Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/68A88182237011F191BDBAA2B9833773.roa
File:                     68A88182237011F191BDBAA2B9833773.roa (raw, json)
Hash identifier:          FQzvQnCicJWF+Mg0RJIYtwFtyZVFXEAY3VjXdc7m+pY=
Subject key identifier:   7B:BE:D3:C1:47:63:09:43:A6:5F:35:0D:5C:0D:61:7F:30:48:FA:30
Certificate issuer:       /CN=A91F52FD/serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
Certificate serial:       06C9
Authority key identifier: 5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/68A88182237011F191BDBAA2B9833773.roa
Signing time:             Wed 22 Jul 2026 23:23:44 +0000
ROA not before:           Wed 22 Jul 2026 23:23:44 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136562
IP address blocks:        103.92.212.0/24 maxlen: 24
                          103.92.213.0/24 maxlen: 24
                          2401:2140::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl
                          rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52FD, serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
        Validity
            Not Before: Jul 22 23:23:44 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6150ff-4508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:47:9d:88:4d:92:8d:20:2b:27:01:5e:f5:
                    71:12:41:fa:52:6c:28:2f:ec:1d:d2:a3:95:cf:30:
                    9e:e4:f9:05:bd:1a:6c:64:67:a4:e2:e2:15:45:6f:
                    37:42:14:de:10:dc:d3:67:6c:59:9f:9f:41:78:d4:
                    67:b6:da:2e:24:4f:5c:1a:56:93:1b:5e:b2:eb:f6:
                    f1:a6:3b:12:36:a1:86:ff:b8:e9:c6:b2:fd:3a:4f:
                    5f:e9:7b:77:52:17:b1:bb:d9:38:a6:ac:82:ff:33:
                    3f:c5:6e:e8:a6:91:48:6c:ac:15:ed:5c:46:e7:98:
                    39:d2:c3:e9:d4:26:a5:b7:0e:48:90:1c:37:64:39:
                    eb:55:51:61:46:2e:bf:5e:06:26:ba:b9:56:2b:c0:
                    44:4a:1d:23:91:f5:d8:bb:5a:a8:29:36:b6:7c:97:
                    e3:e5:36:fa:7e:1d:f3:44:4a:4b:5c:a7:a3:e7:6d:
                    52:c2:47:d7:6d:79:68:40:28:86:cd:94:4e:cc:33:
                    e2:7e:c2:d4:c3:40:a0:1e:77:f0:1b:0f:7c:ed:e2:
                    d1:52:7a:ac:cd:7f:84:5f:0b:d3:2f:d5:d7:0b:64:
                    2c:1b:9e:91:af:2a:fd:9a:c5:7d:be:8c:2b:f1:01:
                    af:f0:d3:85:30:d8:b4:8e:f4:d5:71:2e:ef:2f:e2:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BE:D3:C1:47:63:09:43:A6:5F:35:0D:5C:0D:61:7F:30:48:FA:30
            X509v3 Authority Key Identifier:
                keyid:5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/68A88182237011F191BDBAA2B9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.212.0/23
                IPv6:
                  2401:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:a6:62:ec:6e:bc:c3:60:64:9d:db:4d:ca:af:25:bb:2b:
         77:5a:37:2f:d3:95:dd:6a:a2:15:5e:68:12:d3:5e:48:f6:82:
         a0:6d:bd:ea:95:27:bc:1e:ef:2f:cf:77:f6:8f:92:dc:af:e2:
         72:ce:94:e4:ae:a9:c1:d7:da:ab:fc:31:52:98:a7:a8:7b:5a:
         25:7e:d9:f6:f1:e3:a5:1e:d3:81:ef:29:93:82:04:45:53:ea:
         fe:0b:bf:0f:bb:69:a3:42:9c:8e:71:82:3a:3b:54:51:94:99:
         7c:40:1f:a4:57:2b:dd:3e:0b:6b:70:12:4d:b9:bf:d4:03:8e:
         20:07:c5:c0:6e:ae:55:c7:96:e0:e7:99:23:ec:d0:99:21:90:
         91:01:68:e7:fa:06:42:e0:0a:68:82:7c:fa:6e:f9:5b:54:ce:
         65:3d:28:46:e5:f9:32:b9:43:c3:3d:18:f0:e4:1a:dc:53:98:
         7e:47:4c:f9:0a:f2:bb:9d:86:0c:66:32:23:39:09:fc:76:b3:
         98:e0:45:ee:aa:4f:d4:21:27:43:e8:f0:a4:8b:1a:68:a1:87:
         fe:72:69:84:64:68:35:5f:8e:39:18:bd:a0:d0:25:3c:bf:66:
         9c:23:63:1d:62:b2:55:84:a0:08:72:e5:1e:0e:fc:9c:ae:b5:
         94:7f:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:48 2026 by rpki-client