Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/7A8706087CA011EF8491607DC4F9AE02.roa
File:                     7A8706087CA011EF8491607DC4F9AE02.roa (raw, json)
Hash identifier:          b4sgJcDJhftGhDWysYunsu/KDke3XRuXY3MfBbMHDRE=
Subject key identifier:   4B:FE:63:86:C9:A5:45:E9:53:49:70:2E:C0:0E:9C:B9:1E:4E:13:77
Certificate issuer:       /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Certificate serial:       01FF
Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/7A8706087CA011EF8491607DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:36:35 +0000
ROA not before:           Wed 09 Apr 2025 03:09:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151061
IP address blocks:        103.126.40.0/23 maxlen: 24
                          2001:df2:37c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
                          rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
        Validity
            Not Before: Apr  9 03:09:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3de73-4407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:98:40:de:60:92:c6:3a:93:75:5c:d4:dc:
                    e4:73:d2:b5:fe:27:06:4b:c4:d5:d1:f9:bd:82:b7:
                    31:f4:e7:cb:eb:cd:ad:84:21:a9:9f:0c:fc:0b:1c:
                    e2:83:df:0b:d0:a3:08:c4:55:7b:c2:53:c5:55:ba:
                    41:73:45:3f:8a:d1:11:c7:b3:92:96:0d:3a:ed:fb:
                    af:50:4b:e6:44:35:64:5a:d0:bc:ae:02:e1:b1:ed:
                    32:35:90:b1:ec:07:f3:aa:1e:3e:61:d5:9a:2f:d5:
                    9f:df:e3:aa:65:5f:e6:1d:38:bb:c9:d1:1d:a5:d4:
                    12:45:df:9f:71:d2:8a:93:83:1c:84:e8:00:7f:88:
                    73:0c:37:39:6f:a5:b6:9b:f3:65:e0:24:f8:ca:65:
                    25:23:46:83:5d:32:65:15:8b:6f:cd:af:b7:11:4b:
                    33:69:d7:d5:a1:90:b6:b8:99:15:48:7b:4b:75:fd:
                    20:55:56:b5:02:ac:f5:42:14:c9:ed:20:3e:06:45:
                    dc:31:2c:da:de:5d:f1:e1:94:6f:43:cf:73:9b:9c:
                    20:a7:bb:4e:2b:41:dd:c1:4d:29:cb:42:60:4e:85:
                    99:a7:9d:c6:2a:f1:24:88:93:e1:6d:7d:9a:39:9c:
                    3e:c8:42:2c:76:e9:06:cf:82:7e:88:b5:76:77:13:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FE:63:86:C9:A5:45:E9:53:49:70:2E:C0:0E:9C:B9:1E:4E:13:77
            X509v3 Authority Key Identifier:
                keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/7A8706087CA011EF8491607DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.40.0/23
                IPv6:
                  2001:df2:37c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:54:f1:8b:fa:be:11:37:cd:bc:5c:19:7c:44:e4:71:ba:75:
         50:c9:7d:ac:11:af:02:3a:50:5f:ac:dc:ad:d7:3e:8d:ff:a2:
         9f:a3:3f:1c:59:de:c9:3b:94:91:15:29:47:66:21:97:34:67:
         27:05:70:0e:aa:f2:d6:2c:c9:53:9b:c0:25:99:5b:20:d8:a2:
         fb:ed:24:88:94:46:bf:13:64:7d:2f:12:2f:cc:47:6d:6b:96:
         aa:bd:cb:3e:37:2b:3c:16:96:53:bc:b5:43:26:c1:67:10:77:
         53:2a:1c:11:be:6d:08:5a:8e:69:63:be:81:2a:ba:0e:92:5d:
         5d:e5:3f:17:56:6a:70:39:4c:9b:22:0e:8c:a3:d6:8b:1e:f1:
         4f:06:35:b9:7d:e9:bb:e5:93:09:bc:1d:92:ee:62:19:02:7d:
         11:6f:11:a6:11:ac:17:64:63:fb:73:5a:80:f0:f0:85:77:30:
         0b:2b:b9:84:d1:28:06:c3:5e:85:24:8f:73:97:0e:43:44:82:
         74:c2:4e:87:ea:6a:5f:2d:09:16:06:ac:ec:00:34:f7:46:6e:
         b8:0d:3b:6d:d8:1f:6f:b4:1b:fa:1a:84:03:e4:4a:14:cd:3c:
         07:73:20:11:05:70:e0:e8:7c:bd:56:5b:48:94:72:95:69:31:
         4b:a0:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:57 2026 by rpki-client