Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa
File:                     F22762F4741011EF9E049760C4F9AE02.roa (raw, json)
Hash identifier:          U0KGzRthmkm1zRt+uEMqhBQuI1kS3OQDqLIRZ8rjx1Y=
Subject key identifier:   7F:17:DA:B7:69:D1:FF:FF:45:0D:15:E6:C9:3F:3C:ED:F2:1B:FC:FA
Certificate issuer:       /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Certificate serial:       018E
Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa
Signing time:             Thu 07 May 2026 04:37:41 +0000
ROA not before:           Thu 07 May 2026 04:37:41 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        103.49.122.0/24 maxlen: 24
                          103.49.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
        Validity
            Not Before: May  7 04:37:41 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fc1715-8eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:01:83:30:7d:83:ac:ad:40:23:d8:a1:fc:
                    0f:8b:28:30:d7:83:1f:51:95:44:ba:b2:96:22:8c:
                    88:fc:c2:0e:4c:ae:f5:8b:77:ac:60:a5:01:b7:49:
                    d2:76:36:f5:78:aa:c9:2e:f7:dc:e1:20:44:be:94:
                    8e:b4:f4:83:1b:1c:dc:e5:0a:f4:39:28:a6:3b:f3:
                    9e:3a:46:17:9b:cf:48:ec:ed:30:4e:83:ce:4b:d8:
                    45:7c:b5:b3:49:16:6a:d8:a6:c7:6f:ce:7e:c4:14:
                    f8:42:90:a5:a0:e5:85:7d:f0:73:34:df:12:c3:22:
                    e7:a1:12:93:7c:cb:7a:b0:d3:9d:23:5e:85:35:e8:
                    89:f2:a4:41:8f:b6:2b:ba:22:e4:c0:45:c2:11:7a:
                    47:4e:d7:fd:72:15:1b:7d:68:6b:45:a9:0a:a7:1d:
                    fa:f5:1b:e4:60:f0:ba:b4:d8:cc:40:84:a9:18:cc:
                    8f:a3:ea:1a:a4:86:eb:e1:48:2a:39:15:95:bd:02:
                    b4:ab:9e:5c:86:bc:ea:16:53:ba:6f:42:80:98:c4:
                    66:89:19:da:68:9e:c5:a8:92:9b:56:d1:38:84:e4:
                    50:bc:a8:3a:57:f6:07:f4:70:25:40:b4:3c:89:9f:
                    a3:4b:01:cc:39:3d:04:86:c7:24:68:c5:bb:a0:09:
                    db:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:17:DA:B7:69:D1:FF:FF:45:0D:15:E6:C9:3F:3C:ED:F2:1B:FC:FA
            X509v3 Authority Key Identifier:
                keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:27:aa:43:01:e8:d1:1d:b9:4d:ae:9a:f1:ce:19:b4:ad:1b:
         5f:3c:29:95:29:e6:b9:be:f6:dd:74:0a:cb:c6:c3:b2:1b:d4:
         82:f2:15:4b:bf:4a:91:70:65:17:ac:bb:f3:48:78:03:10:15:
         18:2c:79:f9:70:64:2e:e0:c8:00:4b:fb:6e:8e:84:66:45:d3:
         85:c6:eb:aa:a1:04:65:8a:15:20:96:56:78:01:a1:16:1b:be:
         d1:24:06:88:a1:d2:0c:42:22:53:2c:4e:c2:34:ce:f4:82:83:
         c1:dc:01:35:16:33:3d:d8:f2:dc:da:08:14:98:a0:ef:44:bf:
         c6:14:5f:e1:58:3d:08:ca:15:b2:bb:4c:78:e0:05:5e:d2:7e:
         4c:06:50:fa:65:cb:7c:e8:4f:0c:51:ac:22:ed:fc:ea:0f:33:
         1f:26:49:79:7c:67:bf:55:db:32:46:e6:2e:1e:cf:61:12:c0:
         ba:53:85:9e:0b:ea:f9:7f:61:5f:f2:15:bb:f1:0c:1b:59:18:
         88:90:c7:a9:11:e7:5c:06:e9:17:f4:90:e5:16:1f:37:c2:75:
         55:8a:98:29:f1:f3:c6:d4:96:45:46:bd:92:0f:ae:81:18:33:
         65:64:e8:15:b1:a3:b8:d2:50:87:22:e9:08:03:f3:63:bb:5d:
         62:03:35:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:18 2026 by rpki-client