Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa
File:                     87448EFE3D1D11F0A469B051C4F9AE02.roa (raw, json)
Hash identifier:          NHONuIojHT76IX0bYxe8zX1c9bhu4D6lCDnVGLlHKCE=
Subject key identifier:   6B:4C:83:7E:AB:40:F8:AB:B1:32:45:86:81:FA:84:49:FB:95:1E:3C
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0905
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:11:17 +0000
ROA not before:           Sat 04 Oct 2025 20:51:34 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     44259
IP address blocks:        103.72.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2309 (0x905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Oct  4 20:51:34 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48145-7784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:60:32:35:b4:5a:43:8b:97:57:ea:7a:28:
                    a6:7e:90:5f:0d:3b:27:a0:a0:7c:09:2d:3f:1c:06:
                    f8:1d:12:b6:4e:d8:0b:6f:98:85:f6:4c:5a:28:36:
                    c4:c4:50:df:8a:26:fa:02:93:44:3f:b4:86:93:fe:
                    9d:d7:21:6e:83:de:b5:5a:e9:af:af:5a:a1:f4:7e:
                    80:e9:a8:a6:a1:ed:de:44:01:f8:40:57:38:15:cf:
                    60:f2:9d:a0:e4:b1:e7:16:b2:d9:cc:70:11:fd:80:
                    07:59:cf:64:aa:a8:ef:d9:f4:e5:38:30:23:94:bb:
                    13:26:e3:1b:fd:ea:cb:0e:1c:a3:c9:ab:d9:7e:0a:
                    2b:a9:5c:7c:b0:48:93:d3:46:b9:77:ea:50:35:7f:
                    0f:4b:ff:14:cc:ba:1b:bb:a4:49:c3:a0:66:a1:c2:
                    08:2d:4f:e8:0a:fe:ae:dc:bd:5d:b8:5c:74:0c:f7:
                    43:5b:f6:7d:c1:68:d6:7b:94:1a:66:32:34:03:d5:
                    e4:7c:08:d1:30:18:1d:54:c5:b8:45:34:e8:d3:57:
                    e4:ca:d5:1c:71:a7:7c:b1:ba:e3:b6:e1:1e:ab:db:
                    f2:ae:c4:38:48:60:5a:c4:8f:5f:f3:99:6e:78:13:
                    6a:b0:5b:24:f7:c2:a0:f1:ec:f7:e0:69:18:f2:ae:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:83:7E:AB:40:F8:AB:B1:32:45:86:81:FA:84:49:FB:95:1E:3C
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:f6:c7:b6:f1:a6:41:98:71:b9:0e:44:79:c7:61:c4:4f:
         88:e2:3a:8f:18:27:db:6b:61:d8:fb:22:c5:81:32:5c:fc:b1:
         aa:60:79:68:c2:00:e8:89:e8:ff:e9:6c:57:42:ae:c1:02:ba:
         f7:eb:84:86:9b:7c:77:ba:c9:a7:2e:c7:2d:9f:a0:d6:9e:28:
         2c:de:1e:0a:19:b7:b0:57:0e:c5:ee:58:bd:d4:d4:e0:15:0b:
         c9:6a:c4:04:1f:af:e8:e4:0c:0d:b5:ab:56:51:b6:13:06:27:
         fe:df:03:50:bc:b3:cb:71:3a:1a:97:6e:c5:60:d1:e7:fd:7b:
         5c:e8:08:8a:aa:41:15:6f:49:61:97:da:de:37:35:f4:02:94:
         23:4a:06:b6:1d:df:e0:ec:eb:04:e0:e0:96:cf:b1:04:1b:8b:
         e4:74:02:17:6d:cf:12:e8:c3:8b:ba:f8:89:6d:2e:68:9f:f0:
         fe:0c:58:32:03:8e:b7:05:79:2b:05:93:98:f7:0b:cf:3a:d9:
         9b:10:2a:85:ab:3d:82:92:9a:f9:1a:03:d7:2a:8f:50:71:d7:
         8e:ec:93:1e:6d:85:10:3d:15:c2:3e:d9:03:39:fa:93:02:e4:
         95:6a:3a:fd:6c:b6:a3:5f:8a:dc:db:be:39:88:50:eb:a2:25:
         ac:aa:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:54 2026 by rpki-client