Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/7B45598CC3F111EDAB69B855C4F9AE02.roa
File:                     7B45598CC3F111EDAB69B855C4F9AE02.roa (raw, json)
Hash identifier:          KD2BlBHmdYrYN90XGC4f8F1qUJ8NW/API0cYFd241XM=
Subject key identifier:   13:79:AD:11:31:DA:03:98:27:5B:BF:50:F8:AD:5B:74:BD:59:EE:B9
Certificate issuer:       /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Certificate serial:       0237
Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/7B45598CC3F111EDAB69B855C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:11:21 +0000
ROA not before:           Fri 13 Feb 2026 02:22:00 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     150780
IP address blocks:        103.93.22.0/23 maxlen: 23
                          103.93.22.0/24 maxlen: 24
                          103.93.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
                          rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
        Validity
            Not Before: Feb 13 02:22:00 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a410c9-6a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:36:2c:ca:23:ba:a7:1a:c8:cb:93:1a:f2:
                    a7:53:86:2e:05:ef:19:f4:63:86:e6:f0:48:69:b7:
                    af:7d:ed:3e:a6:f2:f1:6c:42:14:87:82:a8:96:0a:
                    7a:1e:a0:c0:1c:bc:dd:31:80:b0:10:c2:e6:24:0a:
                    be:c1:05:41:62:c2:0c:32:4d:a5:88:ea:c5:d0:da:
                    4c:b8:51:35:6b:8c:51:cb:cb:8a:c0:40:e1:c4:3d:
                    29:a9:de:cd:18:f6:a6:9b:52:22:9c:ac:61:ae:a9:
                    66:ed:3d:97:e6:72:f3:48:9d:fa:be:9a:37:e4:83:
                    2a:93:f0:0a:44:b5:6d:ce:f5:be:32:59:23:1c:78:
                    0d:36:86:41:6b:c4:73:d0:f9:d4:0f:97:62:1f:8f:
                    cb:41:06:6d:86:4f:5d:46:ee:eb:b3:88:60:5b:37:
                    98:7c:e2:aa:d2:5b:39:6e:ed:27:5c:4c:59:d5:cd:
                    43:5f:96:f4:17:bd:d3:c4:97:62:56:2f:88:c9:17:
                    24:60:ee:3a:13:7d:4c:14:6c:75:54:b4:74:f5:96:
                    16:a9:27:1a:1a:06:99:9c:8d:65:2c:2a:20:80:4e:
                    13:7e:15:b3:b9:59:d4:40:32:8e:6a:31:0f:57:b5:
                    bb:06:0e:77:17:5a:7a:86:fd:c8:ba:4c:0e:c3:25:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:79:AD:11:31:DA:03:98:27:5B:BF:50:F8:AD:5B:74:BD:59:EE:B9
            X509v3 Authority Key Identifier:
                keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/7B45598CC3F111EDAB69B855C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:28:57:c5:20:fe:11:c2:30:e8:cc:51:ee:cc:cf:f4:d6:75:
         51:53:68:56:ee:ad:b5:b3:38:18:b9:84:ab:0d:1e:27:23:2f:
         cd:65:49:62:51:37:82:79:8d:18:b6:48:cb:57:40:8f:17:fd:
         c9:ea:43:21:a1:40:07:94:c1:35:df:e1:a8:18:a1:fc:6c:94:
         7d:29:b3:4d:e2:34:bc:b4:f3:61:2e:9a:58:de:5c:bf:c2:02:
         6a:bd:b4:40:ec:90:33:58:2d:de:45:43:8f:f1:6b:52:ab:81:
         8b:24:52:1f:03:86:c3:1f:6b:be:0b:45:e1:d4:c2:0a:56:b9:
         bf:89:28:b8:c0:00:38:bc:12:5a:c8:af:25:3e:96:d7:f4:22:
         b6:e3:81:9c:66:2e:d1:38:4a:0d:6d:68:54:d7:81:14:e0:5e:
         44:48:6b:5a:cd:b1:14:ad:9d:2a:37:5f:30:ca:42:b3:0f:9e:
         70:ca:5b:2d:9d:bc:18:14:83:ab:9d:cd:c7:1a:9e:48:fb:69:
         0d:64:9f:ac:e5:9d:7a:a0:51:48:9c:bb:d8:04:98:43:a6:15:
         c3:9b:b0:c3:40:33:11:e5:23:d9:a5:74:fd:0c:6c:ea:16:4b:
         be:02:e9:09:73:c3:ac:92:45:f9:1a:c4:67:10:11:c4:47:7a:
         ac:4d:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:49 2026 by rpki-client