Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa
File:                     B7A19306B43111EEB373D20BC4F9AE02.roa (raw, json)
Hash identifier:          E5JwjHvKutLbFiPLa2Rz4sSsTfVvUxmZuTHwfledEQI=
Subject key identifier:   0A:83:3D:35:2D:3C:0A:17:34:47:CD:FD:C8:59:65:29:93:03:24:3E
Certificate issuer:       /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial:       0237
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:29:22 +0000
ROA not before:           Tue 29 Apr 2025 04:09:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150783
IP address blocks:        103.94.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
                          rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
        Validity
            Not Before: Apr 29 04:09:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3ead1-3e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:a2:ed:6d:d0:ca:52:c9:52:8d:26:4d:a4:
                    13:99:a1:e2:30:4c:9c:3d:dd:63:01:6b:13:b4:93:
                    83:39:f5:0a:7e:c3:78:e9:d4:6a:58:e2:49:3a:0a:
                    56:90:00:b9:4e:04:a3:74:31:64:1e:d3:26:1e:c1:
                    47:e2:6e:d5:33:41:fc:61:d5:4b:b3:55:93:c8:f8:
                    82:d2:e8:36:37:36:32:2a:b3:8a:33:91:6c:c4:96:
                    54:d7:15:fc:aa:bc:74:56:c5:5a:9c:88:57:52:fd:
                    1a:00:f1:c5:f2:d3:ea:19:dc:9a:2d:ee:71:69:cb:
                    15:be:bc:63:f8:d2:9b:03:fd:9d:c5:e4:5b:8f:ae:
                    c5:b8:e8:b1:e1:27:c8:37:ed:a3:de:81:bc:89:7d:
                    36:aa:c8:8b:ed:34:ff:23:04:76:7d:1c:20:a9:7c:
                    e1:05:1a:e9:72:0b:ed:87:b5:ee:b6:ab:48:0b:89:
                    0c:50:ef:b5:73:88:ff:81:26:dd:f9:69:e3:71:7f:
                    54:ce:64:84:84:c1:8f:06:00:8f:5c:f1:36:49:d1:
                    68:f4:6f:6d:a0:3d:c7:42:89:f7:07:88:d8:f7:74:
                    cb:9f:0a:53:2f:6c:f8:4a:fb:98:23:b5:f7:71:c8:
                    c2:67:7c:5f:4a:aa:e9:b6:d8:5d:c0:87:67:ea:d4:
                    16:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:83:3D:35:2D:3C:0A:17:34:47:CD:FD:C8:59:65:29:93:03:24:3E
            X509v3 Authority Key Identifier:
                keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B7A19306B43111EEB373D20BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:92:10:be:13:b5:d5:e0:ee:96:b6:48:ad:ca:79:d5:3a:cf:
         fb:ad:23:ce:74:ca:6f:66:c0:f9:cf:f9:8e:9d:17:83:61:83:
         75:3b:a9:f6:2c:2a:54:2f:74:29:d1:99:99:32:66:40:b9:b0:
         4f:c7:f0:8c:0d:1d:9c:f7:4b:93:e4:ae:c3:56:db:8c:f1:25:
         ad:77:24:4a:3c:92:1f:b4:82:88:d5:7e:76:50:0e:1e:49:0a:
         b3:6e:0a:54:6d:ba:86:62:99:56:4c:5b:50:2c:dd:e3:8d:9b:
         1e:90:0f:ed:50:86:c8:fc:5d:4e:dc:fa:0a:90:98:b9:30:6f:
         4e:e7:4f:c8:a7:fa:7d:e0:92:6f:3b:1f:cc:25:da:dc:42:e7:
         aa:ec:d7:4f:e8:c1:0f:1d:dd:9b:ca:cb:e2:f6:e1:e7:fb:33:
         53:2a:17:11:e9:c0:77:1a:3d:21:66:1f:98:0a:b3:4c:ad:21:
         fe:2e:e6:11:6b:36:c3:a9:ff:e0:f3:09:52:2f:bc:47:45:96:
         fb:f8:76:81:86:b5:34:22:f1:b4:a5:7f:24:d6:39:4e:05:30:
         f1:01:06:59:d6:96:a1:24:40:d3:35:92:e7:47:4b:d0:2b:37:
         34:25:73:ed:4a:76:d1:42:12:bf:23:98:56:1c:25:98:50:1d:
         58:6c:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:12 2026 by rpki-client