Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa
File:                     7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa (raw, json)
Hash identifier:          dZhz63yVCeTBzWMY75L0Bm2evDQYzA/h1Cy1vJR1+hs=
Subject key identifier:   96:BE:8F:EA:A4:57:20:4E:88:A3:63:29:97:CA:E1:0A:E3:D7:BE:CB
Certificate issuer:       /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Certificate serial:       018F
Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa
Signing time:             Thu 07 May 2026 04:37:43 +0000
ROA not before:           Thu 07 May 2026 04:37:43 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152712
IP address blocks:        103.49.122.0/23 maxlen: 23
                          103.49.122.0/24 maxlen: 24
                          103.49.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
        Validity
            Not Before: May  7 04:37:43 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fc1717-fcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:e0:ab:27:dc:0f:7b:f1:07:52:5c:5a:ef:
                    2b:63:b2:a6:53:46:fa:33:f6:98:83:f4:6b:f5:bf:
                    8d:1f:e6:1d:86:b8:c0:bb:97:fe:1b:c3:3d:c4:c6:
                    cb:5a:41:62:ec:29:63:48:36:a8:cd:e2:4d:9f:ba:
                    f3:9a:2d:df:50:af:9a:da:e2:07:84:b2:29:39:08:
                    ac:4f:6d:99:0b:f2:5a:83:be:74:2b:e0:a5:25:3e:
                    ac:a6:f3:f1:ab:8d:3d:ec:6c:ee:fa:22:5e:e1:e1:
                    14:0e:28:41:2b:fb:0f:f0:d3:27:29:b8:cf:79:5e:
                    c3:70:aa:b4:5b:6e:32:e3:94:b5:47:27:06:12:c2:
                    9d:56:dd:7a:3a:7e:2e:74:54:82:fc:1d:e1:c0:1f:
                    1f:d8:41:20:50:e5:4d:d3:88:fd:16:c7:f6:51:c0:
                    4d:5a:8d:86:4f:1c:b0:6a:b1:4f:a8:f3:a9:1f:8f:
                    fd:a9:97:b2:7f:16:61:67:9e:7d:5a:00:92:7a:b2:
                    ed:5d:b9:60:be:d6:9d:ee:90:e5:96:b3:e6:d9:f3:
                    b4:11:80:d1:27:12:93:cb:36:97:6c:b8:fd:b6:b5:
                    e4:8d:d0:55:3b:30:ad:79:ec:a5:54:bc:16:70:0c:
                    b4:6b:86:1b:66:ae:ee:54:a0:c5:90:b7:60:37:cc:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BE:8F:EA:A4:57:20:4E:88:A3:63:29:97:CA:E1:0A:E3:D7:BE:CB
            X509v3 Authority Key Identifier:
                keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:11:3d:47:be:0f:01:14:26:c5:df:29:4b:0b:ba:98:4d:b5:
         94:f2:6f:fd:43:c2:d4:25:22:6c:bb:b9:c4:91:d1:13:c0:03:
         2e:bf:e5:8a:a7:3e:6c:5b:0c:b1:0a:31:c6:17:d1:d5:89:cc:
         01:c3:e2:95:39:f7:39:9a:eb:41:75:bb:fa:8d:fc:2c:41:17:
         81:5d:64:20:ce:ea:c4:4b:51:e3:63:5c:7b:e9:79:b6:bf:c0:
         41:a2:01:68:3c:d8:cd:be:86:44:6d:f2:d8:7e:41:9b:ef:d6:
         57:31:53:4a:7c:3b:0a:b5:dd:8f:bc:25:21:ce:37:1f:6b:ee:
         0d:df:52:b4:7f:20:ba:89:88:9d:fb:52:bd:9b:a5:49:72:64:
         ba:5d:85:f9:f0:c2:83:9f:d7:f5:68:c1:c3:d4:86:3e:36:1a:
         41:63:42:cb:9b:b6:1b:4c:14:4a:2a:99:1f:e8:e1:1c:86:77:
         16:e0:96:71:c0:59:12:07:3b:aa:89:2d:f7:7a:bc:c4:fc:c7:
         e0:1a:e6:8a:56:e1:6d:18:41:9d:a1:f9:67:c0:26:99:6b:04:
         05:79:51:8c:e3:02:e0:27:02:4a:87:25:b2:4a:1f:72:70:9e:
         13:2a:45:99:4a:dd:5b:73:25:6c:f3:53:97:51:ff:17:42:eb:
         e8:31:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:47 2026 by rpki-client