Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa
File:                     7617F5408D6C11F0AB7BFE70C4F9AE02.roa (raw, json)
Hash identifier:          nIKfzAgzUb2dGOIfIQvN5e0XYQnfrd0mIjum9+sbKoo=
Subject key identifier:   37:CC:23:DE:5F:E0:D8:FB:8D:BB:AE:FB:ED:84:54:86:D0:C3:09:D0
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0D74
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:40:09 +0000
ROA not before:           Tue 09 Sep 2025 11:02:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        103.137.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3444 (0xd74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Sep  9 11:02:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a44fc9-48a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:ea:eb:85:a2:37:f4:09:a9:b6:49:a4:60:
                    29:cb:65:35:a4:2c:74:f5:f5:a7:37:3a:e3:5a:da:
                    5a:4b:ad:1f:25:68:c2:8a:a8:3a:83:24:1d:b4:d8:
                    ff:93:08:80:98:59:30:61:ae:91:cc:9f:cd:e7:fb:
                    70:55:97:d0:85:a8:36:f3:55:d9:dc:b0:a8:50:64:
                    e6:7f:d7:dc:54:c1:90:fb:d3:20:0f:1b:49:8a:7a:
                    90:70:72:40:6f:cb:f0:d7:fc:4e:fa:6c:34:5a:43:
                    3a:bc:20:07:e2:51:46:6d:20:76:60:3a:4c:25:ca:
                    5c:b5:34:9a:81:f0:57:74:ac:5e:ba:ff:87:b1:2a:
                    c9:e7:64:fa:db:a5:16:32:18:fe:05:4b:ae:f1:ff:
                    08:60:23:95:9f:df:0e:b9:94:5b:fd:6d:f5:e8:04:
                    34:62:4d:58:e2:81:3e:c2:f6:35:55:42:db:21:8c:
                    f1:ab:b7:12:00:7d:a6:9e:e4:d2:cb:84:cd:47:d9:
                    3d:71:f5:e9:3b:d9:46:49:29:40:cb:04:bf:af:bb:
                    b8:ea:0e:41:f8:77:f9:ee:ea:71:46:e2:bf:6b:de:
                    ef:a3:0c:44:7a:4d:f1:8c:26:9b:3a:bc:4f:5a:a6:
                    e8:74:b5:f0:bc:c6:5e:3f:c6:b6:f7:4c:cc:2d:9b:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CC:23:DE:5F:E0:D8:FB:8D:BB:AE:FB:ED:84:54:86:D0:C3:09:D0
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:84:bf:77:6d:e5:ff:01:7a:49:0e:25:75:a4:fa:2b:63:a3:
         08:81:99:af:4f:03:e9:ed:45:99:0f:a9:26:cf:87:bb:c4:4d:
         c4:fb:79:66:76:66:8d:6b:60:e7:2a:16:9e:37:7c:5b:f1:c6:
         69:4e:99:33:81:b9:6c:79:4d:22:98:e8:34:b2:21:e0:66:6c:
         45:41:a5:12:09:4f:f7:aa:24:3d:42:1f:0a:ff:28:e6:2e:38:
         0c:a6:cd:49:69:fe:e1:fe:ea:15:d1:75:9c:78:36:39:31:87:
         c9:e3:90:4b:03:4f:c4:76:33:dd:13:05:40:4d:26:1c:ae:ca:
         36:57:c2:e0:e5:c3:99:5e:10:b0:42:f0:6b:5c:88:16:c1:d0:
         7b:51:9d:f8:52:40:00:f1:7a:db:2f:6c:de:c7:37:f9:f6:6e:
         f8:19:0e:b0:c6:f7:86:c4:6d:bf:d3:f2:7a:7d:41:48:5e:b0:
         da:a7:b1:1f:56:07:30:c8:8d:0e:86:21:e0:7b:bf:15:b2:95:
         a5:55:58:80:d9:17:e2:fa:f4:fb:f1:2e:0d:b7:bd:20:1d:c7:
         ea:2a:c6:48:21:39:e3:29:07:86:a1:89:f7:90:22:84:86:c6:
         c1:12:35:fb:11:b4:31:4e:e2:28:31:3c:1d:87:56:a1:fc:a4:
         f3:9a:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:51 2026 by rpki-client