Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa
File:                     6B9615FCD6E311EE94842842C4F9AE02.roa (raw, json)
Hash identifier:          u+QDJnt7Mnh/rwyXgRJ0Kw+8drLnsA9xJpkCviyiVSE=
Subject key identifier:   D5:20:B1:82:BF:50:2E:9A:B1:CC:E6:B9:E8:E5:3E:94:82:B1:4B:28
Certificate issuer:       /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial:       0254
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa
Signing time:             Thu 05 Mar 2026 18:23:03 +0000
ROA not before:           Thu 05 Mar 2026 18:23:03 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150324
IP address blocks:        103.12.78.0/24 maxlen: 24
                          103.12.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
                          rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
        Validity
            Not Before: Mar  5 18:23:03 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a9ca07-11a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:52:7c:6a:27:16:4e:92:ea:54:1f:af:1b:
                    d4:76:de:1e:f2:64:f1:24:8e:1c:41:c6:36:e5:1d:
                    70:90:c1:cd:cb:c3:06:29:a0:45:59:ca:46:04:30:
                    d7:4a:b5:19:03:18:b9:78:6a:a3:7b:d4:6b:e5:3f:
                    8a:3b:39:aa:b4:20:1c:1e:52:0a:ca:da:51:dd:69:
                    68:73:28:7d:49:0b:bd:7f:52:ba:3b:5b:69:cb:ea:
                    9b:c9:6b:58:77:47:eb:17:25:74:b1:4c:38:9d:d2:
                    fc:9e:c4:59:5b:d3:42:9e:e0:06:db:a4:39:09:38:
                    85:25:12:b5:2c:f8:77:5c:17:dc:b6:e3:fa:72:9f:
                    db:bd:76:a0:b1:53:bd:cf:a0:00:b6:e1:cc:cb:14:
                    7a:ed:80:40:48:84:12:d3:93:74:ec:8f:0e:e2:04:
                    20:fa:79:72:8e:69:39:b7:68:2e:0b:36:1e:7f:7d:
                    b5:8e:fc:81:a4:af:ec:54:52:6f:b8:44:a2:c6:ce:
                    c2:8f:44:6d:65:f1:0d:e7:62:07:5b:9c:62:6a:4f:
                    a7:92:2d:b0:dd:82:c6:e4:4d:4b:12:22:f1:1d:e3:
                    6a:d4:af:91:fa:d0:cb:55:39:60:85:45:d3:6f:41:
                    5d:78:5b:2c:25:d0:9f:c1:e3:8a:7f:96:5a:fa:95:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:20:B1:82:BF:50:2E:9A:B1:CC:E6:B9:E8:E5:3E:94:82:B1:4B:28
            X509v3 Authority Key Identifier:
                keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:46:8c:93:fb:41:d6:33:c8:5d:ca:a0:95:61:3d:c5:28:26:
         90:51:64:94:b3:d2:4d:10:80:0b:ee:47:1d:8c:e4:08:f9:9d:
         0b:27:88:c5:ca:09:23:30:14:b6:de:15:ac:05:2b:dd:a1:51:
         9b:65:a1:de:ec:d3:a2:dd:9d:ff:fb:cb:aa:7c:cb:c9:ad:d1:
         a0:08:a5:8d:cb:9a:84:0b:35:36:36:6d:6d:06:dc:48:22:55:
         40:42:c0:9e:8b:f0:44:c8:d9:c1:e6:6b:a0:b0:39:90:bc:fb:
         d4:eb:97:08:f5:75:41:8e:bc:08:78:7a:da:f0:fc:d6:1b:d1:
         2f:16:67:88:64:a9:48:e6:04:1d:84:e9:16:6d:3f:10:11:c3:
         7d:88:51:35:9e:00:1a:4d:5d:15:57:55:d9:69:d9:e5:51:5c:
         b4:68:aa:e3:59:e9:1f:19:4a:ed:e9:dd:5c:53:56:e6:7d:b5:
         65:02:cb:5d:ad:53:87:94:7d:73:d2:09:6b:2c:33:a2:8b:b7:
         a3:6d:90:55:26:b1:39:04:1a:92:92:3a:2a:12:d8:8d:66:81:
         17:6e:98:0f:8b:f7:5b:75:a0:2e:0b:e6:ea:19:e9:25:55:7a:
         bc:50:4e:2c:15:c4:8b:6a:c9:51:16:35:1f:1f:d1:b9:cf:e0:
         32:ed:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:19 2026 by rpki-client