Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/E15C019CB57611F18C0DFE956511F970.roa
File:                     E15C019CB57611F18C0DFE956511F970.roa (raw, json)
Hash identifier:          +pKBDIQSooGppByE00RFzREXO6a9zvDt6SBp/wZq2ww=
Subject key identifier:   06:76:97:D3:4E:E4:57:9F:95:8C:8E:0D:C4:EB:9F:02:CF:51:DB:A3
Certificate issuer:       /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0
Certificate serial:       029F
Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/E15C019CB57611F18C0DFE956511F970.roa
Signing time:             Mon 21 Sep 2026 04:42:42 +0000
ROA not before:           Mon 21 Sep 2026 04:42:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150162
IP address blocks:        103.39.55.0/24 maxlen: 24
                          103.39.84.0/23 maxlen: 24
                          137.59.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl
                          rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0
        Validity
            Not Before: Sep 21 04:42:42 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ab0b5c2-ebc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:cd:ad:a9:5f:0d:5f:28:3a:fd:a5:6f:be:
                    9d:5c:c7:04:71:e4:b3:26:af:ef:87:0d:ff:39:fa:
                    6e:6b:44:1a:99:c4:9a:9a:e8:3e:e0:f2:c2:c5:07:
                    ca:6a:7a:b6:7b:70:99:f1:d1:a4:fa:2f:81:36:1c:
                    17:fa:3f:03:84:d3:d3:db:96:5a:25:d1:ec:15:ef:
                    c9:33:d6:0f:2e:be:43:a5:ed:2b:86:9e:3d:57:ba:
                    c5:65:88:e6:6f:20:0e:c3:0f:9d:e6:c8:c5:5d:f6:
                    11:be:3c:46:17:6b:0f:a6:71:d4:d5:88:50:51:23:
                    a1:79:3a:33:cf:c1:ad:19:b5:14:b4:65:aa:b3:38:
                    54:38:ac:f4:63:dc:72:34:88:14:57:34:54:9b:74:
                    d1:a6:f0:74:32:60:1d:c0:8a:5e:65:e8:ad:ad:89:
                    44:03:0b:88:fe:f5:64:ce:3e:35:70:4e:b3:71:2e:
                    25:cd:05:b9:d3:ad:0a:ee:78:e9:74:d4:dc:86:45:
                    65:e0:c6:3b:d6:9f:49:3c:3c:8f:6d:73:85:13:0c:
                    ed:8a:12:ea:86:a1:d0:2c:bd:2d:cf:13:53:f4:19:
                    7a:cb:58:63:66:a9:c6:5c:d3:33:59:f5:1c:d5:21:
                    25:ba:e2:62:bd:30:f5:40:00:6d:26:d0:0a:ce:86:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:76:97:D3:4E:E4:57:9F:95:8C:8E:0D:C4:EB:9F:02:CF:51:DB:A3
            X509v3 Authority Key Identifier:
                keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/E15C019CB57611F18C0DFE956511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.55.0/24
                  103.39.84.0/23
                  137.59.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:01:9d:a9:73:eb:b4:50:33:9e:ac:30:37:ad:4e:f2:9b:03:
         0a:a1:e2:e8:1c:56:a7:13:43:3e:4f:97:0d:7e:5a:04:f8:b6:
         e4:e7:ff:c2:8a:cc:92:59:50:da:8d:d4:12:7b:ca:5c:a3:a4:
         22:a9:e7:1c:64:0b:1a:1b:c8:77:24:ab:37:8b:8b:15:1e:e6:
         07:b4:17:1a:76:75:9b:1a:cd:85:ab:51:37:95:1a:d6:31:ac:
         82:cb:f5:01:92:95:e8:7e:f7:bb:bf:78:93:7f:04:16:46:73:
         2e:8b:ec:55:a0:44:67:8a:5a:7a:54:c0:3c:04:04:96:ab:94:
         e2:21:82:04:8b:30:ed:97:36:7d:f2:e5:a2:99:22:a0:7c:43:
         7c:e5:37:1e:8b:dc:31:1b:20:92:f2:74:a3:66:05:a7:4c:b2:
         ec:bd:c3:8c:a4:b9:5a:0e:2b:b4:4b:0d:2d:fe:34:23:3b:f6:
         00:c3:5e:eb:ed:6a:22:03:e5:e4:7b:2f:28:e8:68:45:8d:3c:
         e5:5b:dd:ef:0e:a0:08:72:75:7b:3f:ab:f0:3a:cc:62:c7:34:
         1f:ec:b5:5d:93:09:7c:e7:99:d5:38:cc:3f:67:fb:b5:f1:ba:
         54:00:c4:b4:3b:85:96:04:88:ce:d1:ec:c6:54:12:b7:0c:aa:
         7f:bd:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:17:36 2026 by rpki-client