Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa
File:                     03476D523FB011F097B5F864C4F9AE02.roa (raw, json)
Hash identifier:          JLfk2bHq40LXRfiCAU76/R7EVmU5CJeSwhKGGV4jIrE=
Subject key identifier:   DC:5E:B9:F1:1C:EE:01:E6:B2:37:F1:C5:84:74:E2:70:1A:93:38:BE
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0904
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:11:16 +0000
ROA not before:           Sat 04 Oct 2025 20:51:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153933
IP address blocks:        103.72.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Oct  4 20:51:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48144-e103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:c1:5e:45:fa:eb:42:03:9a:46:44:4e:42:
                    ce:c3:9f:df:f6:8a:6d:56:6a:83:e4:cc:37:11:f0:
                    29:ea:b1:27:76:eb:4c:24:91:e7:53:03:ad:ba:f3:
                    85:d5:64:39:b3:93:94:28:46:04:14:db:ff:00:ca:
                    04:61:8f:b7:76:d7:f6:48:48:43:a8:9c:4b:65:24:
                    50:a5:01:0c:2a:68:ea:b2:a1:75:e2:0b:1e:e4:ee:
                    8c:6a:68:cc:89:2f:be:d7:1a:2c:47:5d:eb:7e:5f:
                    c9:e0:21:a0:da:43:fe:f7:e5:90:03:f3:a8:30:6a:
                    86:c4:03:dc:53:44:82:8a:68:5c:ce:d4:19:9c:f4:
                    2a:b9:88:af:e4:a6:cb:c5:78:c0:6d:09:23:55:9c:
                    e9:04:a5:ac:5a:6e:fb:a0:3e:9e:9f:b9:0f:b5:3a:
                    8e:68:e0:05:57:26:92:c1:ef:c9:7c:60:09:b4:55:
                    25:d0:1b:64:5a:c0:de:1d:cd:d8:74:3a:9a:e7:2f:
                    28:b1:28:10:39:84:df:2a:d1:16:c0:f0:87:88:11:
                    61:5a:b8:24:59:36:49:9f:55:44:15:26:58:af:c6:
                    e7:e6:84:52:d0:7a:f2:61:19:b9:4d:f3:ad:f2:b5:
                    0d:7a:9f:e3:7f:d1:81:2c:a7:0d:a0:21:4d:e2:24:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:B9:F1:1C:EE:01:E6:B2:37:F1:C5:84:74:E2:70:1A:93:38:BE
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:25:4f:4d:04:35:ea:a8:fa:9d:c8:b2:a2:08:ba:21:e7:
         5d:43:83:16:0e:91:8f:56:48:74:48:14:49:d1:6b:77:a6:d8:
         37:e4:0e:63:ed:d3:96:82:98:9a:26:52:97:d7:60:6e:93:2f:
         9b:b8:91:b1:aa:fa:41:e7:23:3b:9b:68:7e:fc:a4:bd:99:56:
         e1:9e:9d:a7:cd:94:44:0f:fa:49:92:22:85:82:c9:ac:f4:42:
         98:02:ce:1d:52:36:e1:d6:80:20:a7:f9:66:ab:c3:ff:55:8e:
         95:04:12:92:a1:50:2d:3b:58:36:e9:74:44:4e:61:37:fe:f0:
         9c:4d:29:d9:65:16:c7:3d:f7:ab:f6:4f:b9:cc:4c:b0:d1:e4:
         51:7b:fe:e0:e5:4e:50:88:b3:df:ce:c2:ff:81:9f:34:3d:18:
         16:1b:28:fd:db:d8:49:f1:15:a7:d2:36:fe:8a:e5:20:e6:f8:
         40:50:31:6a:e6:92:ec:33:4e:fd:98:fa:2f:0f:68:a9:1e:ee:
         99:00:9a:4a:5c:4b:35:26:d1:99:e2:ad:29:13:a3:56:4d:77:
         31:f0:67:36:06:a2:06:b7:11:d8:bb:00:dc:b4:2d:52:9f:ed:
         94:02:49:1c:3b:53:0d:6a:2d:a3:ce:ae:fa:c0:9d:8a:9d:ff:
         a5:ce:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:49 2026 by rpki-client