4:e2:
                    9a:b3:1d:a2:a5:d6:3c:af:be:85:67:e6:26:64:4a:
                    32:7e:e4:90:90:ef:ac:a2:b7:eb:55:0a:56:52:80:
                    aa:82:7c:f6:61:3c:77:10:cf:e0:04:15:9d:0b:3f:
                    f2:6d:d7:ce:24:7c:f4:fd:80:20:71:c9:f6:5a:c8:
                    43:bb:46:73:41:1c:4a:b7:3d:02:54:17:5e:20:29:
                    24:5e:69:35:ee:80:ac:1e:e1:16:65:ec:7d:77:51:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6D:EE:DA:4F:81:30:DF:EC:39:69:8D:79:6B:9F:F9:F7:81:C0:DB
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.64.0/22
                  122.8.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:21:00:07:6a:4b:4f:a9:a4:a5:95:28:3b:1f:63:20:21:f4:
         aa:38:40:1e:21:cc:88:e2:ce:f3:f9:39:87:61:3b:26:a1:22:
         61:57:69:a8:5a:76:4e:b3:96:98:2e:b7:87:7b:d2:db:8f:7d:
         e3:c9:ff:11:64:6d:3a:c8:41:75:3e:72:b9:60:2d:b4:aa:0c:
         6c:fd:aa:37:3f:e1:f6:67:d7:1f:59:4a:8c:bf:7e:98:54:da:
         7d:1a:bc:34:38:af:05:a4:f5:56:e7:0c:6c:61:2a:fe:e5:64:
         a4:6c:21:bc:fd:e3:62:48:12:c4:50:02:70:be:ea:be:00:eb:
         12:20:73:5a:14:ca:1b:5f:22:98:4c:63:96:1c:72:82:43:c8:
         fd:39:4b:60:14:b5:84:e5:d7:6b:5d:93:53:ef:53:55:bd:83:
         22:85:8d:58:87:9d:03:c2:32:06:c5:a9:cd:bf:33:b9:0f:22:
         e6:13:f0:e9:d8:58:cb:7d:a9:74:b6:8a:e1:70:a0:71:ad:5d:
         17:45:de:c2:7d:3d:8c:c2:4a:76:a2:1d:21:1f:04:76:e1:ac:
         a0:9f:52:a1:e6:99:20:15:f8:10:13:1b:44:6d:e4:29:69:97:
         9b:e4:b8:7d:40:7f:df:b8:f6:27:93:c8:2a:46:9f:d7:fc:55:
         91:df:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:53 2026 by rpki-client