Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/4DC69458F51C11F0B1C1D2E9586F56BC.roa
File:                     4DC69458F51C11F0B1C1D2E9586F56BC.roa (raw, json)
Hash identifier:          QcCJl1UfRJP0/shxvSvEBu5HkTvWkijjCe1nldV+mo4=
Subject key identifier:   5B:9F:29:53:CD:E5:8B:5C:7A:63:C3:4F:F6:CA:91:5B:D3:98:8E:3F
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       0187
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/4DC69458F51C11F0B1C1D2E9586F56BC.roa
Signing time:             Sun 01 Mar 2026 17:53:17 +0000
ROA not before:           Mon 19 Jan 2026 09:50:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153473
IP address blocks:        103.15.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Jan 19 09:50:36 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47d0d-261d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:5b:45:48:89:3a:47:af:4c:e1:f6:9d:68:
                    b8:6a:33:ba:87:48:20:7c:9e:b3:1e:9e:b7:ec:4c:
                    11:dc:bc:22:45:c4:15:70:7b:4f:bc:2f:5d:64:08:
                    86:37:b1:7b:25:5e:ea:3e:de:8d:7c:19:65:d3:7a:
                    d7:bb:93:69:de:d5:a8:9c:9c:54:41:95:f7:a9:17:
                    f2:73:7e:7c:38:8f:f8:eb:fe:77:7f:33:b4:26:6c:
                    f4:7b:3c:bd:c1:01:9e:d6:31:29:30:f5:b1:38:f4:
                    13:13:b1:f5:81:56:7f:47:7f:8a:5a:8f:10:24:e0:
                    59:31:6a:32:72:09:75:ad:64:59:6a:ef:f7:9b:4d:
                    3a:23:c6:39:13:df:ac:65:8b:87:71:9e:a5:26:51:
                    c6:06:40:b9:13:53:dc:36:21:34:d3:2c:d2:91:73:
                    40:eb:2d:ae:3f:ed:dd:07:38:7a:01:2b:af:fd:7c:
                    87:f0:bd:5c:1a:7a:5a:38:34:82:ab:39:d1:19:af:
                    4a:37:2a:20:d4:ed:a8:2d:67:4a:99:80:ed:ef:dd:
                    d8:ad:be:9a:14:48:fa:fc:82:71:b4:6d:41:cf:06:
                    54:2d:b9:fd:0d:52:3b:87:41:fe:2e:36:fd:a6:d3:
                    d3:0c:49:f1:47:4d:74:e0:88:a1:cb:1c:da:dc:05:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:29:53:CD:E5:8B:5C:7A:63:C3:4F:F6:CA:91:5B:D3:98:8E:3F
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/4DC69458F51C11F0B1C1D2E9586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:95:8b:07:4a:6f:10:3a:dd:9c:3b:58:93:3e:27:a4:35:d8:
         14:09:f7:a2:4c:9e:56:b1:ff:07:aa:10:dc:1b:3a:b7:e4:2d:
         03:88:b0:fe:e4:4c:1e:a8:85:9b:6d:4c:69:f7:5f:ab:1d:d2:
         a5:33:a8:87:6d:90:74:0a:76:d3:25:09:d4:a1:bb:d0:1d:18:
         dc:c8:6b:73:2f:51:cf:75:36:09:e2:5b:4d:9a:9a:40:36:8d:
         1d:8e:68:19:e5:ce:3b:07:f5:d4:bf:56:20:aa:61:f1:f7:da:
         a0:fc:b2:9b:73:e1:ad:b9:2a:19:05:1d:2b:d6:8c:d7:fd:3b:
         b7:76:ee:e4:d3:05:c4:cd:fd:cf:26:3c:4e:a5:01:41:2e:5c:
         76:be:9a:86:03:94:f4:df:9f:a3:31:b8:e0:64:0b:d9:84:f6:
         da:18:b0:b6:68:0d:2f:c7:70:33:78:4e:8f:db:34:e9:b4:ce:
         1a:16:3d:b1:1c:71:f7:c6:3c:04:4f:8d:de:de:9b:3b:ba:40:
         a6:69:90:be:48:88:2d:7f:bd:f6:5a:97:48:ab:e5:46:00:ef:
         52:fe:4c:44:f8:8e:43:c9:29:cb:ec:c1:30:c4:83:e8:df:36:
         c0:79:98:e4:37:66:4b:d7:de:c6:19:51:05:1b:04:e5:55:12:
         c4:3c:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:03 2026 by rpki-client