Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/9F155A86125111F1BDB1E8192A3D8C67.roa
File:                     9F155A86125111F1BDB1E8192A3D8C67.roa (raw, json)
Hash identifier:          Xp6J4EN8UBByITq+gCFf5DSbouyROjD+ka1UZdn7rcI=
Subject key identifier:   7A:B1:08:50:63:FB:22:68:28:D2:48:E5:38:B2:D7:66:15:95:D2:5F
Certificate issuer:       /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial:       09DE
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/9F155A86125111F1BDB1E8192A3D8C67.roa
Signing time:             Sun 01 Mar 2026 17:28:22 +0000
ROA not before:           Wed 25 Feb 2026 13:55:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.151.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
                          rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2526 (0x9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
        Validity
            Not Before: Feb 25 13:55:20 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47736-2091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:5d:09:cd:69:a5:bc:24:1b:ac:0f:9d:32:
                    5a:e0:77:90:9d:bf:a6:35:2f:81:92:b3:a1:f6:a1:
                    7c:76:a1:bd:49:6e:37:8f:4e:3b:f8:b3:ca:db:56:
                    42:fc:6f:56:96:72:78:56:c0:65:86:20:a1:cf:33:
                    05:18:ca:74:18:69:41:a3:93:1d:2c:72:b6:04:d4:
                    ba:31:81:43:95:b0:f1:86:9a:95:f7:db:2a:01:c1:
                    5c:58:d7:d5:b3:cf:b7:42:9b:f1:cc:d7:68:2f:2e:
                    ee:a0:f3:2a:da:dd:47:c3:fd:35:44:17:37:01:2e:
                    78:9d:22:c2:c3:67:a5:3c:2d:a2:13:05:cb:fe:27:
                    c2:0d:23:9c:8b:1b:f9:3a:fa:a0:4b:4c:c6:0f:df:
                    e2:46:e4:e7:c5:d9:21:75:d4:15:c6:0e:70:83:50:
                    c4:13:14:b8:9e:aa:33:a8:19:ae:37:ce:27:78:bc:
                    7e:f2:fd:c1:e5:d8:88:76:19:ef:b2:94:df:1f:9d:
                    a6:6d:47:8f:1a:9a:81:f4:e2:ea:2e:b4:2a:df:0e:
                    04:c8:6f:ee:50:04:f3:c3:ed:59:2c:b2:18:19:dc:
                    d4:f1:aa:2f:4a:4f:2f:74:89:40:d5:66:64:34:47:
                    67:27:a7:54:cf:98:52:90:43:73:29:6d:d9:31:06:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B1:08:50:63:FB:22:68:28:D2:48:E5:38:B2:D7:66:15:95:D2:5F
            X509v3 Authority Key Identifier:
                keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/9F155A86125111F1BDB1E8192A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:12:70:fe:4c:7f:09:49:00:84:4e:63:b4:49:4c:b6:ce:2a:
         9a:ce:02:c6:7c:61:42:b0:c4:ce:ba:14:08:77:a1:75:bf:40:
         2c:1e:41:b0:43:88:74:f0:95:30:3b:33:e4:4c:f6:35:b9:5f:
         8b:6b:7f:c6:b9:bc:c8:32:da:61:49:da:b9:23:b7:7b:b3:4c:
         bf:85:9d:a4:ec:bb:04:a9:f8:96:c7:0d:ce:eb:55:10:e4:3d:
         a1:fd:23:31:ff:bc:47:56:87:64:1a:d5:d9:ff:9a:cd:5a:8f:
         29:87:96:0c:cf:a6:37:94:09:e5:35:1d:7a:f2:bc:36:44:c2:
         14:d3:62:55:44:53:05:21:91:39:57:59:88:73:56:d3:6a:b2:
         2c:68:f2:c4:6e:f5:06:b4:49:5d:ff:11:fe:d5:33:38:68:ec:
         a9:6a:b6:e3:24:98:1d:8d:2f:78:73:f8:cc:02:9b:2f:3f:34:
         17:be:c9:f5:b9:df:c9:22:17:d5:e5:33:cb:db:47:6d:96:42:
         5e:f5:33:48:b6:8c:cc:e7:50:8a:7f:2b:cb:7c:14:45:f8:00:
         a2:06:3a:12:e4:34:e7:bb:e0:9a:62:7a:5b:94:b3:34:85:dd:
         7c:7e:4c:6c:ae:ee:f0:1c:a3:1f:b6:64:43:f9:d7:0b:4c:d3:
         ec:6e:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:57 2026 by rpki-client