Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/E506BE2CF03811EFAD4C2257C4F9AE02.roa
File:                     E506BE2CF03811EFAD4C2257C4F9AE02.roa (raw, json)
Hash identifier:          4BghnC9zlIFOkenQJ/GFUUF/OmlIg8plx0INfrm7Jrc=
Subject key identifier:   E6:AD:F4:D7:D9:22:E3:D9:39:A3:61:9B:A9:3E:9C:07:10:59:BC:42
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0214
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/E506BE2CF03811EFAD4C2257C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:55:38 +0000
ROA not before:           Thu 17 Jul 2025 04:40:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        103.115.17.0/24 maxlen: 24
                          103.115.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Jul 17 04:40:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a46f8a-4b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:da:44:72:2c:c9:b8:12:d9:7c:eb:16:b7:
                    44:82:78:f3:0f:1b:1a:22:e5:82:e1:9c:05:d9:dc:
                    fd:57:7a:a8:a8:4a:70:13:c3:a6:7a:81:36:dd:ef:
                    5a:30:50:c1:c4:48:1e:70:08:db:b4:67:2f:d3:55:
                    c7:9d:e0:1c:4a:31:5d:11:36:3e:1f:d2:ae:e1:95:
                    d9:2a:88:5b:30:00:fc:81:9b:89:f1:48:aa:2a:aa:
                    fd:7f:9f:2c:b8:72:d6:05:21:6e:a3:64:2a:f2:cf:
                    42:5c:40:26:8f:ea:a7:2b:0c:b1:a9:ef:70:ef:9c:
                    27:9b:63:b2:d1:9e:7f:a5:05:c8:70:4f:1d:03:63:
                    37:52:f2:c9:21:dd:03:01:12:55:5b:14:52:be:51:
                    8d:9c:ae:06:ae:3d:83:bd:26:8f:04:84:c7:63:89:
                    41:12:3d:07:25:f0:1b:0e:f5:b3:fc:dc:6c:8b:87:
                    ad:e7:4d:b5:38:17:a3:86:6e:06:65:2b:c9:1a:f4:
                    00:1b:ef:3e:c1:26:d0:c8:cd:45:3d:88:3f:d0:fe:
                    64:0a:4c:af:1c:e5:be:60:3c:cb:1a:fb:4e:b5:dd:
                    62:08:e0:7c:96:4c:59:19:5c:c9:d3:2d:9c:2b:d1:
                    ff:23:5c:5b:0c:ae:23:0b:e8:18:73:e3:8d:87:39:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AD:F4:D7:D9:22:E3:D9:39:A3:61:9B:A9:3E:9C:07:10:59:BC:42
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/E506BE2CF03811EFAD4C2257C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.17.0-103.115.18.255

    Signature Algorithm: sha256WithRSAEncryption
         a8:5a:a3:07:ee:5f:14:c8:9e:94:ae:ea:a4:71:db:19:4a:90:
         99:24:9c:1f:f7:14:e8:b8:08:85:35:5e:ae:ab:c6:15:34:2d:
         85:14:2c:73:84:c6:f6:84:5a:5b:db:19:35:13:17:9e:d8:f5:
         0d:d8:8c:37:ca:7a:94:c9:45:39:91:e9:6a:9d:36:f5:da:7a:
         07:05:74:e1:82:f7:6c:69:b1:a6:c1:71:16:c5:59:a6:3b:30:
         68:6e:a2:51:ea:c6:13:14:c8:91:ca:48:34:37:96:54:61:ee:
         2d:c6:a3:df:ee:14:3d:c5:e5:cb:a1:6b:52:d0:cf:bd:fd:d0:
         b2:e3:68:23:a5:a3:7f:75:ac:cb:cf:c5:03:40:66:38:2d:ff:
         69:3a:81:3e:f1:ab:e5:c8:28:48:48:b1:d1:f0:5d:f7:95:b3:
         06:3f:72:6c:8e:7f:ce:0c:54:93:ca:ec:55:46:71:24:f5:fc:
         9d:38:4b:52:b1:a6:d8:90:cb:90:78:c8:b0:4b:27:bc:98:4e:
         f8:a9:c3:00:d0:e9:38:ab:02:c2:e5:3b:84:03:48:7e:9e:7d:
         65:14:f7:7e:b4:eb:5a:e7:b8:02:c5:cd:c2:8d:05:31:48:0a:
         46:8e:ff:41:b0:0e:a7:75:22:e3:87:5c:e1:36:11:10:85:cf:
         1f:47:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:11 2026 by rpki-client