Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/72BCBB042FC211EBB8550B0AC4F9AE02.roa
File:                     72BCBB042FC211EBB8550B0AC4F9AE02.roa (raw, json)
Hash identifier:          s+Jl83N9Gae1QXY9bBMMTJJz80QnAkoP6fzOKwbkryc=
Subject key identifier:   B1:C3:ED:C8:B4:22:46:F7:0E:38:C2:93:C8:A0:E7:E0:C3:59:02:52
Certificate issuer:       /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
Certificate serial:       07C8
Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/72BCBB042FC211EBB8550B0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:27:05 +0000
ROA not before:           Sat 06 Dec 2025 20:33:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132877
IP address blocks:        103.157.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl
                          rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
        Validity
            Not Before: Dec  6 20:33:35 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43099-e159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:4f:d2:36:80:c4:a4:66:c0:bb:32:b1:8b:
                    e0:60:2e:8f:69:f9:3e:4c:0d:0a:5c:6d:1b:43:ed:
                    19:68:2c:56:90:12:c6:d2:56:3a:a4:cd:d2:a1:da:
                    43:87:30:2e:a3:6c:e6:95:98:77:5a:14:d7:f2:de:
                    aa:e6:5c:ef:f5:f5:ed:03:b5:92:6c:4e:5c:6a:e7:
                    41:c3:6c:ee:d7:5e:f3:16:14:26:1f:e6:4d:50:86:
                    de:d9:57:b5:63:c9:f0:6e:8b:e8:8d:4c:b2:4e:64:
                    a0:2f:98:c4:16:12:a0:f0:f3:ac:44:20:41:77:aa:
                    aa:47:0e:cd:42:6e:95:60:6e:35:ad:29:48:3e:6c:
                    0e:a3:ed:68:f8:d8:f2:9b:6e:a3:ba:f1:fc:d3:cd:
                    7a:95:e3:76:22:ae:e1:80:ac:42:f9:ea:9b:3a:26:
                    3c:63:b0:85:14:68:31:f1:4f:6e:2a:91:c4:ac:d1:
                    22:e8:e9:f6:07:2b:63:64:3f:53:ba:ff:50:42:41:
                    c2:74:90:35:f6:a9:5e:3b:8b:4d:7f:22:96:e8:ee:
                    68:e3:ca:8c:de:a0:dc:7e:e8:7a:8c:56:8d:12:75:
                    14:12:59:e6:cd:ef:dd:84:39:bc:1b:0f:20:15:e6:
                    6c:28:d7:2e:5b:d7:41:a7:2d:e3:47:de:11:17:d7:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:ED:C8:B4:22:46:F7:0E:38:C2:93:C8:A0:E7:E0:C3:59:02:52
            X509v3 Authority Key Identifier:
                keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/72BCBB042FC211EBB8550B0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:9a:09:78:5a:5f:a2:9b:1f:07:eb:e7:2a:62:46:9b:73:7d:
         bf:2c:30:08:1c:20:7b:6e:fb:37:09:9d:76:ec:68:ef:d8:6a:
         1e:e6:bc:83:33:f4:8b:cf:a6:af:a1:bd:5a:83:dd:c8:2f:71:
         ac:8f:62:3e:7c:db:53:43:90:36:2c:a9:8b:30:7a:bb:9b:b3:
         f5:71:78:ba:4e:c0:f5:42:7f:6d:4b:a6:6f:14:49:cb:54:b9:
         be:bc:40:43:4e:a3:4c:45:a9:85:ff:d4:e2:56:0e:19:b6:97:
         72:7e:c0:df:68:6d:60:6a:24:5a:d0:65:08:e2:39:02:48:11:
         d2:02:6a:a6:e4:a9:97:c9:4f:cc:4e:ac:5a:7e:20:24:d9:86:
         d9:08:4a:8e:aa:76:a4:9b:53:8e:d6:b4:b2:4d:ed:17:3b:60:
         ca:b9:88:7b:bc:39:9c:6b:e8:72:db:ea:84:1a:29:e5:20:05:
         03:69:de:43:cc:b9:31:79:44:3d:6f:33:54:05:d0:72:88:15:
         8d:0f:9e:c1:f3:b5:4a:30:82:a4:80:8b:3b:53:95:ab:bb:be:
         81:95:18:d3:5d:74:44:71:7e:4b:51:91:5d:56:af:d5:2f:9a:
         5b:1e:49:2f:1d:a9:b5:d0:cf:bf:82:2e:d9:12:8e:3c:7f:2d:
         4c:4a:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:57 2026 by rpki-client