Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7545D7688D6C11F0AB7BFE70C4F9AE02.roa
File:                     7545D7688D6C11F0AB7BFE70C4F9AE02.roa (raw, json)
Hash identifier:          zyHK6GN9WSyGoWDluo7AVH6SrUtiuqWiDlrfnmpJRyo=
Subject key identifier:   2F:36:C3:51:BE:90:B0:55:66:B4:FF:A9:49:3B:80:CE:BF:46:72:36
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0D73
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7545D7688D6C11F0AB7BFE70C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:40:08 +0000
ROA not before:           Tue 09 Sep 2025 11:02:21 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135341
IP address blocks:        103.137.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3443 (0xd73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Sep  9 11:02:21 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a44fc8-df44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:96:ff:d5:5b:a2:06:3d:e2:5d:98:0c:96:
                    c8:12:be:f7:c6:5e:b2:e3:71:8c:e2:d4:af:0d:7f:
                    53:de:df:71:1b:b5:74:d7:8e:b7:e1:af:7c:c3:77:
                    c9:7f:36:43:12:bd:ba:d1:6e:c8:9d:c6:ad:4d:0c:
                    f6:18:d3:87:5f:8c:f3:f7:c0:cf:39:d0:ab:c6:8e:
                    30:20:e0:87:57:5a:d4:9d:d5:ed:0e:9f:ed:ef:59:
                    47:78:b5:34:1e:24:c7:7b:2b:05:31:29:79:52:4b:
                    b0:1b:3c:e2:61:05:81:00:95:ad:93:b5:57:1a:74:
                    9d:e4:f3:22:1f:dc:06:ac:17:14:35:40:01:f0:e4:
                    75:1d:15:7b:21:a9:16:43:78:a7:f6:b8:d2:3b:8c:
                    5d:48:e2:98:86:80:99:e6:43:7e:d9:77:15:03:d0:
                    de:95:8a:85:d7:68:f3:6d:ff:91:88:b0:17:5b:51:
                    63:27:35:43:8e:0a:22:6f:c4:0a:d4:43:cb:da:c7:
                    1e:ab:7e:b0:65:e4:f2:79:ce:d7:79:8f:60:0c:04:
                    6e:55:2a:eb:fe:c4:b8:dd:8e:44:93:a7:8f:b2:a7:
                    41:ac:30:fb:50:5e:e0:9e:a3:dd:c1:fa:50:34:ae:
                    9a:2a:5d:71:55:12:53:81:99:3c:87:50:52:18:29:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:36:C3:51:BE:90:B0:55:66:B4:FF:A9:49:3B:80:CE:BF:46:72:36
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7545D7688D6C11F0AB7BFE70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:e1:be:00:3c:a8:9a:88:3d:ca:40:a8:ff:e1:3f:e3:c6:
         62:db:0d:db:90:c5:19:93:63:e5:f4:a4:80:36:75:07:e1:14:
         4f:33:9d:fb:14:3c:18:40:bd:1a:e4:4a:0d:0c:49:46:5b:35:
         99:b3:79:1e:47:ad:81:63:f1:41:d4:61:b7:8d:e2:3a:a0:a7:
         3d:f7:c1:a1:5b:06:e1:ae:4b:82:63:0d:31:7c:cf:e0:73:bf:
         9a:e6:89:67:8e:73:e5:f7:79:d6:a1:b8:ec:07:e4:b8:51:bb:
         55:77:fc:4e:fa:78:6a:de:74:92:da:6e:69:67:e7:dd:7c:ca:
         4c:7a:50:12:e2:20:5b:00:04:a7:a6:4c:2c:34:34:0c:bd:e3:
         41:37:10:be:4c:8f:1c:8a:3c:a8:78:8b:65:12:2f:ac:94:33:
         80:27:53:96:0d:8a:86:56:b6:8e:e7:36:9c:d7:9d:1a:c6:ab:
         a6:93:4b:ba:14:ee:e1:90:b8:dd:c0:82:60:25:20:2a:d4:80:
         76:61:45:f0:e6:33:91:81:ef:c3:ca:90:e0:39:d5:6f:9b:c8:
         34:f3:82:cc:4d:82:4b:2a:63:29:54:ba:98:55:88:85:fc:55:
         bd:5f:c8:01:e1:ce:7f:f6:7c:a0:5d:2c:54:26:23:bd:45:a9:
         87:7f:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:16 2026 by rpki-client