Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/79C2D638E03811EFAC3C5652C4F9AE02.roa
File:                     79C2D638E03811EFAC3C5652C4F9AE02.roa (raw, json)
Hash identifier:          htWOUsGCluqo+bDLkY52m9kGHamjAwjskMqRyVdOAVI=
Subject key identifier:   33:FC:28:E7:BC:EB:C2:7F:8E:0D:FB:EC:B6:F4:DF:5A:FE:85:F8:65
Certificate issuer:       /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial:       0450
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/79C2D638E03811EFAC3C5652C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:31:41 +0000
ROA not before:           Sun 15 Feb 2026 00:21:04 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138655
IP address blocks:        103.159.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
                          rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
        Validity
            Not Before: Feb 15 00:21:04 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5832d-034a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:d9:39:7b:44:0c:d3:33:22:56:f3:6b:fb:
                    14:bb:cb:dc:76:c0:ad:7b:e0:0e:12:ae:45:94:9a:
                    aa:36:46:7c:17:74:d7:bf:24:b6:c9:fa:79:b5:02:
                    1e:92:af:db:74:8d:36:8f:c0:d3:45:b4:b0:34:d1:
                    bf:2f:86:78:06:4d:f9:9f:eb:4c:b3:8f:4f:27:45:
                    c0:4b:6c:40:21:c1:09:23:43:18:9b:1a:d7:ee:e0:
                    f5:bf:b5:47:47:1b:fd:10:19:f5:f6:78:2a:34:62:
                    a2:ce:2b:10:5e:b0:da:0b:8a:db:b6:d1:98:8a:93:
                    3b:d4:f9:6e:92:3a:d2:73:43:84:8c:82:80:39:89:
                    30:c1:8d:27:81:9a:98:c6:8f:3f:44:3e:2d:0f:52:
                    b2:49:eb:8a:06:7b:8e:e1:4a:6d:a9:da:3d:fd:e4:
                    32:9f:9f:0c:10:97:46:fa:8c:22:5f:ac:a4:4b:a8:
                    6b:95:82:24:53:33:0c:48:cc:fb:a3:7f:d3:d5:8a:
                    e9:d0:dc:f7:30:12:61:b7:66:1c:0d:ff:51:74:24:
                    a2:f8:7f:00:8a:c0:2c:e7:43:d4:18:71:05:73:a8:
                    56:39:2c:bf:bb:da:fd:e1:e9:e7:35:96:36:40:08:
                    48:65:9c:1b:ac:65:30:c8:8d:4f:ae:b1:fc:ec:e0:
                    bc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:28:E7:BC:EB:C2:7F:8E:0D:FB:EC:B6:F4:DF:5A:FE:85:F8:65
            X509v3 Authority Key Identifier:
                keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/79C2D638E03811EFAC3C5652C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ce:30:0b:8e:77:39:3d:8f:58:90:32:db:ec:0b:a1:5f:87:
         5c:a8:5b:20:46:07:a0:14:ec:2d:90:e5:47:2b:ea:cd:f4:ce:
         78:6e:fe:c8:8a:e6:d6:91:0c:ed:fc:64:1c:c5:bf:a7:eb:64:
         b9:71:82:52:b6:eb:f8:e8:d0:5e:cc:89:e7:80:bc:ca:de:a8:
         c8:25:97:56:17:3b:81:3d:b6:b1:95:c2:48:44:e3:66:ca:44:
         d2:2f:1d:c0:0c:5e:f1:d0:a0:ed:b8:f8:35:dd:f5:31:91:80:
         fd:36:e0:80:d2:54:87:73:f7:a0:5d:30:84:7c:cb:57:29:1d:
         81:c6:3a:79:0c:13:12:e4:59:4f:a1:60:33:18:18:59:04:4e:
         b3:76:8c:04:0b:dc:d1:3d:00:72:c5:ec:77:37:db:53:a1:07:
         83:05:ce:23:75:56:59:9f:75:3e:25:6c:66:c3:59:e4:2e:1a:
         44:22:a2:23:27:a4:80:46:f5:c0:d6:03:d0:85:8a:9c:40:a4:
         9c:2d:6e:b2:29:40:b2:1d:b9:3a:12:53:4a:83:61:84:2a:ca:
         11:03:fb:37:f2:46:a7:d8:1e:99:70:a6:3e:6c:4b:ad:59:ee:
         c2:99:a2:b4:d0:83:f5:fc:43:6c:82:15:72:e9:a3:41:5a:0b:
         c0:f7:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:26 2026 by rpki-client