Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
File:                     728286AE27BF11EDA6A02960C4F9AE02.roa (raw, json)
Hash identifier:          sSRfRnYQRMGkVkEen327Ppn7OTWcdEFTS3+DBpjI3Ak=
Subject key identifier:   37:CF:B9:B6:70:4E:D5:90:2D:71:8C:5C:47:B5:C6:F8:DD:61:E8:D8
Certificate issuer:       /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial:       02B7
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
Signing time:             Sat 31 Jan 2026 01:21:05 +0000
ROA not before:           Sat 31 Jan 2026 01:21:05 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134475
IP address blocks:        103.160.129.0/24 maxlen: 24
                          103.185.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
                          rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
        Validity
            Not Before: Jan 31 01:21:05 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697d5901-cdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:59:4e:a9:57:1d:56:c4:60:a7:64:b8:55:
                    4b:d2:05:56:e8:84:d4:cc:b5:64:19:b0:a7:68:fd:
                    67:e7:0d:a1:95:dd:8e:aa:31:32:95:92:85:56:e1:
                    f1:eb:42:37:3f:37:bd:9c:94:d6:80:2a:73:00:8e:
                    f6:ec:26:9f:07:c6:a0:80:63:2b:80:17:c9:c4:8d:
                    92:51:af:f8:2c:7f:ff:58:4b:45:89:3c:0b:17:71:
                    6f:12:97:67:4a:c7:12:cf:25:06:c5:c8:4f:be:91:
                    0e:72:d5:ae:f5:ad:e6:b4:2a:01:8c:5c:b1:57:12:
                    f0:bf:2a:82:25:c8:d5:c5:c2:b4:d0:58:19:fc:79:
                    de:b4:68:5e:2a:8f:28:8e:07:76:fa:f3:cc:d0:76:
                    6f:eb:78:b3:0a:c7:24:19:b0:42:8f:21:a5:15:54:
                    34:01:11:0b:f2:3b:90:96:72:9d:f0:ce:7e:bf:f5:
                    0a:cf:35:83:81:07:21:a5:00:3a:a8:06:6a:51:5f:
                    3c:e9:a7:e1:66:ca:5a:92:db:78:0f:93:9f:c7:59:
                    6d:3a:44:d5:27:fe:a6:cc:3b:1e:ae:6c:29:ae:1c:
                    e0:58:9c:cd:61:96:64:38:ec:ae:43:43:9b:dc:ab:
                    e7:ca:8e:2c:8f:14:9b:dc:81:ca:ca:a0:1f:c1:94:
                    bf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CF:B9:B6:70:4E:D5:90:2D:71:8C:5C:47:B5:C6:F8:DD:61:E8:D8
            X509v3 Authority Key Identifier:
                keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.129.0/24
                  103.185.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:45:11:e0:5c:92:d1:6f:87:35:12:14:b3:3a:54:70:f8:59:
         0e:71:dc:5c:32:30:b8:a9:21:18:a5:a9:0d:97:0f:88:ce:45:
         e1:75:75:4f:cd:9e:ef:4c:45:81:71:48:5a:7f:04:4a:4f:b8:
         1e:c6:15:fd:42:e4:84:22:29:de:e0:55:5c:6d:1f:7a:99:d3:
         ec:92:5b:6d:4c:b4:21:0b:f0:ce:df:8c:df:76:39:72:44:eb:
         71:73:83:5c:ed:ee:4d:ff:7e:6b:77:fb:80:d3:de:dd:c4:99:
         39:81:bf:2d:44:75:06:8c:24:6a:fe:4b:b3:a0:4f:bd:55:58:
         22:59:fa:fd:eb:5c:69:f9:5b:1f:d7:de:e1:e2:ff:92:3d:6c:
         f6:ba:c3:45:6e:1c:aa:8f:7b:f3:02:56:ed:e4:76:ee:93:3b:
         46:57:65:22:0b:4f:1c:c5:f0:ed:12:5c:75:a9:1f:28:f4:60:
         08:0c:a7:c8:0f:40:b9:2f:7e:c4:2d:fe:14:27:ec:1a:29:5f:
         67:da:f3:8b:12:1b:66:b5:51:d4:b5:39:bf:d3:36:f8:83:95:
         e0:c0:e4:97:74:80:1b:1d:0c:cf:b6:33:58:89:0e:ae:2d:e3:
         3c:41:be:91:36:cd:91:b4:1d:29:b3:34:d1:e5:7d:41:3f:b8:
         9b:69:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:05 2026 by rpki-client