Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/69FB4E726DC511F08948D952C4F9AE02.roa
File:                     69FB4E726DC511F08948D952C4F9AE02.roa (raw, json)
Hash identifier:          di5EPG08vSgsTvQVKmlP9cypSsgnEAsjgJZhJNMQn10=
Subject key identifier:   88:E7:45:C8:5B:C8:A4:10:C4:4F:AC:D5:9A:06:69:2F:9F:BC:AB:27
Certificate issuer:       /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial:       071D
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/69FB4E726DC511F08948D952C4F9AE02.roa
Signing time:             Mon 20 Apr 2026 22:28:26 +0000
ROA not before:           Mon 20 Apr 2026 22:28:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149852
IP address blocks:        103.19.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
                          rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
        Validity
            Not Before: Apr 20 22:28:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e6a88a-6a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:77:66:de:15:91:24:b7:eb:0e:c7:c3:8b:
                    3c:6f:53:b5:cd:33:96:2a:5d:8e:cf:2f:84:15:a2:
                    e5:89:52:0d:6d:35:fc:c2:6c:72:04:9c:5c:b1:6a:
                    92:89:69:8a:3e:bb:34:3a:33:11:d1:ab:cb:a5:04:
                    6a:5a:af:2a:c8:19:1d:f6:21:bd:71:33:dc:c1:ce:
                    4b:4a:0c:de:43:70:0e:ba:f1:e8:c6:25:ee:98:9e:
                    e9:6e:b5:1d:34:94:76:7e:dd:7f:9a:86:04:89:6a:
                    e9:91:66:10:40:23:ae:e5:2f:d9:bb:b8:d0:a8:80:
                    be:3f:6f:4e:b5:72:c8:c0:05:ba:e3:ec:1f:2a:09:
                    29:3a:a1:0b:9e:10:47:e9:68:88:cd:b9:99:92:b6:
                    09:87:f6:99:15:23:70:9c:fb:cc:70:f0:18:19:0a:
                    1e:07:06:60:78:b3:4e:68:a0:af:9d:7f:2e:3f:82:
                    f0:96:0a:a8:a6:45:02:29:4e:5a:ff:d2:43:53:4b:
                    3d:94:66:f1:8e:56:63:0e:31:80:d8:cc:94:eb:dc:
                    a0:e2:4b:62:b3:d8:09:a2:b7:16:25:38:4f:c8:ad:
                    22:0e:12:55:ca:33:c4:d3:da:98:a3:5f:b0:b8:06:
                    38:85:7c:36:71:be:40:09:f2:d2:e5:7e:1d:47:0b:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:45:C8:5B:C8:A4:10:C4:4F:AC:D5:9A:06:69:2F:9F:BC:AB:27
            X509v3 Authority Key Identifier:
                keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/69FB4E726DC511F08948D952C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:0c:86:33:2e:ff:9f:08:84:a3:92:62:e9:a0:6e:8c:db:
         4d:64:76:d0:32:3e:ec:bc:86:be:4c:92:f6:8f:a1:5d:69:2f:
         ab:8d:2a:ea:fc:dc:62:45:ff:74:39:cc:1c:f0:cb:db:7a:32:
         10:d1:a6:e1:56:ff:ec:1d:9a:40:cb:6e:e9:42:85:3b:9a:d2:
         bd:a0:fe:f1:b8:ed:8c:15:f9:12:1f:27:47:94:c9:e5:fa:98:
         aa:af:c8:55:62:f7:79:45:b2:3d:df:e6:06:18:45:07:40:97:
         9c:d0:79:4f:1d:f8:a4:6a:bb:80:88:a8:fe:2c:a8:d3:67:92:
         c3:4e:fa:52:75:2b:f6:aa:e9:bf:15:c9:6e:89:c3:48:98:90:
         12:81:21:34:02:05:14:1f:e4:79:fa:2f:55:4e:05:a9:86:76:
         6d:4d:c4:10:20:cc:e4:34:23:a7:ae:24:77:02:26:d8:be:93:
         e7:00:af:c0:82:c9:51:c1:64:b6:de:b6:1c:e2:90:89:aa:28:
         13:85:c0:5e:b1:90:71:d7:9c:73:d3:f5:8b:bc:f5:51:e0:55:
         b7:6f:53:13:32:0e:09:bf:41:fa:06:58:2d:2a:db:69:b6:b1:
         e2:75:55:49:25:ee:48:a3:a3:71:cc:eb:ad:38:86:22:22:b6:
         fd:0f:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:45 2026 by rpki-client