Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/B7AC544A86F111F19E006003A7EE528E.roa
File:                     B7AC544A86F111F19E006003A7EE528E.roa (raw, json)
Hash identifier:          CD98/zBc1iRMlYgaHXvEmJhl0TajGVGfTmWFNs6GIac=
Subject key identifier:   13:BB:D0:01:54:C1:1E:E4:18:E0:47:60:3B:C6:62:97:9B:F8:84:F4
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       09C2
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/B7AC544A86F111F19E006003A7EE528E.roa
Signing time:             Thu 23 Jul 2026 23:53:35 +0000
ROA not before:           Thu 23 Jul 2026 23:53:35 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55707
IP address blocks:        101.2.168.0/22 maxlen: 24
                          103.7.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2498 (0x9c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Jul 23 23:53:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a62a97f-6197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:3e:7a:e6:d6:d2:12:f7:dd:50:b9:fd:fa:
                    bc:d3:59:0a:78:e4:bc:37:1d:48:ad:8f:af:4c:50:
                    93:3f:42:fd:e8:15:e6:4c:9a:0a:9f:81:f7:f6:c2:
                    7e:0e:b1:4f:27:bb:b9:2f:64:3f:7d:21:cd:da:45:
                    e5:7a:04:57:47:c0:b2:6e:a5:40:94:da:77:2f:ef:
                    c5:15:29:1a:0f:20:16:51:35:7d:c2:90:a9:04:5b:
                    78:c6:ac:11:9d:96:2e:ea:d8:6b:bf:23:e6:96:2c:
                    1c:1d:bd:86:ae:c6:0a:b2:71:81:a7:09:c8:ad:40:
                    3d:cd:3f:76:e8:9c:01:55:b9:0b:4b:2c:25:af:b9:
                    ee:a0:55:71:a9:01:5e:92:1f:58:31:1a:70:8a:06:
                    8a:18:e6:56:99:f1:02:09:2c:5f:48:de:54:02:d7:
                    ce:75:23:2d:f3:52:d3:37:45:68:c6:3d:70:c7:ee:
                    d1:55:28:db:20:36:fe:fb:73:b2:ba:1f:a7:28:f4:
                    49:d3:69:81:05:03:0e:d1:85:f0:4c:9d:d3:61:1a:
                    1c:04:c2:26:ad:25:f4:02:05:2f:33:88:72:de:12:
                    f0:a6:22:97:7c:6c:a5:ca:f5:0d:19:f9:e6:ef:c5:
                    df:67:be:d4:db:da:be:2c:a1:6f:ff:e1:fe:88:73:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BB:D0:01:54:C1:1E:E4:18:E0:47:60:3B:C6:62:97:9B:F8:84:F4
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/B7AC544A86F111F19E006003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.2.168.0/22
                  103.7.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:77:3c:ac:11:b2:56:38:1f:29:a6:ce:f7:cb:8b:9c:c4:6a:
         9d:f9:19:20:1a:7a:56:91:06:80:e8:81:5e:f5:36:ac:1d:ef:
         c1:af:fd:ae:0c:84:ba:4e:17:f3:6c:3c:eb:74:0d:e1:d9:ed:
         96:c6:ec:a2:33:08:87:bf:49:6a:b0:49:8b:37:8b:cd:0a:31:
         8a:16:32:43:f8:55:70:05:2c:4f:0c:78:3c:a8:60:5f:83:17:
         31:3c:0a:47:7a:18:58:94:fb:b3:ba:78:05:b5:e9:40:ae:91:
         5a:b7:1a:43:84:e9:34:e8:5d:e1:b2:d7:93:26:45:52:e3:8e:
         1c:2c:a5:5c:65:f6:33:6e:af:85:22:ac:7d:cd:3e:2f:d0:52:
         04:a8:95:fd:23:c5:bc:6b:82:21:74:0b:07:bd:5e:30:bf:62:
         aa:d2:7c:83:05:ac:7f:54:0e:ed:d1:a4:43:77:2c:f1:09:1a:
         c7:67:76:43:af:b1:bd:78:16:a9:b6:b2:75:85:c9:d1:99:df:
         98:e6:91:0d:6d:31:36:8f:1e:09:dc:fe:a1:8c:4e:ef:ac:4b:
         aa:b9:43:3e:f3:a8:96:d7:91:f3:21:d2:31:c7:92:55:8a:f0:
         72:70:d4:b6:9d:72:89:3a:e1:13:99:23:79:3e:86:5a:44:4a:
         5b:7a:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:11 2026 by rpki-client