Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa
File:                     DC072950DCB911EC8AAB8710C4F9AE02.roa (raw, json)
Hash identifier:          vRMwqz8JbggsGIL8xs25Rwg3m9gk6hPcgQHsjL8q9xc=
Subject key identifier:   2B:5D:2A:4B:2D:3C:B9:CF:07:3E:EE:9A:FB:06:90:A8:8F:7D:B6:DC
Certificate issuer:       /CN=A91A236D/serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
Certificate serial:       03C5
Authority key identifier: 00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 02:28:02 +0000
ROA not before:           Wed 01 Jul 2026 02:28:02 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     137424
IP address blocks:        103.186.122.0/23 maxlen: 23
                          103.186.122.0/24 maxlen: 24
                          103.186.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl
                          rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A236D, serialNumber=0041EFABFF343CC2E83FCE96CED89059E8F4E2C1
        Validity
            Not Before: Jul  1 02:28:02 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a447b31-a672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:d1:67:73:4b:34:19:22:6b:04:74:1c:9a:
                    c6:27:f7:35:aa:97:4a:18:10:87:c7:d5:cd:a7:24:
                    8c:88:51:6a:20:f1:51:ae:26:dc:fc:11:45:e3:40:
                    0d:b0:e6:39:3d:26:7d:aa:7e:74:a0:db:8c:bf:df:
                    ba:f3:76:3a:6a:df:11:84:6d:2d:04:2d:2a:3e:f0:
                    b7:88:0e:d6:07:95:4e:17:b5:7d:74:61:49:69:b5:
                    8d:91:a1:c0:63:6f:07:8a:a2:69:0e:f6:c2:11:2d:
                    f8:bd:cc:12:92:4f:c5:6d:c7:ce:e2:d2:ed:28:d9:
                    7c:27:d2:e0:cd:64:f4:d0:d2:cd:a2:5a:fa:c4:1f:
                    7e:e1:09:6c:6e:38:b7:a3:41:01:0a:75:dc:4c:7a:
                    a7:f0:a4:b9:88:8a:bb:8b:7a:d6:99:0d:11:47:23:
                    29:dc:5d:de:c8:a1:a8:21:61:dd:6e:45:1b:15:ac:
                    44:39:e6:55:b4:70:36:7b:49:0c:57:bd:5c:3f:ea:
                    0b:69:7b:2e:3e:5d:8c:ac:b2:e1:28:04:bf:3f:99:
                    3a:17:d7:75:a9:e6:c8:af:c3:df:d5:24:81:99:66:
                    3c:a8:27:3f:ca:6d:fa:bf:d5:a7:e7:3d:49:28:1f:
                    2b:d1:4e:81:1e:d4:dd:04:e5:7f:21:83:bb:2c:f0:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5D:2A:4B:2D:3C:B9:CF:07:3E:EE:9A:FB:06:90:A8:8F:7D:B6:DC
            X509v3 Authority Key Identifier:
                keyid:00:41:EF:AB:FF:34:3C:C2:E8:3F:CE:96:CE:D8:90:59:E8:F4:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/AEHvq_80PMLoP86WztiQWej04sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEHvq_80PMLoP86WztiQWej04sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A236D/22E692AADCB211ECABDE3E6EC4F9AE02/DC072950DCB911EC8AAB8710C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:a3:b7:c4:af:ad:c1:57:98:8c:87:2b:d5:fd:45:2d:91:0b:
         00:63:d6:a3:08:86:2c:05:19:c8:ae:98:c3:13:d2:bb:1e:2d:
         8e:be:43:2b:39:27:07:d4:12:69:d0:c1:ef:ae:5b:da:11:ab:
         62:d8:35:00:a2:0a:bf:fb:a7:45:19:d9:e5:a3:f1:44:b9:4a:
         bd:16:fd:71:75:28:da:b8:52:03:a0:33:06:f1:9f:06:e3:2a:
         3a:fd:4a:3c:39:a7:bd:21:d0:6e:c2:a9:41:9e:26:c2:d4:73:
         03:d8:93:6a:35:93:e8:25:2f:ed:40:62:f2:93:ca:ef:da:09:
         f1:58:67:10:1f:d8:da:01:ec:42:d5:11:df:a4:b9:3a:c1:4a:
         56:9e:eb:16:ad:f3:2c:1e:c0:dc:5c:95:03:20:aa:84:12:3c:
         1a:00:ec:be:ab:0f:74:6d:23:db:9a:ed:c5:9c:bc:38:9a:d1:
         8b:6c:77:a0:3e:df:27:5e:0c:81:0d:f8:40:29:42:9a:b9:57:
         6d:70:02:1d:91:3e:48:c4:b3:ec:ed:aa:a7:7d:b8:00:47:92:
         98:ec:a5:88:e9:6d:bc:6f:24:52:c2:8e:6a:8d:a1:52:91:1a:
         80:8e:ee:60:da:b1:93:e4:ac:df:fc:b1:3b:a5:ce:b2:43:6f:
         6f:84:00:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:00 2026 by rpki-client