Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/70119E246AF411F1AA3EA8907547A888.roa
File:                     70119E246AF411F1AA3EA8907547A888.roa (raw, json)
Hash identifier:          c02C70pNwf0Uz4fz4O8kvOgsxfMETv+MMeBRcCYdv9c=
Subject key identifier:   4B:67:C5:3D:9A:F4:80:EE:B9:FD:1A:33:C0:C9:7F:78:07:9B:F8:CB
Certificate issuer:       /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial:       062B
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/70119E246AF411F1AA3EA8907547A888.roa
Signing time:             Thu 18 Jun 2026 09:02:31 +0000
ROA not before:           Thu 18 Jun 2026 09:02:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     13875
IP address blocks:        103.170.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
                          rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
        Validity
            Not Before: Jun 18 09:02:31 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a33b427-8940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:c0:fa:97:64:f2:2e:da:70:8f:f5:e5:e6:
                    36:2a:76:02:bd:9d:09:7c:f6:e1:25:7e:79:18:2e:
                    d3:7f:94:38:14:eb:5e:de:6f:f7:44:70:93:07:c2:
                    b9:50:18:f6:2d:75:44:76:3c:af:95:41:0a:33:54:
                    34:3b:1d:5b:32:07:6e:bc:b3:7f:bf:a8:24:96:6a:
                    0b:4d:12:a2:80:cd:b3:bd:89:4d:a8:28:63:42:f6:
                    9b:f8:65:25:fd:79:41:af:3e:5a:18:42:5d:32:30:
                    86:48:c9:96:83:f2:7a:5c:d5:b9:9a:56:9f:f8:c5:
                    fa:14:ba:1d:14:a4:a7:56:c3:23:ae:5c:48:55:0a:
                    86:0e:c2:1f:c5:b9:88:54:fd:c8:29:e6:47:da:43:
                    4c:a8:8e:23:a1:92:fa:6d:c0:e3:25:6d:6b:06:e4:
                    bc:57:16:a8:31:a9:f7:9d:20:eb:fa:0b:31:9d:a2:
                    cc:48:38:1e:2a:b9:64:2c:64:40:6d:3c:4b:f6:c0:
                    6b:32:f9:21:69:41:96:a6:62:fa:39:a1:a3:07:fc:
                    85:80:96:bf:18:14:b2:8c:52:bd:94:fe:67:73:2c:
                    96:aa:da:7d:2f:02:42:0d:2e:92:99:8d:55:39:66:
                    bd:34:0a:74:b4:a3:5c:ae:0b:f8:cc:e5:5d:d0:d6:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:67:C5:3D:9A:F4:80:EE:B9:FD:1A:33:C0:C9:7F:78:07:9B:F8:CB
            X509v3 Authority Key Identifier:
                keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/70119E246AF411F1AA3EA8907547A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:65:fb:0b:40:d2:d4:07:ff:23:99:be:e5:32:b3:5e:4d:
         87:b4:ff:b7:ea:38:f2:ca:7b:06:b8:e6:6b:4e:f9:14:25:9f:
         a3:c7:cd:e1:3a:78:a1:37:3a:ed:e1:dc:8f:db:b5:91:bb:df:
         ee:6d:38:b3:f1:c6:f2:f8:12:c7:60:03:dc:88:26:d3:b3:1c:
         61:9c:a5:93:26:f0:64:5e:96:e8:60:0d:37:6d:40:aa:e3:5a:
         d6:d8:b2:d7:5c:80:15:cd:45:9f:ad:0b:f9:d1:ec:8e:89:a6:
         01:2b:78:4f:8e:df:fe:02:d0:0d:a9:66:1a:82:3f:34:ae:bd:
         9a:d8:26:26:6d:32:05:3c:18:e3:b0:6e:f4:23:b2:29:d9:e8:
         6e:c9:df:c9:c5:56:e9:8f:45:82:df:29:19:73:e3:48:b9:d3:
         44:98:71:82:96:bd:1c:a0:ff:5b:e9:d2:5e:9a:6b:c6:e5:36:
         4d:c0:5c:d6:d5:2a:33:f6:7c:ef:0f:e5:56:37:56:bd:ef:55:
         ba:1d:b0:80:6d:80:df:a2:ad:91:a6:32:c6:b9:fc:a7:31:5c:
         6c:f4:14:45:a3:08:66:64:35:c0:58:e8:d3:3f:fe:a6:c5:7f:
         78:ea:63:bc:a1:ca:21:71:da:d8:cd:6c:cf:64:0a:c5:2d:c9:
         89:30:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:33 2026 by rpki-client