Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/726BD5E645CF11EF854E2262C4F9AE02.roa
File:                     726BD5E645CF11EF854E2262C4F9AE02.roa (raw, json)
Hash identifier:          CfTiBAbUMNxFwj32+HfJiQlb+5AntCj6pEFWYr5R03U=
Subject key identifier:   C5:FF:39:F7:F0:C9:B0:30:B4:EC:F3:E8:83:FC:C5:FE:2F:9B:C6:F0
Certificate issuer:       /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
Certificate serial:       0138
Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/726BD5E645CF11EF854E2262C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:43:17 +0000
ROA not before:           Wed 14 May 2025 06:26:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152691
IP address blocks:        103.12.56.0/23 maxlen: 24
                          2001:df3:ac40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
        Validity
            Not Before: May 14 06:26:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a593f5-ae23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:56:b2:ba:69:f6:9a:35:c0:52:62:fe:f3:
                    8b:04:2d:1b:e8:84:1b:b9:e3:c4:cb:76:22:76:0d:
                    cc:c1:aa:45:69:47:f4:c5:61:85:8c:5d:b1:9d:88:
                    c7:ba:c4:9e:3f:fc:42:fa:11:8b:a6:c3:84:1f:c2:
                    64:2e:9e:cb:0f:ea:2c:71:8a:ce:97:8f:19:a3:76:
                    88:45:cc:fe:60:08:2c:b2:ab:96:21:f0:55:a1:b3:
                    76:16:89:d2:36:4d:7c:9a:09:e4:32:c3:ff:d7:a9:
                    61:1d:6e:9e:2f:03:62:94:e8:7f:97:a7:42:94:f4:
                    a0:37:11:c2:8f:2e:bf:8a:ad:3d:27:a8:50:49:71:
                    ac:b7:d9:12:16:f9:a3:bc:20:da:28:e6:ee:f4:5e:
                    f7:7b:21:63:d2:2e:b9:e3:32:29:fb:e0:ae:6f:2f:
                    87:28:8c:1b:5c:a9:41:8f:4b:da:23:8c:7d:36:cb:
                    44:1c:1a:47:e5:54:27:0b:14:69:4e:3b:4a:32:3c:
                    30:b7:34:cc:fc:ea:ab:c4:05:6c:70:07:bc:77:68:
                    71:43:43:cd:23:8f:b6:56:ab:df:f1:54:3e:a0:9b:
                    f5:b2:d5:76:72:86:46:c4:26:1f:ca:98:c8:77:ae:
                    1f:9d:71:8d:85:92:e3:8d:b2:2c:e8:24:9f:77:17:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FF:39:F7:F0:C9:B0:30:B4:EC:F3:E8:83:FC:C5:FE:2F:9B:C6:F0
            X509v3 Authority Key Identifier:
                keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/726BD5E645CF11EF854E2262C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.56.0/23
                IPv6:
                  2001:df3:ac40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:7f:28:a5:2c:93:25:d4:07:94:11:81:f8:f4:b4:b7:56:
         30:5c:7d:da:f2:21:a7:63:75:2e:78:60:88:a5:be:f0:c0:4a:
         ae:d5:86:43:eb:d6:27:54:bd:3f:3f:86:40:ac:32:86:eb:61:
         d1:d0:50:80:9d:43:f6:17:3a:ee:23:52:db:46:cd:30:dc:b4:
         68:0a:e7:75:1b:89:3d:08:d9:b6:d9:49:5e:12:fc:ed:e7:f9:
         d6:44:17:63:a3:56:88:ce:0b:e6:bc:40:04:9c:13:6c:5b:85:
         2c:4c:6c:5a:93:9c:0e:0d:e3:04:b6:60:24:07:44:72:71:7a:
         21:f6:fa:59:62:f5:a0:ea:a6:1e:de:9c:b7:3e:fb:d0:21:66:
         12:a1:5d:a7:93:c2:d3:f2:6e:20:1b:49:ab:dc:cf:a7:27:e2:
         e7:95:a2:7a:fe:0f:b0:80:1f:ce:21:93:04:d9:72:d8:bb:50:
         12:39:83:2b:35:52:37:f1:99:ef:1a:2f:e6:74:25:d0:32:29:
         08:22:93:26:fd:78:14:cc:b4:e1:43:a7:20:25:4b:e0:66:54:
         8a:56:01:e8:0a:57:84:f7:fe:7b:ad:a3:be:19:c7:79:fa:f1:
         e8:a7:0e:ae:1c:e9:91:9d:8e:9b:5a:21:7e:43:02:13:7e:4e:
         68:39:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:33 2026 by rpki-client