Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/F68AC4D84D9B11EC9CF19624C4F9AE02.roa
File:                     F68AC4D84D9B11EC9CF19624C4F9AE02.roa (raw, json)
Hash identifier:          wn5hsKWt+cr+OBSJYDxchIFcOIdMik7vlJ/juBsBQA0=
Subject key identifier:   E3:C0:00:4B:3C:4C:E3:7E:AE:3A:76:D3:66:B7:51:2A:72:89:81:E9
Certificate issuer:       /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial:       066E
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/F68AC4D84D9B11EC9CF19624C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 23:44:38 +0000
ROA not before:           Tue 28 Jul 2026 23:44:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     10098
IP address blocks:        103.55.200.0/22 maxlen: 22
                          103.55.200.0/23 maxlen: 23
                          103.55.200.0/24 maxlen: 24
                          103.55.201.0/24 maxlen: 24
                          103.55.202.0/23 maxlen: 23
                          103.55.202.0/24 maxlen: 24
                          103.55.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
        Validity
            Not Before: Jul 28 23:44:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a693ee6-cb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:8e:ce:eb:17:cd:00:61:c5:d9:c1:89:6d:
                    36:be:79:52:59:04:53:36:4d:19:93:f9:31:27:a4:
                    63:9e:48:66:bb:88:64:4d:e1:00:0b:a5:88:de:e6:
                    5a:e5:63:06:ed:b0:c5:7e:c4:3f:91:d2:d5:bc:f8:
                    7b:6f:6d:e0:55:29:a7:0b:69:68:8e:22:e0:52:0b:
                    57:f3:1d:4f:a7:4e:07:82:6e:55:4a:d5:95:f0:45:
                    a6:b8:b9:7e:6f:78:fa:da:a1:5c:fe:42:50:24:ca:
                    7b:c5:0f:dc:49:a2:93:be:a7:6e:9a:9c:58:a9:a5:
                    5d:02:4e:1e:ce:c5:bc:80:0b:33:72:33:03:98:06:
                    75:26:3f:4b:37:71:37:34:1e:61:de:b4:7b:60:73:
                    b9:b3:a5:c3:28:70:11:27:66:a9:43:42:3e:3d:53:
                    7c:88:25:27:38:40:fa:a3:33:a1:ea:03:a6:c4:a5:
                    5a:a5:a6:c3:10:cb:a4:8a:ec:cd:a0:ac:9e:0f:86:
                    2c:c4:c6:74:8f:b9:da:9a:ce:0f:1b:e3:70:f9:92:
                    b9:cf:56:5b:fb:11:94:91:da:f1:56:f0:72:0b:7b:
                    c0:b9:95:4d:e2:bd:e6:c0:18:d0:9b:07:78:92:5e:
                    2e:1d:40:6f:9e:ba:d4:93:18:fe:5b:90:76:65:0f:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C0:00:4B:3C:4C:E3:7E:AE:3A:76:D3:66:B7:51:2A:72:89:81:E9
            X509v3 Authority Key Identifier:
                keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/F68AC4D84D9B11EC9CF19624C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:30:84:72:6b:f4:ed:6b:91:e4:a0:98:b2:82:4d:74:d7:27:
         64:13:46:1e:28:f9:22:32:8b:07:03:41:4e:96:93:66:7a:66:
         d2:91:08:2c:90:95:f8:06:e2:d3:26:35:a0:c5:0f:55:92:04:
         13:a0:94:a5:02:aa:f0:84:f4:43:9e:4d:16:c2:06:63:b4:f7:
         1a:d8:fc:62:ae:fa:60:cc:80:27:e9:6e:88:f3:bd:e3:4a:b2:
         41:8a:27:c2:f7:ec:c7:70:4d:50:51:77:27:a7:5d:5a:e0:97:
         e2:ea:44:a1:90:a5:a6:b8:a3:09:1c:2a:8b:d9:0e:4c:41:84:
         ec:e2:c1:e8:36:cb:38:86:a3:0a:a2:1a:3c:89:11:65:fb:dc:
         67:ed:74:82:9f:d0:db:ee:0e:27:e6:84:99:fa:a3:91:40:bc:
         e7:db:63:0b:07:df:5b:e8:6e:46:5d:09:e9:f3:89:62:80:bb:
         46:a1:46:4c:42:b4:34:d3:69:e4:e8:52:c6:74:de:52:63:55:
         7a:6d:64:58:23:da:1a:1c:3a:2e:45:ab:f8:17:f1:48:c6:f1:
         24:9e:3b:d1:22:e3:3c:5a:43:99:23:e5:bb:6f:56:db:48:2e:
         fb:8a:87:7e:4a:b7:20:eb:f8:7e:b9:f3:a9:7a:ba:c3:ad:61:
         c5:a4:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:08:12 2026 by rpki-client