Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/15532AC8F8FA11F0B26EB0DA6C6F56BC.roa
File:                     15532AC8F8FA11F0B26EB0DA6C6F56BC.roa (raw, json)
Hash identifier:          KP60cSZT/cebJKNTO1IyvebxjUTgwlWiViEMR5BlutU=
Subject key identifier:   53:3D:B2:5B:49:85:5C:FB:34:22:25:6E:43:DF:B3:A1:60:B4:59:55
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       0601
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/15532AC8F8FA11F0B26EB0DA6C6F56BC.roa
Signing time:             Thu 10 Sep 2026 23:44:44 +0000
ROA not before:           Thu 10 Sep 2026 23:44:44 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140228
IP address blocks:        103.169.158.0/23 maxlen: 23
                          103.169.158.0/24 maxlen: 24
                          103.169.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
                          rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
        Validity
            Not Before: Sep 10 23:44:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa340ec-b9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:0a:0c:18:26:b6:ca:18:32:a0:90:6e:4f:
                    ad:2b:ca:6f:5a:71:cb:a0:6e:25:8a:6e:14:a8:1c:
                    39:ab:6a:46:2b:6e:41:fe:a9:d4:a5:6f:98:df:fd:
                    60:a0:92:52:da:2a:db:15:bb:ff:21:8b:a5:78:f0:
                    00:6b:9f:ae:67:0b:f6:5e:43:d2:34:b3:f7:d1:15:
                    00:42:9f:a4:fd:f7:f7:6b:c4:8d:60:bf:84:2d:3f:
                    e8:fb:03:bc:d2:d8:63:6b:d8:f9:61:70:03:15:30:
                    2e:24:cb:91:08:b5:3d:80:57:5d:4e:a0:bc:64:bc:
                    8e:b5:25:59:89:74:16:d2:d6:fe:6f:e8:88:d7:f5:
                    93:79:4a:2b:4f:70:63:0f:c8:d2:ec:10:ff:46:f7:
                    10:e7:1d:ec:91:58:b6:35:5d:c5:9c:98:58:25:b1:
                    ab:7d:e1:f6:96:f7:da:bc:4f:97:e4:63:fc:8c:a3:
                    60:e2:b6:24:20:f6:fb:d9:32:c2:14:ac:af:c9:4c:
                    87:2d:29:52:b8:cb:f8:7c:0d:20:ce:a6:44:e6:12:
                    10:38:08:ba:02:17:88:2f:ab:a9:12:f0:04:1d:02:
                    04:16:c5:11:b0:2d:39:bf:41:84:53:b6:86:96:a0:
                    1c:a8:a2:74:3e:2e:63:6b:5f:66:de:19:47:d9:ff:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:B2:5B:49:85:5C:FB:34:22:25:6E:43:DF:B3:A1:60:B4:59:55
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/15532AC8F8FA11F0B26EB0DA6C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:5d:9f:4e:d8:8f:3a:02:2c:75:1c:37:9c:29:5b:45:d7:a1:
         9d:f4:0e:c6:d1:ee:f2:0a:1f:00:0d:a7:75:fa:cc:83:12:25:
         bb:af:f8:6b:13:2f:79:80:6a:67:6c:14:05:79:a4:ae:be:4a:
         3d:50:7c:50:4e:46:a8:09:06:61:5f:e7:dd:36:da:08:e9:ad:
         c2:64:d7:39:44:84:6c:65:89:fe:fc:8c:58:c6:7f:d7:76:f3:
         f6:4a:bc:9a:9e:11:55:91:d2:3e:37:73:8e:33:65:1f:bf:f0:
         b2:11:48:e2:c2:62:e3:f6:af:b6:7a:de:30:41:00:aa:6c:43:
         89:17:8a:19:82:ee:89:7a:cb:e4:2d:1d:ee:07:6d:84:32:96:
         5d:f8:27:1b:41:05:7f:47:79:ac:5d:00:00:5f:d3:46:bc:36:
         5b:ba:2a:d7:a3:ca:21:61:25:96:48:b4:43:b2:49:77:0e:9a:
         4b:14:2f:06:85:cf:40:af:d2:62:5b:28:18:9a:6e:d0:d3:6b:
         9e:26:ac:5a:b7:54:e4:d7:67:21:d5:a6:42:e3:da:e2:23:1b:
         2d:8e:b5:6e:10:76:65:6b:dc:d2:00:51:04:50:e2:df:22:7b:
         0b:0e:97:77:7b:99:a0:c9:f9:21:c3:f3:80:90:41:63:4e:c8:
         37:e5:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:52:07 2026 by rpki-client