Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/7D6F53547F0411EBB8CAEE2BC4F9AE02.roa
File:                     7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (raw, json)
Hash identifier:          Ddv1FKEb182ClHhNjoHyHjW5QSpcvemHtoJ1FJiZMAQ=
Subject key identifier:   DD:B2:30:02:17:58:64:99:55:D6:5B:AE:22:DD:BD:64:10:CA:2F:D3
Certificate issuer:       /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71
Certificate serial:       070F
Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/7D6F53547F0411EBB8CAEE2BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:31:21 +0000
ROA not before:           Fri 30 May 2025 22:42:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137222
IP address blocks:        103.215.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl
                          rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71
        Validity
            Not Before: May 30 22:42:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a43199-cf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:c0:b8:c0:02:4b:ab:b0:03:a5:18:e1:25:
                    3a:0f:5e:68:a1:f6:be:3f:09:52:04:b4:d2:0f:ca:
                    e1:4b:50:2e:d9:85:0c:36:8a:94:e4:bf:b3:cc:ef:
                    9a:67:a3:96:03:e1:44:21:6b:ac:63:54:86:e6:f5:
                    30:d5:e2:dc:22:bf:7e:92:4f:92:f3:7a:02:3a:29:
                    8f:18:bd:16:12:76:fc:1f:4b:a4:0c:bc:d6:1a:d6:
                    73:54:34:8d:4e:6d:87:14:b0:57:ab:62:5e:fc:01:
                    1b:a3:dd:80:81:a7:7a:9b:a6:5f:aa:b3:fd:7a:6c:
                    cd:ac:82:3c:a4:55:57:e4:97:d7:d9:22:74:35:fd:
                    35:6b:23:fc:57:56:05:26:61:37:f9:54:8f:9b:43:
                    aa:6b:ed:f5:b5:bd:9d:bf:bc:64:a3:9c:11:d7:ca:
                    68:83:95:ef:32:fe:8e:d1:18:5f:69:4e:d7:22:fd:
                    2e:26:6c:5b:24:88:5b:c3:a2:2d:75:56:7e:e0:3b:
                    4b:77:93:0d:f7:20:f9:8b:06:b5:f8:df:43:09:06:
                    46:99:5f:55:57:f2:42:7f:44:77:61:23:23:3a:8b:
                    3b:a6:49:4d:4e:de:7f:10:be:8e:0b:e9:e5:0f:d6:
                    0c:7b:30:e0:b9:c5:1e:76:44:3c:44:af:cf:db:cf:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B2:30:02:17:58:64:99:55:D6:5B:AE:22:DD:BD:64:10:CA:2F:D3
            X509v3 Authority Key Identifier:
                keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/7D6F53547F0411EBB8CAEE2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:37:bd:e2:f1:b2:ab:57:4b:83:47:4d:18:0c:34:c9:f7:ec:
         4b:30:12:8d:13:c8:02:7e:9f:b3:66:c0:55:55:9f:c8:b0:9f:
         6e:cd:00:71:56:ed:70:61:53:d7:f8:64:83:cb:2c:c4:6c:a2:
         9f:44:38:46:e3:ff:0e:d1:52:72:d9:ca:95:57:89:d6:e6:79:
         6a:12:83:12:af:02:4e:eb:bc:4e:70:56:fa:e4:f0:4a:fc:a5:
         c8:6e:dc:02:85:31:70:1c:9d:eb:ad:cc:c9:db:59:dc:27:4b:
         7e:c1:d5:79:a7:4c:24:8d:2f:db:82:d7:df:65:76:85:e7:2d:
         88:98:20:63:42:d5:27:9d:f1:d7:a1:33:46:82:ff:35:99:d0:
         1c:33:1c:bf:10:95:c1:f4:92:3b:10:fa:93:63:cc:58:38:d7:
         fd:68:38:88:4a:6a:5f:16:b8:53:4d:0d:21:58:48:a1:9b:af:
         db:68:18:25:78:97:34:6c:8f:f2:50:99:09:d7:16:c2:7b:eb:
         3b:b8:39:a7:09:67:af:9b:0f:a3:a3:00:e5:9c:90:a2:c8:4d:
         97:d7:12:32:32:35:02:a7:c3:be:96:27:c4:7d:8c:e0:17:0d:
         10:66:c8:b9:b1:b3:66:01:e5:1c:b0:83:aa:bf:75:27:6a:04:
         4e:9f:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:02 2026 by rpki-client