Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa
File:                     B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (raw, json)
Hash identifier:          69MhSA35Y7+oCxeHTa4ZtgrfWQvl9S9VgT4gK56n3vE=
Subject key identifier:   35:93:23:84:15:2E:16:1E:5D:B8:EA:D1:24:04:86:13:A3:6D:E0:BA
Certificate issuer:       /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial:       0AB2
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa
Signing time:             Thu 14 May 2026 20:23:36 +0000
ROA not before:           Thu 14 May 2026 20:23:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135895
IP address blocks:        103.67.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2738 (0xab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
        Validity
            Not Before: May 14 20:23:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a062f48-62be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:24:9f:98:5f:6f:b9:21:bc:a2:a9:0b:31:f1:
                    f8:63:d4:eb:64:a1:e7:7b:14:d2:8f:18:ad:3c:a1:
                    18:26:f5:fa:ed:ac:56:fe:18:72:26:9c:8e:d3:4c:
                    5e:f4:50:37:82:51:db:a2:f6:b1:48:29:c2:ba:b4:
                    fc:90:cc:0a:97:d7:4b:46:92:31:3e:85:2c:51:06:
                    01:af:39:0b:93:f2:f0:18:fe:30:ac:32:d9:f8:f6:
                    e6:5c:09:69:95:85:01:fb:fb:67:2a:41:91:24:80:
                    31:2b:3f:00:f9:5f:88:7f:5d:2d:d4:79:c3:94:2a:
                    c2:ff:dc:78:4f:02:74:b8:6b:55:ee:2e:7a:1b:12:
                    f1:8f:6e:21:f0:ec:9b:5d:1b:6c:9d:fb:9b:5e:b5:
                    02:37:78:4d:95:f8:53:26:2e:f5:c0:5f:2d:b5:05:
                    71:c6:50:2b:f1:c8:14:af:da:ef:9b:1b:dc:68:12:
                    a6:8b:98:aa:47:43:d3:1d:21:73:56:8a:23:99:d3:
                    71:e6:b0:df:e2:91:f9:7b:87:ca:2c:82:47:ee:ad:
                    c3:9a:87:c1:f4:ab:47:92:e8:6f:df:68:cf:9d:81:
                    7c:6c:5e:65:e2:df:86:6a:97:c9:f8:8c:bf:0a:8b:
                    f5:c6:5a:c7:c9:af:2a:34:fd:91:57:c2:18:f3:63:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:93:23:84:15:2E:16:1E:5D:B8:EA:D1:24:04:86:13:A3:6D:E0:BA
            X509v3 Authority Key Identifier:
                keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:5a:fb:5e:a3:a2:be:4b:91:65:cb:b9:5c:5f:b0:12:30:
         7a:eb:e1:cc:42:af:11:29:2d:58:7f:a0:b5:38:90:01:05:c6:
         9d:80:f9:00:70:2d:96:ba:59:47:99:02:1a:1e:91:fe:36:92:
         d3:ea:48:5f:ca:ce:bc:20:ff:f6:a2:39:b9:73:49:e1:9d:87:
         52:4d:d5:21:b6:15:1e:1f:ac:14:34:3e:12:cb:1d:88:4a:f3:
         f6:73:04:e9:e1:b7:dc:9d:35:5f:4a:04:d1:2d:f5:eb:14:f4:
         a3:32:bb:62:da:67:ba:62:2d:62:d7:c5:68:bd:25:c2:ff:83:
         b5:fd:e3:17:3a:db:c7:88:cc:c6:f5:77:70:36:a9:a6:9a:a5:
         89:a5:5d:c9:f6:5d:87:c9:78:b9:24:07:af:c9:35:ed:1b:ff:
         09:82:38:f0:ad:0d:01:b8:84:2f:17:2a:a0:d0:94:a0:df:cd:
         cd:3a:b4:36:01:d8:88:e6:a6:f2:e0:48:fb:d8:98:6f:94:5d:
         b9:d4:a4:11:21:f0:74:f4:82:64:4a:ad:e0:31:35:22:9c:c9:
         bf:04:d9:f2:bc:94:09:de:13:0f:b8:b5:18:d9:be:1c:2b:3e:
         e9:e1:4d:28:ab:93:98:7f:17:7e:68:d3:1b:2d:57:29:fd:0f:
         9a:64:e7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:47:12 2026 by rpki-client