Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa
File:                     7633392033B411EB98035F74C4F9AE02.roa (raw, json)
Hash identifier:          p6hXF7E6xlvbRKYmPzeG7CcENSLwetloa0sJ8/RE+N0=
Subject key identifier:   92:7B:BF:D9:33:7B:D7:AD:41:4A:CE:F9:AF:4A:FF:5A:79:0D:36:11
Certificate issuer:       /CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Certificate serial:       07C1
Authority key identifier: BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:27:37 +0000
ROA not before:           Thu 18 Sep 2025 22:03:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138339
IP address blocks:        103.130.148.0/22 maxlen: 22
                          2403:bc40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
                          rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCA34, serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
        Validity
            Not Before: Sep 18 22:03:39 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a430b9-838c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:39:1e:f4:18:12:1b:87:36:c7:81:1d:16:
                    d5:ee:ae:d0:99:f9:69:7b:2c:53:53:9b:89:5d:50:
                    3e:73:6e:a7:a8:08:f2:09:b4:b6:96:c8:64:53:96:
                    f0:5d:fc:7a:5a:94:2c:91:82:07:66:e3:96:41:f2:
                    bb:3e:f2:68:b0:f2:47:ac:25:7c:9c:69:2a:d5:c5:
                    e1:4b:16:bf:f8:e7:60:91:37:b8:07:d6:75:0b:b8:
                    f1:46:84:43:6a:3f:64:51:eb:97:60:c2:d5:f0:44:
                    eb:a9:05:b0:e4:f8:8d:bf:1c:98:a9:72:88:1e:00:
                    b6:c9:4b:76:43:09:2c:c4:1d:85:82:a9:f6:78:7b:
                    b5:7a:ea:aa:d8:df:73:e6:98:4e:2e:85:e8:14:06:
                    65:97:b6:83:54:57:f9:8f:e8:97:7b:44:e5:d1:17:
                    b6:ea:c5:03:42:d1:7b:07:b3:6e:9f:0e:25:1f:01:
                    ad:fd:9d:4b:49:5f:03:b0:98:86:b7:59:26:01:52:
                    40:da:38:df:07:79:3a:64:de:be:d6:37:95:76:c6:
                    4e:6f:a8:c8:07:60:1f:8f:5d:0e:fb:d2:07:7b:a5:
                    b0:35:2e:c9:fe:c9:86:03:59:b6:65:9c:1c:80:ce:
                    e1:ff:37:65:f0:d2:68:fe:63:38:cb:1d:cd:70:ef:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7B:BF:D9:33:7B:D7:AD:41:4A:CE:F9:AF:4A:FF:5A:79:0D:36:11
            X509v3 Authority Key Identifier:
                keyid:BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/7633392033B411EB98035F74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.148.0/22
                IPv6:
                  2403:bc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:9b:9f:e8:06:55:c6:aa:85:42:c1:70:35:c8:c2:65:78:
         21:12:45:b2:81:ba:bb:8e:52:0a:5d:69:31:88:e6:3c:96:84:
         c8:29:40:2e:4d:7f:c5:fc:ac:8b:1b:3a:35:da:f7:6c:03:86:
         fd:7a:b3:11:cc:11:ca:a0:1b:8b:f2:ba:23:21:19:6c:d2:d6:
         06:50:21:7b:d8:3a:09:35:bb:7a:4d:18:83:97:d7:90:57:be:
         28:51:2f:5b:ce:e0:93:c7:c6:4b:90:36:8c:d3:8c:21:86:00:
         bb:3f:2b:03:41:f6:2d:31:f3:8d:6f:77:cc:9b:33:65:6e:64:
         d7:a3:17:a0:0b:1e:7a:b5:11:79:7f:77:f6:6d:ff:e4:07:88:
         be:54:65:4b:a6:88:ad:7d:32:bb:ff:5f:3c:1f:39:f8:60:25:
         63:8d:6f:28:0b:a0:64:9e:d3:02:d1:8e:e3:61:cf:8e:d1:f6:
         50:c1:0e:42:73:ee:15:bd:42:d4:2d:c5:f2:30:53:9c:29:d7:
         62:9e:f3:90:ad:c1:87:a4:fb:66:5e:8b:b8:a9:2c:82:7c:c5:
         43:e5:da:6a:9e:88:29:d3:8f:35:f9:ca:ee:39:91:42:0f:a2:
         f0:f2:2d:21:26:32:ce:ea:e5:eb:22:3b:ee:30:e8:2e:9a:a9:
         72:9f:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:42 2026 by rpki-client