Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
File:                     026E7E4EA4BE11EA873A5A41C4F9AE02.roa (raw, json)
Hash identifier:          vhdqqkcNqmMd48JT0EbRdWraEL2WjKdJfgJwZYRmNdc=
Subject key identifier:   EB:EB:F5:0B:9A:9E:EB:C2:2E:BD:1D:25:CA:D2:96:CA:3C:8C:15:00
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       09A7
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:32:44 +0000
ROA not before:           Wed 04 Jun 2025 20:46:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139605
IP address blocks:        103.151.204.0/23 maxlen: 23
                          103.151.204.0/24 maxlen: 24
                          103.151.205.0/24 maxlen: 24
                          2001:df3:d780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: Jun  4 20:46:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a407bc-81ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:b6:66:eb:0d:5a:e8:12:56:57:ee:7b:52:
                    25:da:c0:d0:ab:76:1c:3f:00:9d:d3:79:13:04:63:
                    db:56:fb:2e:90:b7:60:14:f2:d0:1e:8b:d1:af:40:
                    51:83:fa:64:36:b5:57:0b:cd:fd:7c:a9:f3:0a:78:
                    e5:6e:2e:08:6e:cc:a8:07:de:ce:d2:2c:bd:e9:90:
                    7e:38:2a:4c:c6:12:44:7e:18:6a:10:96:8c:ee:e3:
                    ca:51:80:76:43:db:c4:02:1b:76:36:3d:8a:8b:10:
                    31:85:5e:7e:83:83:0b:e8:45:24:c9:5a:cb:f5:01:
                    e0:23:bd:6d:9c:fc:d4:46:b3:ec:f0:bd:c0:b4:86:
                    91:cc:9c:c9:0a:39:e3:28:c4:39:48:51:0a:e6:7f:
                    c7:bb:cb:0c:74:1d:a8:70:11:fc:53:42:19:41:22:
                    5d:9f:1c:44:18:40:90:13:e2:6a:b2:51:6b:2e:07:
                    f3:43:aa:f6:b3:ea:4e:ee:00:a4:72:03:4d:50:c1:
                    a1:4f:23:28:d0:4d:06:87:bd:f2:fe:84:b8:5b:a3:
                    e2:23:21:01:c2:9d:c3:67:f4:c0:cf:0d:76:01:69:
                    e7:09:ef:8b:03:d9:4f:6f:f7:04:2e:c4:76:aa:75:
                    67:af:3b:92:13:8f:45:4e:e6:5b:e5:a5:74:43:cd:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:F5:0B:9A:9E:EB:C2:2E:BD:1D:25:CA:D2:96:CA:3C:8C:15:00
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.204.0/23
                IPv6:
                  2001:df3:d780::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:e2:f6:f3:6c:79:ed:a1:92:4c:cc:6f:01:20:18:4a:fe:
         91:27:e2:e8:92:8b:4e:c5:32:fa:d6:4b:1d:6b:67:54:5b:ed:
         21:55:ef:c1:8f:0a:ea:55:b6:c7:73:e9:2a:41:01:9a:c2:72:
         25:51:4c:83:11:08:4a:06:c4:82:cd:3a:00:4f:a3:f4:08:86:
         d5:aa:d4:40:e8:ab:29:96:d2:98:84:1c:17:bf:60:8b:b3:1e:
         36:4a:d2:fe:dc:53:77:5c:dd:5e:f3:c8:00:b3:ca:a9:04:8c:
         21:85:14:fc:53:64:7d:07:ef:21:4f:91:bb:4a:ac:90:dd:ae:
         52:b0:35:92:7c:c8:6c:b5:39:28:15:44:32:1d:dc:4b:9f:a0:
         22:25:79:b3:5d:bf:c7:f1:7b:8e:3e:a0:d0:2d:50:ac:73:6a:
         9c:37:c8:ea:d5:94:b5:d5:f5:ec:35:1f:5c:56:b4:a3:ae:65:
         01:75:88:f9:20:df:91:d5:5d:76:28:20:cd:ba:08:f0:af:77:
         0f:bb:7e:d2:dd:ea:f3:0d:a5:ad:5d:e9:c8:dc:72:01:de:28:
         3d:85:43:ec:73:6a:18:8e:d8:56:a7:2b:f9:63:9a:62:8b:77:
         88:9e:3f:03:f8:36:a0:4d:90:70:f9:fb:e4:6f:7b:3c:a8:31:
         96:6d:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:11 2026 by rpki-client