Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/710DB204831D11ECA37CC12EC4F9AE02.roa
File:                     710DB204831D11ECA37CC12EC4F9AE02.roa (raw, json)
Hash identifier:          DdMCxtbGwSlGorGkWMrmN/1aFHOWd0BV3p40qJI2uyo=
Subject key identifier:   AA:5B:77:C3:D4:D6:C0:53:D0:F8:25:B8:65:38:21:D2:6D:F2:77:6C
Certificate issuer:       /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial:       0717
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/710DB204831D11ECA37CC12EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:04:56 +0000
ROA not before:           Wed 24 Sep 2025 22:43:57 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132420
IP address blocks:        103.120.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl
                          rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Validity
            Not Before: Sep 24 22:43:57 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a463a7-5eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:d8:db:b0:1f:cb:9c:d3:9c:6f:83:4a:d7:
                    7d:ea:8a:94:77:25:a7:f5:78:f5:7b:aa:a4:a8:15:
                    9e:53:d3:d3:99:5e:a7:f3:1d:2a:f0:1c:dd:6b:44:
                    62:d9:fe:9d:95:25:fa:3a:d0:f8:bd:6a:68:7f:99:
                    62:4c:7b:00:81:88:00:79:a8:44:63:b9:c6:ff:d2:
                    8d:44:ab:50:db:6b:7c:e5:81:2d:7a:21:c6:d3:4a:
                    7c:85:fb:3f:5c:e1:92:6f:50:8f:34:c3:6e:76:98:
                    49:07:21:31:4b:6d:9b:60:f7:a6:80:ca:24:7b:66:
                    12:e3:8a:9a:db:d4:28:5c:5d:ba:5d:63:1d:f0:09:
                    0a:23:2b:83:1b:6b:e7:8a:a7:46:12:73:8c:42:f4:
                    4f:c0:99:5d:56:df:69:b4:50:19:ed:e8:7a:c5:3a:
                    f9:26:c5:0f:43:c7:db:80:4e:5a:af:9c:e4:c6:17:
                    fe:7c:b8:24:98:f4:44:97:a5:b4:9a:35:cc:11:96:
                    30:a9:b1:7b:23:a3:f9:e0:1a:23:bd:76:ea:68:54:
                    33:17:ef:d7:f7:7f:a0:bd:22:da:b0:ea:6f:05:0c:
                    bc:8e:0d:3d:9a:3e:de:2a:8d:a2:94:3c:48:c9:26:
                    99:e7:55:85:d0:12:a1:8f:b4:b6:27:8b:a4:21:22:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5B:77:C3:D4:D6:C0:53:D0:F8:25:B8:65:38:21:D2:6D:F2:77:6C
            X509v3 Authority Key Identifier:
                keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/710DB204831D11ECA37CC12EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:63:5e:d3:b5:51:fb:03:de:41:be:f7:ef:53:25:ae:0f:
         cf:91:57:9d:89:f6:7d:07:f1:64:3f:a1:83:66:71:e0:e8:3b:
         f8:53:15:55:1b:49:8e:77:f3:50:d9:99:bf:f2:c4:b6:b6:02:
         06:94:f4:64:87:d2:b7:1f:29:eb:7f:0f:a6:fa:64:d3:54:11:
         50:4b:e0:d1:ea:a5:46:b1:d4:06:cf:75:3b:1a:d4:81:a0:6f:
         b5:80:97:ec:e1:55:ae:58:7d:eb:a9:03:38:f0:d2:1b:dd:28:
         3d:61:ba:d2:1b:58:86:14:db:fa:b2:0a:66:d7:7c:14:36:cb:
         51:0f:cb:4d:1c:f1:8d:02:51:03:82:6f:aa:af:a6:65:ff:f2:
         bb:a5:de:a4:82:39:ce:1f:21:cb:52:00:b8:32:28:bd:95:d5:
         5c:22:21:5d:1c:22:a2:50:92:bc:41:b9:33:bb:c4:c2:93:a2:
         6a:87:de:5c:f9:ea:fe:b9:26:bd:67:e2:c0:cb:33:36:c5:63:
         81:38:69:39:3d:0d:75:c8:94:ac:6d:5c:8a:9b:90:87:3f:a9:
         54:81:83:e1:d3:a7:a6:50:f2:13:8a:7a:8b:e2:91:77:40:08:
         c5:f9:d3:f3:76:1d:a0:bc:72:7d:48:d2:5b:0e:6b:56:95:a0:
         1a:52:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:44 2026 by rpki-client