Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/6953C1BE9B8011F0A7C4F875C4F9AE02.roa
File:                     6953C1BE9B8011F0A7C4F875C4F9AE02.roa (raw, json)
Hash identifier:          2Ylaa1cxfn111uv1EEm5qSvPBH6/kYKFX9/CiputfFM=
Subject key identifier:   C8:11:01:DC:8E:9B:CC:FF:9E:35:53:55:43:1D:8D:32:92:27:EE:2B
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0D61
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/6953C1BE9B8011F0A7C4F875C4F9AE02.roa
Signing time:             Mon 16 Mar 2026 18:23:28 +0000
ROA not before:           Mon 16 Mar 2026 18:23:28 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        103.127.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Mar 16 18:23:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69b84aa0-f13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:c2:20:9f:c9:a1:4d:c9:94:a3:fc:47:58:
                    c9:28:3d:07:b5:55:75:0d:aa:d7:1c:6f:99:1a:b3:
                    16:59:20:83:40:4d:74:d6:3c:54:86:3b:8b:b8:d1:
                    c0:54:4e:ad:71:44:0b:f0:8b:fc:2d:00:f8:c4:f3:
                    1f:65:4c:e1:cf:e0:9c:f6:7e:8f:81:f3:f9:e5:0e:
                    bd:ac:26:f3:4e:5b:3f:c6:d1:9e:e5:6b:c4:ea:e8:
                    c9:80:a0:f9:36:49:45:93:65:6b:61:3b:c3:23:09:
                    70:0e:9e:08:95:7f:40:0f:66:29:4e:1c:8b:08:a9:
                    ca:9e:48:47:54:56:3a:a2:c3:6d:9a:ac:9c:25:44:
                    29:c3:e9:f6:19:d5:ee:d8:e7:b1:54:a2:84:b1:27:
                    ee:db:62:7d:35:68:8b:c2:6b:98:44:3d:e0:45:59:
                    7d:24:98:43:ff:9c:a7:85:05:6f:38:1d:2c:c5:cc:
                    0e:a3:ed:3d:36:bf:9f:9c:c3:c3:95:42:b9:d3:f3:
                    ef:6e:e2:a9:81:25:3d:b8:1c:68:30:1f:1b:99:69:
                    49:71:57:fa:57:28:bb:10:22:e8:19:0c:58:c1:40:
                    3e:38:87:1c:27:7f:d0:39:65:56:05:3c:60:46:ea:
                    6d:1d:2d:c1:37:53:06:00:f3:ae:c1:fc:aa:f1:69:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:11:01:DC:8E:9B:CC:FF:9E:35:53:55:43:1D:8D:32:92:27:EE:2B
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/6953C1BE9B8011F0A7C4F875C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:b1:e0:9f:30:ae:7c:ca:39:b9:e8:52:fb:0a:85:7f:c9:
         c9:ac:d1:28:2d:0d:20:2e:c0:49:f3:05:84:2d:36:d9:10:11:
         1b:2d:d5:aa:9f:e6:41:ae:5d:6d:b0:56:f7:f6:20:48:9c:3b:
         15:96:ad:90:d1:55:c8:7a:52:42:ad:8a:dc:55:d9:4c:f4:34:
         83:5f:e6:bf:5e:ce:f5:e3:3a:9b:aa:42:e4:9c:88:15:47:ae:
         61:f7:43:12:2c:d3:a7:c7:01:e9:c8:bf:07:49:b0:a3:89:59:
         94:f0:88:db:10:27:3d:e6:33:7c:63:7a:94:d6:bc:f1:91:a9:
         a6:7c:b4:8e:2c:a7:ef:85:fd:2e:08:3b:ca:80:d2:d4:d4:49:
         5f:27:86:a0:4a:a4:ec:dc:5f:0c:cd:e4:3f:f2:86:98:05:68:
         6e:90:bd:7a:75:18:bf:62:50:a5:64:c6:1c:9c:e4:df:98:9d:
         82:88:3e:00:9b:4f:bc:5d:f3:70:55:39:87:18:a3:c4:c6:3f:
         88:e9:23:3f:46:db:c1:21:6a:0a:2b:38:d7:18:ab:e1:2b:8e:
         99:55:c1:a9:c1:06:6c:9f:f5:b8:88:49:bc:ed:79:e9:d3:32:
         b4:0d:12:05:72:5b:b4:9e:67:6b:3b:3d:98:ae:d3:8c:ce:87:
         66:21:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:28 2026 by rpki-client