Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7A97D2F2174311EFAA4B5762C4F9AE02.roa
File:                     7A97D2F2174311EFAA4B5762C4F9AE02.roa (raw, json)
Hash identifier:          Qfeb2gMkPo0KsgYkq1own4iH3Ge7HptThagzwDiI9vQ=
Subject key identifier:   34:B6:E9:5B:C7:D5:F3:9F:C0:39:32:B8:7B:E6:4A:53:33:A9:C1:99
Certificate issuer:       /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial:       0269
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7A97D2F2174311EFAA4B5762C4F9AE02.roa
Signing time:             Sat 03 Oct 2026 03:51:21 +0000
ROA not before:           Sat 03 Oct 2026 03:51:21 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     136557
IP address blocks:        103.72.62.0/24 maxlen: 24
                          103.72.63.0/24 maxlen: 24
                          2401:7fa0:1::/48 maxlen: 48
                          2401:7fa0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl
                          rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 02:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F715C, serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
        Validity
            Not Before: Oct  3 03:51:21 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac07bb9-ef4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:a5:cd:ee:2e:ca:43:ad:6d:96:86:43:e6:
                    9b:f2:6e:37:ca:95:de:84:41:58:ad:99:8d:58:49:
                    a2:59:7b:6e:fd:7a:df:a7:6a:24:13:d0:ce:51:45:
                    d5:f7:b7:b3:a1:a1:59:fa:75:8a:94:86:a7:1c:74:
                    00:24:a5:ff:fa:28:ca:a7:bc:b8:6f:3f:ed:aa:8b:
                    d5:1e:c8:94:6b:e1:db:82:26:59:ef:bb:bc:76:59:
                    dc:8f:fc:cc:1b:b4:7d:18:56:fd:a9:87:ba:98:0c:
                    ae:03:e5:dc:67:37:8f:1b:ff:0d:e2:92:93:1e:10:
                    53:f8:b3:84:a7:4c:5f:a2:b7:d5:50:47:09:80:99:
                    bd:16:96:3d:eb:bb:1d:74:5d:d4:3a:6e:f1:a4:cf:
                    9a:ff:ea:39:6b:60:30:92:8f:88:09:2f:5a:dc:36:
                    04:df:15:44:76:cf:85:e9:2a:dc:14:a2:e5:19:e1:
                    b9:ce:ca:d7:08:e2:67:e6:2b:d7:99:2f:1a:dd:bb:
                    8f:d4:f0:23:54:d7:cb:0a:e3:df:e2:99:64:3d:af:
                    82:5b:a8:59:03:52:ad:e7:2e:61:ff:93:c4:2f:2b:
                    17:26:49:e0:cb:60:87:2e:0e:45:60:b2:33:4f:b3:
                    e6:9b:f5:30:dc:80:6c:50:f1:2e:76:9e:ad:41:00:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B6:E9:5B:C7:D5:F3:9F:C0:39:32:B8:7B:E6:4A:53:33:A9:C1:99
            X509v3 Authority Key Identifier:
                keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7A97D2F2174311EFAA4B5762C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.62.0/23
                IPv6:
                  2401:7fa0:1::-2401:7fa0:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:18:bb:84:97:a2:c9:f5:44:06:a0:a2:bd:39:f7:dd:1b:
         d4:7f:9f:d2:ad:31:a9:ea:cf:ef:3f:93:5d:39:15:86:45:cb:
         2e:10:9a:27:54:b9:6a:4c:99:09:07:23:16:c6:7e:a0:af:11:
         c4:a8:69:cc:65:98:7a:06:54:73:f2:34:9c:d8:b0:b6:9e:d9:
         20:dc:62:bd:b2:17:88:ac:d5:e9:bc:80:cc:79:03:33:24:27:
         46:2e:49:e0:69:94:c6:ea:8e:d0:3f:77:9b:6e:a3:ee:3a:8b:
         4f:5e:82:64:08:b1:86:64:94:9f:22:c1:f2:80:78:f7:76:a7:
         71:1c:a7:02:a0:38:61:1f:3a:40:41:46:d9:2e:8d:98:a3:e5:
         7c:6d:ef:63:6a:43:bc:8a:a5:c3:62:df:43:31:d2:63:3d:1a:
         ac:83:c2:a0:6f:e1:0a:1a:ca:12:c9:ff:79:06:58:b9:15:d4:
         21:9b:e1:58:e9:c6:75:d8:06:35:dc:70:c1:07:5e:2b:ee:54:
         c8:0b:ed:0e:f2:f4:4c:4d:bb:31:22:49:3a:e2:d4:d8:40:8e:
         86:5e:e5:a9:3e:b6:ae:09:de:54:2c:33:d6:88:6b:ba:97:96:
         24:d6:bd:6a:8b:a2:f5:5e:7b:32:9d:9f:3e:fa:3f:87:37:58:
         3e:68:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:22:03 2026 by rpki-client