Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/726BD5E645CF11EF854E2262C4F9AE02.roa
File:                     726BD5E645CF11EF854E2262C4F9AE02.roa (raw, json)
Hash identifier:          YmYTcwhgDvKWuwVdE5g0+SEXv17ijbphmsKcmV8ZajM=
Subject key identifier:   56:CC:14:B8:38:BD:36:6A:5D:66:AF:C8:D7:0A:9E:84:78:C4:35:06
Certificate issuer:       /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
Certificate serial:       0156
Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/726BD5E645CF11EF854E2262C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 05:39:17 +0000
ROA not before:           Thu 23 Apr 2026 05:39:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152691
IP address blocks:        103.12.56.0/23 maxlen: 24
                          2001:df3:ac40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
        Validity
            Not Before: Apr 23 05:39:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e9b084-7826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:d3:8b:47:56:e7:54:3c:0b:01:f5:b8:83:
                    4f:e5:2f:44:52:e9:f0:a9:24:c9:5f:c3:b7:3b:d1:
                    ee:4b:e6:45:2e:cd:a0:9e:dc:fe:a4:00:f1:8a:14:
                    50:f6:99:bd:63:79:9c:25:84:dc:16:b6:91:83:a0:
                    d0:60:71:9f:62:59:08:fb:b0:17:51:3e:a2:13:fd:
                    56:d7:54:7d:2c:c4:f9:48:17:b2:22:ea:12:51:76:
                    74:09:92:f3:f6:a2:f3:b1:9d:9a:62:2a:a1:fd:83:
                    8e:dc:38:9c:1e:6a:99:fb:46:97:70:f3:27:54:97:
                    06:3c:1a:75:a6:39:6c:07:85:68:3d:fa:64:7a:fd:
                    45:1b:a0:d5:94:32:61:2d:82:c5:17:58:8b:b6:38:
                    77:90:1c:54:67:db:ac:8a:c2:c9:a1:e7:9c:df:42:
                    9a:c2:58:43:ca:8f:66:75:90:d8:4e:de:1e:64:fb:
                    93:7a:73:5b:d5:34:2d:30:70:fa:c0:b0:25:18:95:
                    db:ed:7c:ab:78:78:12:3a:73:0f:f5:d5:a1:23:54:
                    3f:4c:81:c5:41:5e:91:c9:4e:13:78:b5:21:76:52:
                    b8:48:65:9e:81:23:01:0a:26:b6:a0:71:3d:ea:33:
                    9b:3b:2b:6a:d2:a4:d3:4f:3f:41:2b:e1:6a:a1:0f:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CC:14:B8:38:BD:36:6A:5D:66:AF:C8:D7:0A:9E:84:78:C4:35:06
            X509v3 Authority Key Identifier:
                keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/726BD5E645CF11EF854E2262C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.56.0/23
                IPv6:
                  2001:df3:ac40::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:2e:51:c7:0e:f4:25:09:54:66:c1:d6:fb:93:98:aa:09:e5:
         f6:6b:36:0d:7a:54:5f:41:6c:f0:97:3f:13:73:10:58:b2:92:
         44:48:7d:51:02:0b:49:16:b3:06:37:5a:e0:48:d8:0b:d2:4a:
         af:d0:cf:a9:dc:dc:29:9e:aa:bd:38:56:e7:a4:d3:ff:46:aa:
         c0:bf:3c:89:b7:ef:67:46:77:ef:51:92:3d:79:0c:43:9d:17:
         23:d4:dc:18:6c:b6:63:d3:03:2f:94:e7:86:10:46:b9:2e:f8:
         1b:b4:5a:f8:b1:a1:06:bb:e6:26:36:3d:67:18:7b:c8:a8:66:
         ae:4d:e2:54:9c:80:d0:7c:77:92:57:05:6f:ea:0f:46:12:4d:
         36:d5:d9:61:23:e0:08:36:e5:19:a1:1e:66:93:41:b8:7f:91:
         a9:7e:30:83:36:dd:f0:35:5d:dd:fb:20:5c:0e:27:37:8a:8d:
         d9:4d:d9:55:fa:49:da:e1:7c:de:47:e4:97:0f:25:e7:c7:68:
         cb:c9:40:4b:13:89:c8:ee:a1:08:54:4f:55:51:3a:0c:5d:4d:
         18:35:1f:13:21:21:cf:3c:7f:67:2b:84:da:2f:79:18:77:ff:
         84:05:e7:27:8d:59:70:dd:fe:bc:6a:b9:1c:75:b6:6c:88:3f:
         07:df:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:39 2026 by rpki-client