Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa
File:                     372E72941F7811F0AC4FFF82C4F9AE02.roa (raw, json)
Hash identifier:          lc4x/4krlU7IrBNm9yndeIsd6X4Oi1wYGPdwnSnT+2s=
Subject key identifier:   7E:A0:EF:53:6D:96:03:43:BB:F9:D9:23:8A:87:1D:2C:7F:2F:B9:76
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       0102
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa
Signing time:             Sun 03 May 2026 07:39:19 +0000
ROA not before:           Sun 03 May 2026 07:39:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137899
IP address blocks:        103.117.136.0/22 maxlen: 24
                          103.121.92.0/22 maxlen: 24
                          103.186.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: May  3 07:39:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f6fba7-c9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bc:3c:99:c2:3f:b8:4e:88:a2:87:25:16:3e:
                    f0:f6:bf:c3:1a:fd:3c:5a:50:52:3c:c8:93:23:8c:
                    d0:cd:e1:4a:e3:c8:b1:b5:6a:48:05:dc:f9:a3:8e:
                    6a:24:28:55:e1:87:75:db:d6:09:fa:b4:15:b5:32:
                    89:ce:40:e8:be:5b:f6:5d:cd:43:d2:a1:a7:24:44:
                    c3:d2:3f:03:e0:c4:19:dd:57:72:04:76:86:f8:2b:
                    cf:38:2d:5e:f3:da:4e:df:3e:23:3d:bf:a6:86:58:
                    bd:42:d6:b0:9f:31:3f:f8:64:44:a3:75:50:61:7c:
                    e3:51:52:b4:c5:e4:85:05:54:73:96:b6:d9:cb:dd:
                    d7:84:3b:00:78:c5:52:09:f2:4a:94:d1:d1:20:d9:
                    fc:49:ce:c5:cf:11:0c:f1:11:5a:27:e6:57:f7:10:
                    ba:e8:24:74:ca:13:3c:80:a0:d1:1b:d3:06:e7:09:
                    0b:c7:44:f6:d0:c4:9e:7c:ae:47:60:26:aa:ba:41:
                    0d:ca:31:3c:23:db:b3:ae:0e:fe:ad:93:b4:4b:29:
                    cb:f5:50:f7:91:e3:a6:46:39:e8:1c:b6:f6:64:8d:
                    3d:05:19:b4:26:63:33:1d:06:cf:ac:32:06:2c:72:
                    a5:f6:43:53:e5:b0:cf:60:37:42:13:31:bc:9f:78:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A0:EF:53:6D:96:03:43:BB:F9:D9:23:8A:87:1D:2C:7F:2F:B9:76
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/372E72941F7811F0AC4FFF82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.136.0/22
                  103.121.92.0/22
                  103.186.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:ce:97:7b:43:9a:c5:ba:c8:17:7c:08:a9:52:56:19:5e:
         9c:21:ab:e5:79:a1:d8:79:bc:6b:e7:e1:9a:58:d2:96:2e:b5:
         0d:97:cb:b1:8d:f0:a4:0d:cf:1d:30:73:d1:72:7e:c9:46:64:
         c6:01:36:10:17:99:8c:7e:71:ea:4d:f1:8d:ef:9e:79:30:4b:
         72:a2:00:34:a2:fe:af:46:8a:70:f4:96:6e:26:51:cf:87:c6:
         68:f6:7b:23:aa:2f:12:9a:c9:01:18:7d:62:50:b2:c2:92:d9:
         fd:59:19:f9:f5:80:3c:a6:4d:04:eb:25:c2:40:47:d2:31:7b:
         4a:8a:9a:92:23:7f:11:98:9a:50:d7:28:6f:9d:b7:52:1c:be:
         88:ba:06:52:7c:98:5b:e6:70:b6:65:e5:c0:89:ad:9c:bc:3e:
         9d:f5:3a:fb:c7:a6:8d:c1:76:82:98:ed:02:47:ea:0c:bf:ed:
         ef:63:87:a1:2f:6b:c7:26:a3:25:08:a8:4f:d0:0e:29:4a:aa:
         c4:32:ac:c9:f0:26:08:1a:82:b7:d4:8e:dd:5a:10:c5:cb:15:
         d7:80:fc:bc:05:a0:3c:dd:6c:93:42:10:5c:8f:b1:f4:4e:1c:
         ca:c6:ea:d8:0a:0b:91:31:9d:62:10:72:ed:32:21:50:eb:00:
         5a:a5:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:06:25 2026 by rpki-client