Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/1D59FA3EADF311E980380735C4F9AE02.roa
File:                     1D59FA3EADF311E980380735C4F9AE02.roa (raw, json)
Hash identifier:          0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=
Subject key identifier:   2A:A4:0E:3D:57:5C:C1:39:C8:15:BE:A6:A5:C0:95:4F:B8:9F:74:BF
Certificate issuer:       /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488
Certificate serial:       0F13
Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/1D59FA3EADF311E980380735C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:32:09 +0000
ROA not before:           Fri 02 Jan 2026 18:14:51 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     46844
IP address blocks:        103.15.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl
                          rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3859 (0xf13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488
        Validity
            Not Before: Jan  2 18:14:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a59f69-ab08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:44:91:9b:2a:b9:e2:16:87:0e:d5:fd:a0:
                    f7:57:7b:d9:51:1e:22:6b:0a:a4:26:1c:ef:49:36:
                    ff:9b:a2:1d:21:e3:42:9d:29:e4:f8:5f:f9:f0:90:
                    40:f8:04:d3:31:53:18:52:a4:35:91:b8:13:fb:06:
                    0e:97:e0:63:4e:3c:91:57:90:c3:18:ac:0f:e1:f1:
                    57:39:e7:1f:f8:b1:fb:d9:bd:6a:ca:28:85:c1:db:
                    0b:c5:ec:13:fd:16:a0:7b:ab:c4:e1:77:02:c3:78:
                    ed:b0:96:55:93:ee:42:13:48:24:9e:45:40:1b:51:
                    c3:a2:8c:a1:60:60:01:f3:00:36:45:38:dc:0b:17:
                    29:3b:b1:83:b3:d1:76:8c:53:2f:39:df:29:4e:09:
                    dd:51:b3:f1:4d:85:75:a2:32:ae:a2:0a:85:a3:cc:
                    c4:c1:5c:08:4b:bc:7c:ce:8e:39:ad:a6:0b:fd:95:
                    bf:cc:90:8e:2e:ba:e3:45:5e:10:08:f6:a1:55:a0:
                    84:11:86:0d:23:4e:12:a0:6d:a4:f7:85:92:87:37:
                    a9:d2:29:70:a1:aa:50:3d:af:89:79:0e:c6:3d:b0:
                    7c:15:e5:6c:fb:2b:0e:1f:a1:38:dd:50:5f:a1:12:
                    ff:d6:c2:ea:fc:06:51:35:29:1d:a6:fa:23:24:7e:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A4:0E:3D:57:5C:C1:39:C8:15:BE:A6:A5:C0:95:4F:B8:9F:74:BF
            X509v3 Authority Key Identifier:
                keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/1D59FA3EADF311E980380735C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:4e:98:18:fb:d1:af:3c:b7:7b:b3:09:f2:5f:79:4d:82:
         8c:0a:1d:08:3d:64:98:65:1b:06:42:37:14:c8:d6:c7:44:c5:
         4c:3c:a2:54:ae:0d:99:65:58:a8:90:8f:9c:2d:08:28:2d:4c:
         04:9b:3a:28:31:6c:89:ed:46:47:23:5b:29:a0:1a:06:c2:68:
         4b:98:7b:5a:77:18:e3:50:24:55:d9:44:7e:70:4f:c4:84:18:
         13:e3:5b:1d:71:e8:f4:0c:6d:ef:b5:53:6b:74:35:4b:44:92:
         42:f8:0c:80:b1:28:50:38:54:ea:25:18:67:35:2d:17:a4:88:
         b3:4c:18:d0:42:de:ee:77:d4:c4:b5:94:6f:b3:ee:c3:d4:57:
         ce:c1:f5:87:18:11:9c:5e:fa:1b:40:f4:84:b1:2f:57:0f:7d:
         6a:15:62:07:ec:c6:19:c0:05:1b:8c:f2:88:59:d9:bd:ad:5f:
         ba:04:68:38:d1:ad:f6:0b:f4:f0:34:28:18:7b:5a:bf:38:35:
         59:12:3b:1b:10:61:3e:21:ad:51:f8:9a:c0:07:94:1a:f9:49:
         26:d8:43:56:fc:5a:63:46:f9:94:07:94:12:79:11:cb:67:98:
         d8:54:df:e9:4d:2f:c8:e7:fe:4a:b2:40:43:ec:e3:2c:4f:91:
         66:1c:35:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:07 2026 by rpki-client