Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/F7652FA49EA211F0B30F584FC4F9AE02.roa
File:                     F7652FA49EA211F0B30F584FC4F9AE02.roa (raw, json)
Hash identifier:          y7Y/Q4eQnPLIXgXd4xCtA+AKKLP+CCZJedOCzA7ld58=
Subject key identifier:   33:57:E6:E6:ED:00:BB:F8:9C:6B:2D:B0:63:9B:64:73:2D:10:C4:E8
Certificate issuer:       /CN=A916CD9F/serialNumber=E9392498252AF45F6B1905617C036B033954A9E4
Certificate serial:       6B
Authority key identifier: E9:39:24:98:25:2A:F4:5F:6B:19:05:61:7C:03:6B:03:39:54:A9:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/F7652FA49EA211F0B30F584FC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 07:43:04 +0000
ROA not before:           Thu 09 Apr 2026 07:43:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141733
IP address blocks:        103.162.248.0/23 maxlen: 23
                          2407:20c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.crl
                          rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CD9F, serialNumber=E9392498252AF45F6B1905617C036B033954A9E4
        Validity
            Not Before: Apr  9 07:43:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d75888-350f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:f3:87:73:7d:86:1e:7c:96:9c:d0:b1:78:
                    f4:3e:54:58:81:2c:30:ff:e8:8f:2c:b0:4e:b0:92:
                    75:80:51:ec:d8:7c:77:4e:6f:62:9f:dc:28:04:c0:
                    44:9b:1f:63:53:80:49:63:9e:d5:57:c1:a1:20:25:
                    5d:57:d2:61:c6:77:f2:ed:12:cf:92:4d:78:29:4c:
                    13:ea:09:f6:a2:03:27:8d:aa:73:2a:25:a0:9e:3a:
                    e5:25:f7:5a:34:9a:02:49:20:34:c7:32:7c:df:48:
                    26:5f:76:ab:ba:f8:36:ed:66:c7:0e:d4:a0:a2:a7:
                    06:90:c4:eb:43:73:18:de:77:2a:d5:62:e8:95:4b:
                    08:4f:5f:a4:13:e5:ed:39:26:2c:fd:f8:ec:cf:ea:
                    c6:5e:27:f3:99:5e:6f:0c:c5:4e:9e:b7:fb:e0:76:
                    30:ca:f0:4a:9f:c4:bb:cc:49:18:45:b5:b1:a3:2c:
                    ff:01:64:e6:43:0a:61:93:25:07:a9:a2:a0:01:79:
                    d9:4c:3b:36:c5:80:47:bf:f2:bd:7a:50:ac:65:2e:
                    09:55:98:dd:c1:a7:7e:03:d0:dd:86:d0:02:39:21:
                    cb:a6:de:65:f5:86:25:72:e4:64:4c:69:b8:8c:8d:
                    1e:d0:46:b7:e5:88:18:e4:c2:52:f2:7d:13:ba:9b:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:E6:E6:ED:00:BB:F8:9C:6B:2D:B0:63:9B:64:73:2D:10:C4:E8
            X509v3 Authority Key Identifier:
                keyid:E9:39:24:98:25:2A:F4:5F:6B:19:05:61:7C:03:6B:03:39:54:A9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/F7652FA49EA211F0B30F584FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.248.0/23
                IPv6:
                  2407:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:a8:80:df:7c:03:1e:50:ad:be:e3:23:82:df:6d:aa:d9:
         3d:e8:4c:1a:e9:d0:8e:3d:7a:45:8c:45:f2:fb:31:2f:7c:d5:
         a8:6c:aa:a4:25:9d:a9:78:6c:f9:a9:1d:ca:4d:e3:3f:f7:8c:
         df:bf:e5:1f:c9:55:ea:92:e6:cd:09:dc:6e:56:79:0f:4b:b1:
         94:89:84:c1:b3:c6:ec:b7:a8:42:81:b9:fc:b2:83:17:7b:b0:
         db:3d:e3:1b:f7:92:71:ff:5c:65:cb:8a:f0:ef:fc:b5:1e:be:
         44:7e:4b:4f:79:fb:b6:54:d7:3b:38:1d:63:08:96:e2:1a:88:
         1b:78:bf:3d:15:dc:49:bb:2e:9c:0a:45:c7:e3:6a:54:26:fe:
         cc:a2:bb:c6:5b:2a:e2:b7:83:7f:f7:ad:b9:53:07:45:92:65:
         2e:52:83:21:b3:59:b8:25:d5:33:93:b8:58:07:eb:76:4c:b4:
         f2:db:27:ad:a1:06:b2:cd:3f:7f:d6:b0:60:a0:40:b6:85:8c:
         23:e1:ea:bb:85:9d:72:c9:e5:17:db:a7:8f:e6:e4:33:43:56:
         94:90:10:16:f7:bb:d5:e7:8e:18:05:ea:ad:85:8e:d9:94:8a:
         1c:0c:e8:96:dc:3e:ea:73:05:8d:06:38:10:3a:97:b2:aa:68:
         c1:92:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:52 2026 by rpki-client