Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BBA03BF86DD311F09E550D38C4F9AE02.roa
File:                     BBA03BF86DD311F09E550D38C4F9AE02.roa (raw, json)
Hash identifier:          bzANKnbyeKHQq6L/luZgy8RCyHrFKy2/gJCau298tQs=
Subject key identifier:   A1:CD:DA:3A:63:8B:2B:18:29:3B:AE:82:EE:D1:CF:5C:92:25:CC:3A
Certificate issuer:       /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial:       04AC
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BBA03BF86DD311F09E550D38C4F9AE02.roa
Signing time:             Wed 11 Mar 2026 00:32:00 +0000
ROA not before:           Wed 11 Mar 2026 00:32:00 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134562
IP address blocks:        103.180.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
                          rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
        Validity
            Not Before: Mar 11 00:32:00 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b0b7ff-f491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:f2:3c:a2:3b:ed:9c:4c:ab:8a:59:11:85:
                    2f:d9:be:ee:a6:76:2b:fd:f1:b0:f6:08:6e:5e:cf:
                    fb:66:43:26:34:a1:d4:a2:7e:f8:91:c8:e2:fb:ee:
                    53:66:56:a6:87:e6:b9:4b:4e:04:6e:a8:0a:37:6e:
                    c8:67:4d:c3:93:c8:7b:c9:d3:de:1c:ab:e4:61:e9:
                    e6:8e:b7:5e:7b:e0:6d:1f:68:32:e7:07:50:72:94:
                    d7:74:7a:2f:c4:bb:d6:08:ae:10:d0:11:e8:63:00:
                    5a:b5:0c:26:30:57:46:d1:d1:be:b8:ed:0d:72:2a:
                    76:c8:96:9c:df:e3:e6:67:6a:a9:1b:3c:45:d5:41:
                    57:42:09:d9:f6:95:eb:e2:57:49:ee:44:e0:18:dc:
                    30:3b:98:ca:45:6d:a0:40:0f:a8:0c:be:06:6e:5b:
                    4e:99:61:07:10:d6:d8:0d:c8:d8:60:eb:ed:2f:38:
                    e7:7e:3e:45:54:86:84:2b:52:cc:46:e8:aa:6b:85:
                    9c:aa:a5:c0:b1:2a:e1:71:39:ca:e7:58:1a:f5:82:
                    fd:a1:e4:17:c8:03:08:e9:fd:ef:1d:d3:5c:cf:37:
                    e6:e4:ee:c7:83:60:33:b1:c7:43:08:bc:bc:56:7b:
                    27:cf:24:02:01:9f:d5:35:eb:9e:0d:59:8e:64:29:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CD:DA:3A:63:8B:2B:18:29:3B:AE:82:EE:D1:CF:5C:92:25:CC:3A
            X509v3 Authority Key Identifier:
                keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BBA03BF86DD311F09E550D38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:d5:07:94:a6:71:a2:59:51:99:76:f4:4d:14:dc:3c:be:
         e2:a9:44:e6:07:5b:65:28:3d:b3:09:0d:8a:08:f1:cf:d6:49:
         99:29:d7:33:bb:f8:ea:b6:a4:49:36:39:b0:9a:f6:08:15:18:
         91:7c:04:3e:73:5a:c6:11:f3:08:b8:ac:57:7c:23:78:72:b7:
         cf:af:0b:f5:5d:f9:f8:8f:71:72:eb:9c:54:e8:7a:1e:ef:1d:
         da:41:76:be:c6:42:53:d4:cc:10:15:17:fe:d6:fe:a2:4e:31:
         d4:c3:9a:5b:7f:51:b2:21:02:86:6a:ed:11:1c:5a:0f:83:13:
         99:a9:0d:f5:57:b5:ef:8a:3d:5b:e8:c3:71:ee:9d:fb:19:b5:
         ec:15:2b:d4:04:a9:97:51:1e:cd:26:07:18:ff:ef:8c:e5:10:
         54:c7:83:9e:68:6d:7d:dd:43:c3:d1:21:ea:72:3d:24:f2:97:
         9a:78:20:cf:f7:1c:03:9f:e8:b1:b4:a3:c5:ac:e5:be:1d:9e:
         6c:cb:8f:04:1a:38:11:b6:67:cc:0b:95:a5:a7:04:9e:e1:ad:
         81:6a:f6:84:fe:e6:4c:35:b8:aa:63:f6:91:e9:e9:2b:04:d5:
         30:d4:30:4e:0d:77:43:aa:cf:6b:d2:e7:83:d0:06:81:27:38:
         1c:eb:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:48 2026 by rpki-client