Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/D0A73A449B8511F09D2ADB37C4F9AE02.roa
File:                     D0A73A449B8511F09D2ADB37C4F9AE02.roa (raw, json)
Hash identifier:          pmW8CBmSbsF3xh527LFyCzBSraPvHZd6UloBEkXAAb4=
Subject key identifier:   F8:47:B0:95:E4:D7:E6:D8:47:44:A1:FC:81:B6:DA:7C:ED:41:76:98
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0D60
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/D0A73A449B8511F09D2ADB37C4F9AE02.roa
Signing time:             Mon 16 Mar 2026 18:23:26 +0000
ROA not before:           Mon 16 Mar 2026 18:23:26 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135341
IP address blocks:        103.127.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3424 (0xd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Mar 16 18:23:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69b84a9e-d911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:37:00:7c:18:c8:a9:ce:38:64:88:d0:b9:
                    ca:dc:82:69:22:93:1d:19:3d:96:7a:f4:c7:a7:a5:
                    71:0b:e9:c4:bc:3f:03:da:d3:c3:15:60:41:dd:6a:
                    f0:4e:4e:a4:81:51:db:4b:65:5d:27:96:20:16:26:
                    e9:6d:18:6e:c0:51:62:cc:20:c2:76:a1:59:45:a3:
                    05:23:18:e9:88:24:b0:47:8a:d0:af:4d:68:ca:7e:
                    7c:8c:f0:0f:d6:77:b4:ff:40:4a:e4:35:be:18:94:
                    b2:67:67:a7:97:75:66:d8:14:b4:01:b3:1b:44:e4:
                    20:da:3c:4d:eb:75:30:34:e6:d7:49:c3:36:f3:7e:
                    a5:ed:0c:32:8c:6e:a6:92:e9:50:68:b0:93:ba:46:
                    75:9a:3b:57:09:e9:f2:9b:49:d7:d8:98:b9:c7:fb:
                    fc:28:60:df:03:a1:fa:55:b2:88:1d:d5:da:2d:ae:
                    ae:ee:02:78:f4:90:20:b9:bd:d6:56:a1:d0:3c:be:
                    76:c5:83:f8:e5:97:30:04:9f:44:b0:2c:23:36:e7:
                    b5:70:cb:a1:e1:68:25:c2:92:d9:69:da:fe:ed:fb:
                    21:98:9d:c3:a3:12:49:80:d9:da:f3:36:80:15:c3:
                    3f:42:b5:60:f1:df:98:e3:c3:77:79:65:f0:45:3e:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:47:B0:95:E4:D7:E6:D8:47:44:A1:FC:81:B6:DA:7C:ED:41:76:98
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/D0A73A449B8511F09D2ADB37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:43:f3:e2:0f:cf:0a:a0:44:8a:61:ad:d5:c6:5f:c4:e7:20:
         c6:da:a1:4e:fc:5a:6e:f6:4b:76:d1:3b:f1:c7:6e:20:19:13:
         24:d1:0a:fe:a6:c9:3f:30:5c:55:96:7e:a4:2f:62:8b:72:6e:
         fd:73:44:0e:ef:0d:0f:52:0c:67:8b:ad:16:1c:82:cb:90:e6:
         37:e2:1c:af:b8:93:88:8e:78:9e:0c:18:f5:60:10:99:2f:3d:
         3c:7b:da:64:c3:6a:1b:bf:50:a0:db:c8:b4:24:2b:8e:c8:12:
         c4:db:a8:78:7f:86:03:e3:d7:a4:95:05:1d:cd:4e:6b:3f:30:
         9b:28:62:51:ef:7c:9d:14:53:b2:cd:5b:63:05:da:df:fa:f2:
         dd:57:30:ff:67:63:88:73:38:9e:0e:40:32:a2:73:45:7a:a7:
         39:ce:6a:e5:7f:42:0f:7a:08:f1:b2:4b:ad:d1:77:32:73:f2:
         53:d4:aa:a6:ee:8e:94:d7:19:c9:b1:3a:d3:f8:72:64:57:f8:
         6c:b6:a1:b4:fd:23:39:df:ac:d9:59:75:f8:6c:22:26:07:f0:
         48:fa:33:49:a6:b7:b9:3c:ab:b1:03:70:59:3f:8a:82:68:41:
         25:c6:11:ba:c3:e1:81:e5:c0:67:6d:b4:e3:9f:73:76:6c:47:
         4a:13:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:53 2026 by rpki-client