Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/7A976A4E0A7011F0AA901820C4F9AE02.roa
File:                     7A976A4E0A7011F0AA901820C4F9AE02.roa (raw, json)
Hash identifier:          lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=
Subject key identifier:   E2:74:17:D6:1D:F6:E2:57:53:50:AC:92:97:51:DF:33:A8:2C:10:90
Certificate issuer:       /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial:       0AB3
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/7A976A4E0A7011F0AA901820C4F9AE02.roa
Signing time:             Mon 30 Mar 2026 20:25:21 +0000
ROA not before:           Mon 30 Mar 2026 20:25:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     7489
IP address blocks:        103.207.68.0/22 maxlen: 22
                          210.16.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2739 (0xab3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
        Validity
            Not Before: Mar 30 20:25:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69cadc31-0e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:87:1f:72:1e:d4:7f:77:2a:2b:76:94:8f:74:
                    09:c6:65:f5:ca:58:7a:82:48:a9:33:dd:cb:79:75:
                    00:84:5f:ee:73:62:c2:29:27:f8:a3:5b:54:8e:5e:
                    73:85:56:27:be:62:82:d6:de:66:0f:24:56:b2:a4:
                    0d:a3:83:81:bc:cf:67:30:65:e6:34:a7:17:20:57:
                    32:e1:72:3e:78:f7:c9:30:f8:4a:37:61:70:95:0f:
                    cf:b4:d6:f6:35:f0:f3:43:97:25:67:34:63:3d:5c:
                    a0:f3:3c:7a:05:3c:fc:53:e2:31:10:46:47:47:b6:
                    31:fd:1e:20:53:de:d4:7e:4c:40:32:40:dc:99:11:
                    27:c5:a1:47:d8:35:2f:f3:7b:53:32:78:19:73:56:
                    c8:51:72:98:f9:36:a1:ca:76:2e:88:d6:08:3c:fa:
                    be:8b:d3:6a:2f:4e:34:07:45:06:65:02:27:eb:0f:
                    52:9a:51:cc:6d:6c:ce:47:f9:92:6a:eb:e8:68:56:
                    79:a6:d2:82:42:bb:9a:29:af:d8:4c:d3:3a:5a:0a:
                    a6:14:44:88:54:cb:95:d9:3a:eb:80:5f:ec:0e:6a:
                    7c:a2:ee:57:6c:53:80:7e:53:54:ad:6b:12:17:7f:
                    98:c3:41:43:02:24:a8:2d:f6:cd:76:0e:e6:cc:ec:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:17:D6:1D:F6:E2:57:53:50:AC:92:97:51:DF:33:A8:2C:10:90
            X509v3 Authority Key Identifier:
                keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/7A976A4E0A7011F0AA901820C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.68.0/22
                  210.16.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:7e:18:cc:7a:db:a6:07:19:3b:1f:85:23:da:2d:2d:85:5e:
         46:56:c6:f4:1b:b6:d5:8b:c0:24:3e:61:4d:da:bb:a2:64:b3:
         4c:09:a0:71:0c:44:8d:86:71:c8:f5:95:b6:e9:cd:87:90:b0:
         5f:04:f9:19:31:7c:72:65:b2:c7:0d:02:98:9c:6f:c8:8c:67:
         ae:00:ce:07:63:d7:90:ff:4a:9e:11:bb:c6:39:0b:fe:90:1a:
         95:92:32:0d:58:50:6e:54:49:1b:a3:71:4e:99:4c:a7:b6:74:
         99:0a:03:03:30:0a:d8:7f:14:60:a3:43:5b:64:d5:1d:ed:53:
         c5:4a:8e:18:da:e1:c8:00:e1:27:0d:c9:54:e5:62:69:a4:7f:
         d7:12:40:50:cf:c7:6a:7b:45:ab:67:33:5d:39:7f:25:71:fe:
         60:c5:4b:45:71:15:89:5f:85:b6:d0:c1:c8:66:b2:69:a0:22:
         5e:fc:0c:09:e2:83:31:a2:84:3e:86:c8:21:1b:23:5c:35:90:
         f3:a6:7e:e3:4b:6e:6a:31:6c:71:44:8a:ff:04:3b:6f:2b:c5:
         73:52:31:22:68:5d:ba:d7:a0:90:c3:e8:13:a9:1d:0c:6e:12:
         2d:c4:8a:9b:f2:1d:88:f2:12:32:e6:c0:f7:2c:3a:91:c8:2f:
         b6:b3:e8:f6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw
MjgwN0EwMjYwHhcNMjYwMzMwMjAyNTIxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNhZGMzMS0wZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA84cfch7Uf3cqK3aUj3QJxmX1ylh6gkipM93LeXUAhF/uc2LCKSf4o1tUjl5z
hVYnvmKC1t5mDyRWsqQNo4OBvM9nMGXmNKcXIFcy4XI+ePfJMPhKN2FwlQ/PtNb2
NfDzQ5clZzRjPVyg8zx6BTz8U+IxEEZHR7Yx/R4gU97UfkxAMkDcmREnxaFH2DUv
83tTMngZc1bIUXKY+TahynYuiNYIPPq+i9NqL040B0UGZQIn6w9SmlHMbWzOR/mS
auvoaFZ5ptKCQruaKa/YTNM6WgqmFESIVMuV2TrrgF/sDmp8ou5XbFOAflNUrWsS
F3+Yw0FDAiSoLfbNdg7mzOyRJwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOJ0F9Yd
9uJXU1CskpdR3zOoLBCQMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz
RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTdFNDUvMDZDODU2M0M4M0Q5MTFFQUEzMTI0RjVDQzRGOUFFMDIvN0E5NzZBNEUw
QTcwMTFGMEFBOTAxODIwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ89EAwQB0hB4MA0GCSqGSIb3DQEBCwUAA4IBAQBDfhjMetumBxk7
H4Uj2i0thV5GVsb0G7bVi8AkPmFN2ruiZLNMCaBxDESNhnHI9ZW26c2HkLBfBPkZ
MXxyZbLHDQKYnG/IjGeuAM4HY9eQ/0qeEbvGOQv+kBqVkjINWFBuVEkbo3FOmUyn
tnSZCgMDMArYfxRgo0NbZNUd7VPFSo4Y2uHIAOEnDclU5WJppH/XEkBQz8dqe0Wr
ZzNdOX8lcf5gxUtFcRWJX4W20MHIZrJpoCJe/AwJ4oMxooQ+hsghGyNcNZDzpn7j
S25qMWxxRIr/BDtvK8VzUjEiaF2616CQw+gTqR0MbhItxIqb8h2I8hIy5sD3LDqR
yC+2s+j2
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:25 2026 by rpki-client