Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa
File:                     B722FC542A0411EB992DD32EC4F9AE02.roa (raw, json)
Hash identifier:          55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=
Subject key identifier:   EF:43:AF:DC:AB:38:2F:B6:20:AE:13:E3:71:8F:A3:AF:5C:AC:2F:B9
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       07F1
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa
Signing time:             Thu 02 Apr 2026 21:28:24 +0000
ROA not before:           Thu 02 Apr 2026 21:28:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4768
IP address blocks:        103.7.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: Apr  2 21:28:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69cedf77-8470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:a7:70:88:68:e8:ba:84:47:49:d7:a0:85:
                    8b:7e:12:27:a1:90:e6:b8:59:b7:a1:05:94:2e:83:
                    a2:f4:5f:b1:8f:c0:9d:aa:a9:2a:88:86:48:41:7a:
                    92:03:32:76:db:33:52:ce:4e:17:03:d2:b4:1d:5f:
                    b7:c8:62:a8:62:2f:64:e4:37:0a:45:8f:02:bc:de:
                    6d:3e:e4:ec:14:b0:1c:7f:3c:6d:b5:ad:8c:04:54:
                    9a:58:39:73:b8:53:26:9e:2a:fc:96:00:12:73:7c:
                    85:69:83:b8:41:6d:d7:fd:11:f9:b3:c1:ee:02:d3:
                    43:2b:ff:7e:4b:33:b7:41:93:81:23:09:cc:76:97:
                    ec:d9:77:59:72:7a:1d:03:5e:32:aa:a0:21:ee:45:
                    6e:a7:94:0d:3f:75:11:37:30:1d:c5:45:93:06:0c:
                    91:a6:2c:fa:3e:5f:ec:db:93:66:19:8c:51:8f:ba:
                    0a:fc:96:f7:10:d6:fd:35:83:61:b9:1e:23:65:a8:
                    f5:1e:1b:6e:b5:0f:dc:29:8a:97:46:61:0f:dd:22:
                    1e:43:71:f2:fb:45:84:22:d9:f2:d5:16:0b:95:6a:
                    ea:52:40:9a:14:8d:da:8f:fd:c4:b4:84:02:55:f6:
                    e6:76:30:33:0f:b7:fa:b8:a9:82:30:ba:d7:7a:57:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:43:AF:DC:AB:38:2F:B6:20:AE:13:E3:71:8F:A3:AF:5C:AC:2F:B9
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:90:03:ef:a2:88:d4:00:32:96:6f:ea:4d:be:b9:85:89:
         22:e0:09:da:5a:32:75:09:a1:cc:cc:3a:40:3d:ae:36:51:58:
         cb:10:f1:87:9e:bf:74:61:26:58:4c:ec:eb:09:92:22:4f:90:
         47:a7:51:e6:3e:ab:61:46:63:8e:8f:71:7e:a6:30:f2:0e:0d:
         b8:20:80:8c:ee:70:f4:c0:31:a2:07:55:b9:3e:d3:be:de:7e:
         48:5f:2b:67:b2:e6:78:3d:11:ce:31:fb:81:2c:b6:01:7e:57:
         89:a2:87:97:aa:99:ca:48:5e:a4:8e:34:7f:53:85:c5:dd:74:
         5e:03:53:16:c9:27:ae:13:4f:c0:03:59:5a:52:9d:d6:72:8b:
         d3:66:1c:a3:66:ca:c2:0a:cf:46:ae:6c:65:1c:aa:45:9c:92:
         15:40:22:d8:55:fe:07:f9:0f:2a:71:fc:bb:5b:e3:38:df:71:
         06:70:37:f1:36:66:3c:0b:07:1b:0e:d7:52:49:eb:13:48:90:
         09:a3:9a:c9:b5:b9:00:0a:4b:f6:9d:c8:aa:0d:05:f5:68:77:
         23:ad:67:f4:de:ac:3d:54:8b:a7:08:80:7c:53:71:ac:38:45:
         08:0c:e6:5a:82:3b:0c:cf:f8:da:bb:e5:de:fb:73:d6:37:6b:
         6d:14:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:33 2026 by rpki-client