Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/729F253CAB7611F0BCB28743C4F9AE02.roa
File:                     729F253CAB7611F0BCB28743C4F9AE02.roa (raw, json)
Hash identifier:          cgiDC2IeZyxnx0YTTuxfu//CGtgQm8yJluwva/OgfKI=
Subject key identifier:   34:3E:1B:FB:9C:45:32:C4:F9:6B:A1:67:85:02:10:54:74:F0:8C:1F
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0640
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/729F253CAB7611F0BCB28743C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:24:23 +0000
ROA not before:           Fri 17 Oct 2025 16:30:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     932
IP address blocks:        103.214.172.0/22 maxlen: 24
                          182.255.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Oct 17 16:30:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47647-660c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:93:c9:d7:56:5d:b2:32:bf:33:bc:00:78:
                    20:a3:3e:fe:a6:e3:06:8c:d6:ec:fe:35:31:86:ec:
                    91:f0:08:86:37:ad:19:44:b9:00:7f:b5:09:ba:aa:
                    92:e3:a0:c6:71:6a:1a:49:83:db:75:e6:d1:85:e7:
                    08:54:48:61:76:bb:87:9b:e5:0a:b9:fb:0b:e1:52:
                    3a:ed:cd:99:a8:5e:0b:ec:82:c6:3b:50:2f:e1:a1:
                    ea:85:ac:2b:36:e5:e6:7c:e3:ca:8d:20:a9:e4:e5:
                    c0:98:b7:96:23:57:28:b6:30:69:ae:2c:e5:1e:5d:
                    89:18:58:6b:44:11:de:b5:51:79:20:4e:62:22:50:
                    21:ec:7d:6e:96:75:f5:e3:5a:99:01:6c:3d:fd:c6:
                    47:38:6a:cb:98:f8:45:a8:05:d0:aa:7c:ef:68:db:
                    dd:f1:58:1d:f0:32:28:2b:32:c0:8b:51:fb:82:2c:
                    c0:83:58:fb:9a:ae:5b:77:56:bf:bd:3f:1c:ca:2d:
                    5c:ea:6a:f0:e5:3e:eb:02:1a:73:7b:eb:07:17:be:
                    94:28:23:f4:1c:16:e2:50:1e:64:3b:9f:27:db:3f:
                    b6:f8:f0:69:21:71:54:f1:fb:b1:df:91:c3:ad:d6:
                    c9:2d:d9:db:18:cc:e8:4f:7f:e7:6c:b0:76:7d:6f:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3E:1B:FB:9C:45:32:C4:F9:6B:A1:67:85:02:10:54:74:F0:8C:1F
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/729F253CAB7611F0BCB28743C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.172.0/22
                  182.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:63:8a:21:f9:c9:b0:0b:c6:0c:81:30:9a:25:57:23:0d:
         e3:20:80:a1:c2:c8:3c:e3:48:9b:3a:45:10:dc:d7:1c:c3:33:
         45:15:b8:aa:d3:bb:41:9b:f0:97:2d:23:45:19:35:1e:48:6b:
         75:5a:e3:9e:a8:18:3c:9e:4e:96:1a:d9:d5:fa:a9:86:43:d5:
         80:23:f5:f3:32:fe:e6:e5:9e:0f:ed:11:2d:f6:3f:52:f6:ea:
         cf:3b:02:93:8a:c6:d5:e3:24:e0:8d:d1:b6:f7:0b:98:1b:a4:
         cf:18:f2:f4:4c:44:02:c7:2d:21:55:58:20:64:15:e5:07:7c:
         8d:ca:86:b8:b2:07:bd:8f:37:ae:6f:36:a3:93:ef:57:cb:78:
         73:8b:06:11:81:d5:81:35:4e:ec:e8:f0:eb:59:83:e9:85:ed:
         14:9f:7f:43:3b:ad:44:aa:e7:40:e2:27:61:6f:26:4d:c7:74:
         aa:60:7a:80:67:2a:21:ae:33:eb:ae:99:9b:37:1e:41:d9:83:
         cd:8c:6b:f3:4d:51:b9:84:a3:ec:e7:bb:67:53:5d:64:7c:3d:
         2b:de:fb:53:f3:c3:88:91:27:4c:96:cc:3d:e6:56:63:98:47:
         2c:6b:fa:83:12:0d:c9:f9:f9:03:b3:be:9e:91:99:ec:80:08:
         ff:fb:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:39 2026 by rpki-client