Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/722022AEB3C411F0AB42E30CC4F9AE02.roa
File:                     722022AEB3C411F0AB42E30CC4F9AE02.roa (raw, json)
Hash identifier:          yhJxmZzQ2ZBaUh/TkISXu1owkmR7YDFhHEkIm62M8ls=
Subject key identifier:   0E:05:FD:2D:90:10:AA:DB:BF:1F:F0:55:68:52:02:7E:4E:72:BE:A8
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       0858
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/722022AEB3C411F0AB42E30CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:51:21 +0000
ROA not before:           Fri 19 Dec 2025 09:05:14 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     149014
IP address blocks:        103.198.192.0/24 maxlen: 24
                          103.198.193.0/24 maxlen: 24
                          103.198.194.0/24 maxlen: 24
                          103.198.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Dec 19 09:05:14 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47c99-1c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:b0:cd:8d:17:82:96:49:b7:71:ce:ca:0f:
                    56:e7:37:40:b9:db:6f:27:15:88:e6:ac:c2:19:ea:
                    e6:7e:a2:c3:9e:bc:80:02:b2:f1:72:03:90:76:cb:
                    68:05:bc:0f:a5:9f:06:86:26:0e:1a:26:e9:6e:6e:
                    de:be:d8:9d:c1:8b:18:81:2a:15:4d:29:b1:bc:22:
                    33:15:39:e3:e7:c4:76:8b:7d:ef:99:1e:29:88:ca:
                    c1:8c:fa:a2:10:20:2f:16:e4:d5:cf:82:6e:7e:2d:
                    c1:11:ce:ca:02:e2:9c:86:8b:4f:46:4f:3f:d6:cf:
                    06:df:41:44:d7:52:4f:79:a1:40:3d:a0:d1:ee:a5:
                    aa:1a:87:f6:33:7a:9f:b2:4f:85:b2:de:68:04:e1:
                    10:89:91:36:ce:ea:25:a9:e3:9e:2f:54:fe:8f:81:
                    7e:73:ab:35:ab:d2:de:00:d5:5c:db:c8:52:a8:e6:
                    32:bd:b5:b4:a4:24:02:bf:9f:ac:f3:63:54:dc:e5:
                    76:dd:15:1e:64:0b:6d:10:22:c2:ea:28:61:3f:fd:
                    f2:2e:58:99:06:30:ac:98:51:ee:06:63:69:d1:d2:
                    cc:00:27:51:c9:3b:d2:7d:f8:8a:4b:8b:48:1d:18:
                    ea:0d:32:bf:a7:6c:87:b1:3d:aa:09:7f:36:38:33:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:05:FD:2D:90:10:AA:DB:BF:1F:F0:55:68:52:02:7E:4E:72:BE:A8
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/722022AEB3C411F0AB42E30CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:17:55:08:fb:82:02:71:45:96:d5:f9:84:bb:d6:4b:77:19:
         b6:06:59:cb:26:f3:7c:80:6b:d7:09:19:96:55:92:ff:4a:9c:
         01:de:0f:90:18:8b:df:77:9e:d0:cc:5e:26:e9:b7:d7:14:08:
         5c:7b:83:cc:96:c1:16:3d:73:fd:23:52:f2:a4:50:b0:d9:fe:
         51:2b:3d:d9:ea:16:f0:2c:ec:65:86:b8:d7:ed:2b:e8:46:5c:
         9e:01:6c:03:0e:c7:0f:1e:58:68:3d:08:a0:cd:59:77:37:91:
         ff:40:3f:ec:d9:9d:6c:84:3d:38:b9:99:6c:44:54:04:dd:29:
         aa:00:aa:03:b3:c4:16:f5:d4:e3:85:0b:a7:17:6f:6b:fc:e8:
         25:3b:8e:50:07:32:db:9e:f9:d0:96:00:b1:1c:69:e0:23:f9:
         82:3d:e0:33:77:84:ec:c1:9f:92:84:04:75:04:d8:81:69:4f:
         58:02:12:14:24:21:76:62:f4:21:7a:bc:87:e8:70:2c:f8:08:
         28:71:0b:54:c5:21:80:f5:ea:47:83:c2:28:d0:c4:cd:09:8d:
         33:45:fc:60:d5:77:ff:cf:e3:ab:d1:c0:b3:60:f4:0d:4c:da:
         04:bb:d8:68:81:33:a3:40:7d:63:0f:64:d5:8f:d4:46:b0:d5:
         6a:ac:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:16 2026 by rpki-client