Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/B0B722BEFA4A11EDA47C091DC4F9AE02.roa
File:                     B0B722BEFA4A11EDA47C091DC4F9AE02.roa (raw, json)
Hash identifier:          gsMKozdipIVu4yCNIKSgaJ/LpxKdahpbHV6vCqtL14U=
Subject key identifier:   26:1D:BD:AB:7E:17:7E:E6:EF:4C:27:D6:0C:FD:E7:DF:BE:CB:03:8D
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0D44
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/B0B722BEFA4A11EDA47C091DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:35:11 +0000
ROA not before:           Fri 12 Sep 2025 18:28:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134146
IP address blocks:        103.73.224.0/22 maxlen: 22
                          103.73.224.0/23 maxlen: 23
                          103.73.224.0/24 maxlen: 24
                          103.73.225.0/24 maxlen: 24
                          103.73.226.0/24 maxlen: 24
                          103.73.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3396 (0xd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Sep 12 18:28:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45cae-c361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8d:9c:ae:78:0b:a8:a7:d6:94:67:f6:e6:55:
                    00:d1:97:21:f9:1c:b4:80:30:2e:bf:e3:6a:45:e5:
                    32:74:dd:a5:2a:be:85:0e:49:72:24:54:5a:1b:f3:
                    4a:7c:3c:d2:20:2b:a3:39:3e:1a:b7:66:12:0b:98:
                    e8:e6:b2:08:64:94:c4:88:13:87:91:33:1d:4a:46:
                    aa:bb:ad:a2:bb:22:c3:af:39:65:0a:62:d3:c3:b7:
                    7c:52:87:69:03:2e:07:14:b3:02:b1:d9:04:8c:4d:
                    aa:5d:91:c7:af:f1:e1:72:57:62:94:03:7a:f0:c4:
                    d6:e3:5b:29:69:11:56:dd:f9:50:ab:1c:6c:6b:b4:
                    42:8d:7d:0f:f9:67:b6:03:77:9f:7e:b2:7d:e6:f9:
                    76:0d:c8:1b:0f:13:42:84:67:f2:b9:fd:f7:ae:d1:
                    bb:80:bd:8a:22:69:11:40:80:bd:44:82:90:bd:dc:
                    22:6e:bd:d1:5b:70:54:88:54:67:22:13:3d:71:59:
                    a9:75:bc:da:e9:9e:05:01:88:fe:b9:84:d1:7e:1a:
                    b8:60:3c:59:cf:f0:b1:59:c4:e9:4c:b5:0f:ff:a1:
                    82:df:e4:65:b3:81:88:d4:f3:3c:e4:b7:33:d0:0e:
                    2b:df:f1:fe:89:ab:ee:ca:9d:b1:89:07:47:24:99:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1D:BD:AB:7E:17:7E:E6:EF:4C:27:D6:0C:FD:E7:DF:BE:CB:03:8D
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/B0B722BEFA4A11EDA47C091DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:af:15:f6:d4:12:b7:5f:a0:de:fc:fb:2b:66:dd:8c:b0:e5:
         80:51:f6:7c:4b:75:2d:fc:74:37:79:9b:7f:03:7f:21:b9:2d:
         c0:a8:19:4c:c7:69:5c:b5:f1:c1:f4:ef:f7:24:78:37:67:be:
         8b:5b:3c:8f:a6:b7:d6:2e:5c:25:85:26:d7:a3:cd:00:db:61:
         84:8a:07:68:fc:22:57:20:09:1a:cf:25:56:f2:06:85:e7:5e:
         c5:1c:a9:47:54:db:80:99:0b:6c:3f:83:80:4d:09:fc:66:b5:
         32:59:a3:08:15:d1:ea:34:e5:c1:39:eb:64:14:f2:18:26:3b:
         5b:9a:a7:c4:a8:2f:05:17:01:5d:33:b7:e5:b1:15:31:92:04:
         57:28:53:3b:c1:0d:3a:ee:ee:81:e2:a8:08:37:03:d2:ef:73:
         32:c1:cb:41:2b:cd:48:af:5c:61:8f:ca:96:48:f9:45:d6:7e:
         e2:b9:c4:45:ca:d5:ba:ea:75:56:3d:6a:11:36:dd:fd:16:55:
         e8:e8:2d:8c:65:3f:6a:1d:f7:50:61:3d:3c:b5:dc:c7:cc:bf:
         cc:34:35:92:a6:35:ab:e1:6c:24:b8:a0:1f:44:e6:5d:83:a3:
         0c:8f:c0:ea:8b:13:b6:4c:8f:f1:00:5e:d7:46:9a:45:d4:53:
         e3:55:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:33:29 2026 by rpki-client