Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/071307C4CF2711EFAE85C158C4F9AE02.roa
File:                     071307C4CF2711EFAE85C158C4F9AE02.roa (raw, json)
Hash identifier:          rex1oUrK9zmszO+5oIMZH8s+Exku+LvOHx4NazadK3A=
Subject key identifier:   11:CF:21:61:C3:B0:A9:4A:88:16:73:4E:75:AD:29:92:5C:29:E9:3F
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0492
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/071307C4CF2711EFAE85C158C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 01:27:22 +0000
ROA not before:           Thu 23 Jul 2026 01:27:22 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        103.215.125.0/24 maxlen: 24
                          103.215.126.0/24 maxlen: 24
                          157.119.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Jul 23 01:27:22 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a616dfa-cdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:9b:75:6a:03:c5:0b:4b:25:85:97:d1:57:
                    e5:76:63:ea:72:d1:55:d4:2b:40:1d:c7:47:62:c7:
                    fd:43:af:8a:70:c1:72:ad:d4:28:82:95:c6:8e:90:
                    65:f2:17:c5:63:d1:55:d0:71:e4:1d:09:22:2b:a5:
                    0e:92:79:23:65:0c:38:ce:a0:24:76:d3:91:83:bc:
                    99:38:26:0c:d1:8e:df:50:10:6e:4e:bd:a4:33:31:
                    b4:4f:f5:2c:ad:3c:b4:c4:f0:c9:a4:d3:ca:24:a8:
                    66:85:bd:ae:40:ec:68:39:34:36:ce:34:99:3f:7f:
                    3d:26:7f:cc:0d:e4:52:ee:b8:54:47:8f:15:6c:2d:
                    27:86:60:52:3e:b6:68:a4:55:21:9d:5d:27:a7:92:
                    3e:7d:4c:2c:b7:34:30:fb:77:47:7e:73:c0:ec:89:
                    10:38:3f:1b:8f:3f:c3:96:43:6c:32:62:f3:95:7b:
                    7b:a9:43:6c:11:8e:48:e5:52:49:5b:9f:f4:b3:0c:
                    5d:8b:3f:ec:df:50:3b:5f:cd:45:ca:7d:ce:19:4b:
                    9d:83:4a:2a:9c:7d:f2:f4:5a:37:47:62:49:e7:97:
                    4a:b2:e9:df:e4:f6:ea:f4:43:4e:a5:da:97:ee:19:
                    92:34:e4:86:d6:a4:15:f2:a5:91:5f:10:6a:54:70:
                    6e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CF:21:61:C3:B0:A9:4A:88:16:73:4E:75:AD:29:92:5C:29:E9:3F
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/071307C4CF2711EFAE85C158C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.125.0-103.215.126.255
                  157.119.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:2e:f2:fa:cb:a4:f3:e5:e7:54:63:b9:6b:b0:58:20:b9:09:
         f0:89:91:f0:44:ca:13:7d:e4:92:4c:43:57:dc:b7:23:cd:85:
         8d:9b:50:d4:c0:61:f8:f2:dd:67:e0:a9:ad:70:38:99:f8:30:
         a7:26:29:ab:c1:ce:06:ba:34:dd:74:0c:35:97:67:42:c5:be:
         b7:86:e1:08:84:a3:19:58:da:0c:dd:39:6d:a1:9d:56:b3:ff:
         11:09:3d:2a:99:ea:87:ca:ab:af:49:1c:41:84:5b:33:dd:4d:
         7c:bb:3b:19:c8:6c:a5:e4:43:a9:58:a0:ef:dd:14:a5:ad:a1:
         91:c0:75:b7:fb:3b:ef:a4:54:27:b7:a5:5f:ca:b0:38:b5:9f:
         20:93:c8:44:86:1a:44:92:c5:6c:70:fc:9d:1b:ed:45:e0:d1:
         cd:1a:ed:0e:44:7c:b8:71:a9:a3:2c:b0:da:6d:c6:41:c5:da:
         7e:9d:4a:75:aa:d1:35:c4:fe:88:82:1b:bf:09:cf:0e:58:cb:
         3e:cd:30:1c:41:2e:8d:4f:86:55:3f:a4:04:7c:39:50:74:0b:
         20:9a:85:93:10:f7:c1:1e:0b:8f:55:39:fd:81:80:d7:2f:80:
         1c:3f:8f:2d:89:c2:36:89:0c:f9:44:4d:d0:75:f8:2d:10:35:
         6a:d6:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:31 2026 by rpki-client