Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa
File:                     7617F5408D6C11F0AB7BFE70C4F9AE02.roa (raw, json)
Hash identifier:          gzKMQjKpERwDae1Iao4GxcXECxC3Kv8Cc0pWSLejtyU=
Subject key identifier:   7E:75:28:68:16:BD:55:05:2C:0B:0D:DC:E8:F9:9B:C4:3A:57:B1:15
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0D97
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa
Signing time:             Sun 26 Apr 2026 18:22:33 +0000
ROA not before:           Sun 26 Apr 2026 18:22:33 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        103.137.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3479 (0xd97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Apr 26 18:22:33 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ee57e9-1fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:f7:54:5b:c8:a2:a2:21:52:fa:4d:91:a0:
                    9e:60:ac:5e:3a:f3:d9:28:9d:d4:9b:53:04:b3:b4:
                    81:4f:30:64:aa:8a:e9:af:d4:3e:bb:99:b3:32:b9:
                    8b:2d:25:4a:66:26:7b:15:00:a5:da:24:b9:5c:5a:
                    44:3c:c1:46:a8:7a:cb:9b:2d:64:07:f6:d1:96:01:
                    3d:e8:34:0c:2f:80:a9:21:3c:20:92:f4:70:f6:cc:
                    45:a2:d0:fe:6d:4c:52:68:e7:0b:a1:5b:ac:1c:53:
                    07:88:46:96:30:ec:54:91:ab:04:8e:ba:1f:da:a9:
                    c8:47:c6:16:57:2a:7c:cb:54:26:58:f0:a6:2c:84:
                    3c:23:50:d3:58:59:cb:44:0d:97:f3:17:46:ea:09:
                    a0:e7:30:0e:21:7d:6d:c0:0d:03:98:5e:00:62:4c:
                    dc:19:55:0f:2d:54:1f:b3:19:1f:9b:7e:c4:56:b7:
                    03:90:b7:87:1c:08:9e:55:d6:ad:3c:da:6e:7a:4c:
                    83:82:f3:73:6d:8c:a3:2e:8d:4e:96:cf:cd:4a:42:
                    a0:80:09:9c:fe:0d:a6:a3:e8:c2:d6:97:43:45:85:
                    8a:22:72:21:26:b2:a6:e5:11:aa:49:1e:e0:1f:a4:
                    4f:63:d3:9b:fd:f2:d1:6e:32:9c:24:11:79:48:c1:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:28:68:16:BD:55:05:2C:0B:0D:DC:E8:F9:9B:C4:3A:57:B1:15
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:6b:5d:f9:de:ec:73:88:e5:5b:fd:81:7f:6b:ae:84:21:9c:
         c6:0a:9e:61:c7:63:a9:ac:d1:32:30:dd:ac:ba:4b:ce:4b:1d:
         b5:ef:31:b7:97:a8:58:63:66:98:fe:02:8f:2c:10:47:48:e4:
         07:bd:d6:3e:9b:1e:af:78:b1:44:dc:dc:9f:f1:b0:b9:14:06:
         64:c6:93:a6:f3:e1:b7:83:ef:e7:50:e1:f0:82:56:e9:6b:b7:
         1d:a3:f9:f3:df:f1:84:3b:23:0f:e6:84:dc:c2:95:76:48:0e:
         db:b1:0e:ce:22:bc:7c:e4:ee:04:55:26:4b:40:ae:0f:cb:e8:
         9d:aa:85:6e:57:c6:7c:70:2b:1c:ec:32:a1:5a:7d:64:79:d5:
         11:bc:74:65:58:e9:1c:7f:ca:b0:1d:b6:93:db:b2:96:d9:ae:
         5a:72:c5:a6:f3:45:a7:ba:ce:97:d3:e3:fb:93:09:eb:24:0e:
         62:cb:1b:65:eb:e9:62:d6:9e:91:af:86:f2:cc:da:b4:ba:e3:
         a0:b9:92:e3:e2:6e:b1:29:62:33:cd:8f:2d:1a:99:a3:b4:f8:
         e8:54:de:87:a4:12:9c:ca:ad:5f:e6:ec:21:3f:00:b1:22:0d:
         d2:34:74:9e:46:fa:35:5d:57:06:41:a8:c1:34:74:ea:31:29:
         ae:9f:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:16 2026 by rpki-client