Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa
File:                     DC072950DCB911EC8AAB8710C4F9AE02.roa (raw, json)
Hash identifier:          G2P7RPVZzQ6H46xf92du5p3KHSSEhU1N0cupaCReWGY=
Subject key identifier:   44:EE:64:5D:24:16:C5:59:80:DE:56:E1:84:BF:3C:3A:39:FB:55:E7
Certificate issuer:       /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Certificate serial:       0383
Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:21:45 +0000
ROA not before:           Fri 09 May 2025 01:15:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137424
IP address blocks:        103.186.122.0/23 maxlen: 23
                          103.186.122.0/24 maxlen: 24
                          103.186.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
                          rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
        Validity
            Not Before: May  9 01:15:14 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e909-6236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:eb:f9:73:db:29:86:26:02:63:72:74:3b:
                    6a:d7:a4:c7:18:c9:90:85:54:a4:97:db:9a:ea:74:
                    86:e7:a1:e3:98:ed:2b:3f:c3:97:74:92:7b:a1:b5:
                    10:91:23:8b:72:80:83:e3:ac:82:78:8f:d9:07:a7:
                    e3:a6:69:be:b8:c2:49:6f:8e:b5:4b:73:95:2b:02:
                    2a:f4:00:aa:35:c7:e1:4a:0d:9d:aa:f7:76:29:4e:
                    dd:05:ab:a4:e9:4e:88:9b:3c:62:02:ec:19:cf:a3:
                    9d:47:11:0f:19:d9:e0:f1:87:d2:f2:2e:6e:f8:6b:
                    fa:05:60:76:e6:4a:db:84:33:ba:95:c4:2d:bd:1d:
                    b8:f1:90:70:ff:2f:68:be:6a:be:e6:3d:bb:99:be:
                    41:f1:42:7c:9a:b3:6b:c7:9e:b0:a3:e7:1e:59:e1:
                    15:5a:47:e3:fa:51:91:aa:ac:bd:31:aa:9b:5b:ce:
                    18:13:ed:af:0a:df:a3:d8:2d:89:fa:5e:6b:bf:ce:
                    f4:90:49:af:36:96:1f:e2:37:04:31:3d:5a:d7:7e:
                    81:7b:d6:64:89:cc:94:36:f1:a9:43:a4:84:e4:f2:
                    59:e2:21:3d:06:48:54:16:fb:a0:45:d7:fd:e4:ed:
                    14:fe:69:47:83:06:82:a7:d4:05:75:1b:da:fa:ce:
                    4c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EE:64:5D:24:16:C5:59:80:DE:56:E1:84:BF:3C:3A:39:FB:55:E7
            X509v3 Authority Key Identifier:
                keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:9f:bd:ac:a9:d1:a9:1a:9d:06:f9:6b:52:fb:55:f0:0b:fc:
         83:42:56:12:0b:2e:8d:19:49:52:da:db:a7:d3:b1:c9:81:07:
         4c:dd:bc:8f:8c:08:88:be:3e:a7:08:30:b6:d8:b4:d1:85:e4:
         a2:b9:ae:37:2e:34:7f:3c:dc:b1:b7:35:a3:fb:04:70:a2:9c:
         87:62:b7:8e:f7:30:f6:d9:b7:88:32:73:b8:68:4a:72:fd:52:
         5e:11:ab:7c:51:bb:6c:91:ac:8a:04:ae:d4:94:df:de:c0:4a:
         cb:79:d4:6a:20:b0:35:98:46:2a:55:20:e4:e7:15:ca:c3:bd:
         60:97:c3:47:93:eb:02:ea:56:4d:3a:b0:fa:69:0c:61:5b:a0:
         60:65:2d:bb:e5:56:ce:50:63:d4:f3:b5:3d:0b:fa:de:e5:1b:
         ae:1c:8b:da:c9:bf:87:5b:22:d1:ad:ae:a5:fd:fb:0b:66:7b:
         fb:72:c7:04:25:74:1d:77:b9:1c:88:81:62:ca:4a:89:2b:3e:
         4c:ea:c1:ac:24:da:18:ba:13:ff:80:52:79:27:6b:d0:aa:c9:
         84:be:fc:52:5f:18:49:f3:be:22:d0:5b:19:a4:72:a9:09:58:
         df:90:11:9a:38:89:ef:af:8a:47:49:2e:ef:ca:57:54:12:e3:
         36:93:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:52 2026 by rpki-client