Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7AA94F3CE03811EFAC3C5652C4F9AE02.roa
File:                     7AA94F3CE03811EFAC3C5652C4F9AE02.roa (raw, json)
Hash identifier:          Xwopv44IWtrA47h99nFS1HcICRmL98rRNkBLnVkufOs=
Subject key identifier:   40:D3:8B:72:17:9F:13:71:6C:0D:F5:5F:71:C1:B3:89:44:EA:09:FB
Certificate issuer:       /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial:       0451
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7AA94F3CE03811EFAC3C5652C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:31:42 +0000
ROA not before:           Sun 15 Feb 2026 00:21:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141431
IP address blocks:        103.159.78.0/24 maxlen: 24
                          103.159.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
                          rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105 (0x451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
        Validity
            Not Before: Feb 15 00:21:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5832e-7bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:f9:3a:2f:2c:88:a2:e1:1b:01:9b:47:70:
                    cc:8b:29:4b:09:e1:ac:00:4e:c3:6e:c8:e0:82:f5:
                    52:ba:09:d7:76:16:58:ed:b1:68:cf:19:08:ff:97:
                    e6:87:d2:c3:c4:a0:01:df:a5:44:0c:c9:d3:c9:88:
                    ea:e1:49:f7:7a:bc:a8:1f:50:43:d5:ba:e0:36:f7:
                    c5:47:e5:11:75:2a:50:7a:0f:e7:1b:f6:a8:b9:77:
                    cd:f6:e2:7e:0b:93:4d:1c:f9:8b:80:48:4e:a7:4c:
                    28:81:b5:c8:ba:59:b1:85:26:81:3c:14:8c:c9:ee:
                    70:1c:51:c8:c6:20:61:25:48:81:a4:bb:e4:cd:77:
                    11:66:20:c2:95:cd:44:e7:31:b7:f9:52:a3:ba:8f:
                    77:55:da:16:57:49:7e:f5:54:c0:c0:91:1d:ef:71:
                    61:e2:28:35:61:96:67:37:29:dd:52:c4:f5:41:66:
                    2c:21:aa:14:36:7e:24:c3:4f:1e:6b:d9:96:f4:64:
                    c3:c7:4d:df:d0:ae:59:b0:cf:5b:9c:7f:46:d4:19:
                    fe:18:47:91:2b:55:80:73:45:d1:b6:5f:1d:a3:59:
                    7a:cb:e3:58:2d:92:c6:df:7d:17:68:3a:0f:03:d3:
                    e6:79:5a:75:af:b0:67:64:22:d7:2b:72:f9:3b:2e:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D3:8B:72:17:9F:13:71:6C:0D:F5:5F:71:C1:B3:89:44:EA:09:FB
            X509v3 Authority Key Identifier:
                keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7AA94F3CE03811EFAC3C5652C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:cf:fa:6e:f5:94:2c:11:27:be:bd:06:57:a1:34:c8:28:b2:
         ab:23:53:14:31:26:d0:8f:ad:c7:5d:c2:8a:00:10:c5:8f:52:
         00:19:87:90:17:06:5e:ae:95:2b:44:82:df:c5:1e:5c:db:11:
         3b:3a:c5:da:c3:16:2c:25:bf:76:cb:bf:7b:4a:1a:75:cf:3f:
         95:73:73:3f:53:37:12:45:2c:f3:28:c4:09:55:2f:07:3f:28:
         ad:9a:dc:04:43:70:26:8f:54:2c:44:5f:ac:54:9f:2d:79:f7:
         53:b5:9e:19:c2:65:18:59:6e:30:e9:6d:98:75:47:2c:32:aa:
         47:1a:c9:15:de:60:ec:66:c5:a3:ee:46:d8:ac:2b:0f:54:ba:
         13:86:71:73:39:88:bc:71:71:21:9c:75:c6:ee:db:ec:b9:29:
         db:40:6b:4d:85:39:50:a7:df:e0:82:68:03:2d:94:a5:62:9e:
         6b:30:7c:0d:9d:9b:d3:c1:fa:29:0d:6c:9d:cc:50:29:1b:62:
         6f:52:6a:26:85:27:e5:7f:67:88:46:95:f7:c2:88:21:21:c0:
         bf:51:62:12:af:70:ce:fd:71:2a:07:d9:e5:3b:a3:95:70:8c:
         19:5c:0e:e5:40:a0:9f:15:82:a0:9f:15:35:6c:cc:14:e1:05:
         07:9e:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:21 2026 by rpki-client