Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/7E9B367C7EA811F1A854ADB365A30FBC.roa
File:                     7E9B367C7EA811F1A854ADB365A30FBC.roa (raw, json)
Hash identifier:          Eu4ivh0ocxW3L/+Wz018Tp2rtHk2MvNF/CFT6tWavaM=
Subject key identifier:   BC:CB:E0:62:10:CE:DA:2F:6F:5B:C3:28:1E:B2:5E:BB:32:04:D6:A2
Certificate issuer:       /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial:       028F
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/7E9B367C7EA811F1A854ADB365A30FBC.roa
Signing time:             Mon 13 Jul 2026 10:49:17 +0000
ROA not before:           Mon 13 Jul 2026 10:49:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135517
IP address blocks:        103.101.98.0/24 maxlen: 24
                          103.101.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
                          rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
        Validity
            Not Before: Jul 13 10:49:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a54c2ad-4ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:5d:1b:37:da:42:e6:41:00:28:ec:59:cc:
                    60:69:ae:f4:ad:e2:d2:7a:c1:6b:de:2b:86:bf:17:
                    e5:0f:02:33:ec:cb:09:60:c0:b8:b2:30:85:99:3f:
                    86:2f:69:0e:87:56:a4:3f:56:da:99:be:5d:e3:a1:
                    6d:ed:a5:8d:86:d9:bf:7c:a8:e2:e6:b9:c2:7d:05:
                    a5:f2:1b:3f:a6:81:b0:5a:55:ce:75:be:3f:40:da:
                    64:a0:4a:25:c1:25:f9:45:09:37:69:f0:f8:12:b5:
                    f6:0b:85:1b:49:71:33:23:9d:7d:22:ca:4b:77:fd:
                    c5:1d:d2:0d:10:ca:9c:44:3c:0f:ea:36:d3:0a:db:
                    15:80:7e:b2:f8:28:ed:56:fd:79:98:89:8f:41:b9:
                    43:80:07:1c:32:59:8a:c7:3c:36:4a:55:22:5b:b1:
                    0f:3e:5a:02:b2:ad:9f:d4:7f:e3:f2:09:85:47:18:
                    af:c4:78:bc:a0:ec:ec:cd:ef:5c:00:66:0a:49:75:
                    3f:19:90:d2:f3:df:93:23:6c:da:0e:43:a2:75:69:
                    2a:5b:d8:f1:7b:b6:27:1c:b4:a9:57:68:23:6d:60:
                    3e:fd:17:20:6d:94:48:c6:d8:d8:6b:27:d8:f1:3f:
                    38:71:08:ed:f5:89:64:4d:ce:64:88:10:72:35:9a:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CB:E0:62:10:CE:DA:2F:6F:5B:C3:28:1E:B2:5E:BB:32:04:D6:A2
            X509v3 Authority Key Identifier:
                keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/7E9B367C7EA811F1A854ADB365A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:36:e6:1f:b7:80:6b:20:9f:3e:99:c0:1b:ef:75:62:cd:97:
         98:4c:4b:40:b5:8c:2c:b4:a9:05:01:99:8f:27:fb:f4:1e:be:
         34:37:79:1e:04:c5:e6:5b:e0:a2:df:c7:a4:00:df:b0:48:04:
         20:be:13:c7:84:48:75:0b:7f:37:da:0f:d9:76:16:b7:72:3b:
         bb:6c:a5:c6:82:d9:81:de:95:39:72:97:7a:13:06:b5:fa:09:
         fb:e6:e9:ec:fd:85:b6:60:a5:0d:47:25:b7:10:ac:5e:2b:1c:
         c7:72:90:a6:37:b6:63:1a:f5:34:31:01:6d:5e:60:7a:02:19:
         d2:74:21:66:10:1b:5f:bf:d3:4f:74:45:5d:10:75:72:89:f7:
         56:14:4d:07:6d:47:92:40:b4:af:0c:f8:a6:fb:e2:65:b9:4b:
         31:f1:2e:78:e3:41:f0:e5:1b:fc:bc:d2:ab:89:39:91:b3:21:
         f0:f7:54:d0:7b:4b:25:07:21:31:53:3f:2d:fd:83:ad:22:2c:
         23:c5:4a:f4:1c:ec:a4:f8:02:38:68:bd:d3:55:3a:95:ca:e0:
         5c:8f:d7:3c:d5:a5:af:76:d6:a5:b9:c0:ef:9b:b8:c6:cb:d3:
         9d:a4:96:9c:b0:d7:bc:da:5b:7c:9c:a4:b1:cc:5f:30:29:62:
         bc:47:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:13 2026 by rpki-client