Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa
File:                     B91BEB86943711F08A09E30CC4F9AE02.roa (raw, json)
Hash identifier:          k7p+ZchiNAkSWN7tKFyw8dNj+B5NMg26X/KffCVDFC0=
Subject key identifier:   E2:94:30:FC:4B:10:7D:7E:72:1C:5F:68:72:61:26:D7:48:E2:9D:B1
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35A9
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:32:51 +0000
ROA not before:           Thu 18 Sep 2025 02:33:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     5511
IP address blocks:        122.8.64.0/22 maxlen: 22
                          122.8.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13737 (0x35a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Sep 18 02:33:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a48653-6231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:f1:48:4e:ab:8a:94:71:27:ac:e9:97:07:
                    54:50:56:fa:ba:e1:75:48:4d:08:e5:9f:9f:14:7f:
                    11:1d:66:56:9c:7a:79:cd:ba:e7:ee:85:bf:b7:f3:
                    f7:4a:09:c4:f5:93:36:b9:55:0b:dd:dd:e1:cc:dd:
                    e3:d5:83:ce:db:ce:f1:3a:fd:28:e1:4a:44:1b:32:
                    d8:e5:f8:05:94:c5:06:d6:20:ed:e0:53:26:99:02:
                    7b:c5:b2:b6:55:e5:6b:b8:ae:00:1f:69:f0:77:60:
                    3d:60:89:2c:2d:40:cc:ff:e0:e9:84:bb:a1:df:3f:
                    d3:7a:a8:c5:82:86:43:94:39:2b:85:2f:74:3d:d8:
                    14:a3:0d:bc:76:7d:33:ba:4c:f2:6d:e0:70:82:ff:
                    05:40:20:f5:53:82:48:7c:13:ff:48:f0:2d:68:2a:
                    3c:bb:84:07:10:a6:48:03:d5:00:41:cf:a4:84:80:
                    03:84:00:6d:b9:99:c5:42:94:5e:54:28:a6:9b:53:
                    ce:8f:e1:ce:9f:50:c3:ac:6d:48:3c:cf:5b:44:b7:
                    75:0a:c6:22:c4:3e:ba:75:29:47:52:0d:cc:20:4d:
                    97:88:a6:f9:8f:0e:72:33:04:c4:86:8f:21:6a:2f:
                    50:c3:35:a5:7e:55:91:d2:83:f4:45:47:c0:00:9e:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:94:30:FC:4B:10:7D:7E:72:1C:5F:68:72:61:26:D7:48:E2:9D:B1
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B91BEB86943711F08A09E30CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.64.0/22
                  122.8.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:ac:57:88:40:a5:39:d7:0b:4b:9b:59:dd:c5:ea:ad:73:c7:
         9d:4f:ee:43:76:2a:ea:ca:32:d8:1c:02:39:ed:23:35:0e:17:
         80:c1:e0:aa:a2:95:40:80:a6:f2:8b:06:30:89:dc:bc:21:1a:
         e7:c5:6b:48:e0:f2:da:fa:9c:bc:80:60:25:3c:b2:3e:6b:c9:
         b7:39:a3:e0:b7:4e:8d:42:df:32:3f:c1:39:d8:f2:ff:c0:9a:
         b4:df:44:c0:19:4f:d8:f5:91:13:ca:43:1f:b8:e6:76:a5:96:
         01:74:29:51:a0:f4:55:02:4b:84:2a:ea:61:d0:63:9a:08:d7:
         89:49:d4:87:3e:bd:14:43:53:ae:9f:8d:78:51:1a:13:a6:cd:
         f3:09:53:39:21:2e:c9:da:b3:7a:99:89:dc:29:7e:49:51:99:
         9a:00:04:e8:32:41:ab:f5:af:ba:34:8b:02:ae:0b:35:8a:8b:
         82:bc:ba:62:da:17:e1:70:cd:8f:af:59:68:54:65:e1:60:78:
         10:4b:18:12:a9:43:62:ca:df:18:5c:a3:78:b6:24:99:86:14:
         e2:a8:fa:a2:65:37:e9:f5:d7:cd:5b:7d:cb:b2:4a:d9:49:ee:
         dd:2d:8b:3e:06:35:e9:93:9b:70:33:00:48:28:73:2b:2f:1c:
         7c:0c:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:16 2026 by rpki-client