Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa
File:                     72F3E64ECB3011EEB1D2092CC4F9AE02.roa (raw, json)
Hash identifier:          mtRRZz118M4LflJ2dyF7Ey07yP1IfAmcsesHzgsjW3s=
Subject key identifier:   C6:4C:42:5D:6A:D2:74:53:51:71:27:8F:29:E5:9D:49:8E:A7:7B:BB
Certificate issuer:       /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial:       0420
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa
Signing time:             Fri 01 May 2026 01:31:07 +0000
ROA not before:           Fri 01 May 2026 01:31:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.185.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
                          rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
        Validity
            Not Before: May  1 01:31:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f4025b-c955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:be:43:bd:da:e2:e6:86:79:db:75:ac:61:
                    a5:5f:65:f4:be:c3:3d:5c:88:ed:ae:bc:05:da:60:
                    14:15:cd:ad:f3:39:dd:ad:13:b2:fb:58:1e:10:3e:
                    c2:13:36:f8:18:a7:2b:73:0e:3a:c8:ce:d5:3e:10:
                    c8:09:32:45:22:8c:6f:8e:a7:6d:16:84:a4:dc:0e:
                    21:d1:e9:57:11:75:a6:28:a2:de:42:a6:c7:fb:bc:
                    a1:6b:96:fa:9b:28:ab:ba:00:05:fb:64:1d:95:43:
                    cb:5f:d8:a1:27:46:2c:54:3d:df:16:a6:b7:50:5b:
                    89:b4:f4:8b:2e:a1:2a:3c:0f:97:62:28:7f:07:a5:
                    94:66:ae:f6:98:36:69:59:97:07:1b:4f:89:4b:0e:
                    5f:21:43:35:0c:9a:83:18:fa:08:60:79:32:c0:c9:
                    35:28:f8:45:ee:9d:cd:f9:01:8c:f9:8e:54:de:4b:
                    ab:f9:f1:08:d9:dd:0c:6c:a8:47:53:6c:f4:2e:7a:
                    86:2a:3a:46:b6:17:4c:15:40:33:1b:7e:79:51:6d:
                    fd:50:ef:9f:98:75:ea:37:dc:8c:f1:43:04:35:11:
                    fe:71:c7:ad:00:36:ee:8b:c5:a5:62:4f:57:5c:11:
                    61:fc:8d:78:5e:82:42:81:3c:80:1d:34:e7:a3:1a:
                    85:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4C:42:5D:6A:D2:74:53:51:71:27:8F:29:E5:9D:49:8E:A7:7B:BB
            X509v3 Authority Key Identifier:
                keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:be:ac:65:8d:51:93:a4:b9:a9:fe:85:42:9f:3d:85:40:ac:
         40:fb:40:c9:ad:d1:9d:3a:17:25:b1:2a:fc:ed:ee:c9:69:1f:
         38:67:b6:87:3d:f0:b0:74:0f:7a:ea:eb:2e:74:a0:9d:49:86:
         1f:ec:f8:8c:d0:b5:09:3b:3e:c3:97:18:a0:c7:d7:8b:71:b8:
         88:a0:7f:e9:7a:1c:2d:16:d3:36:17:f8:1e:05:03:20:7d:09:
         0f:30:4d:6b:cd:82:98:ec:cd:15:5f:9e:f6:50:b4:f4:c4:67:
         6d:5f:b4:bd:2f:81:dd:0b:3c:92:dd:e2:ca:0f:f0:bd:e4:db:
         bf:68:fa:1a:58:6c:78:77:73:c4:3a:99:91:21:56:bb:30:3e:
         eb:7d:ec:13:d4:53:f8:fc:78:5b:06:4c:24:22:7b:89:b1:e9:
         e3:e7:e7:7d:0f:a8:27:23:9c:d1:b1:fe:7d:fe:f3:60:be:50:
         28:e4:02:ce:e9:9f:27:16:f8:dc:32:3d:e3:be:90:c6:bd:36:
         be:30:97:83:59:7e:83:36:c3:2d:da:c2:60:3b:09:6b:70:6c:
         70:df:b6:e3:98:6f:b9:16:28:72:be:e6:f7:ee:1d:a5:a7:87:
         f7:2e:b6:c8:5a:34:ce:16:65:0d:4f:79:77:2c:b1:5a:98:f0:
         19:42:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:18 2026 by rpki-client