Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa
File:                     87BCB892503311EB85660C6AC4F9AE02.roa (raw, json)
Hash identifier:          re+Eo5+YZdObI/jNHewYJ8D7wYa7WolTQ6M2hkhxaRM=
Subject key identifier:   F7:36:3B:A3:23:77:CD:5A:98:2B:59:14:F1:0B:A0:BB:E8:3D:65:9F
Certificate issuer:       /CN=A911018B/serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
Certificate serial:       07BB
Authority key identifier: 15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:10:13 +0000
ROA not before:           Sat 20 Dec 2025 21:18:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141443
IP address blocks:        103.159.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl
                          rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911018B, serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
        Validity
            Not Before: Dec 20 21:18:34 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a448c5-6c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:b1:12:cc:e0:0d:d6:9c:ba:af:9f:9f:46:
                    93:5e:04:1b:21:57:25:20:ff:2e:5a:e4:80:95:b9:
                    48:02:7d:d5:18:5b:95:47:f0:ae:69:61:40:8b:19:
                    a3:54:9f:f9:44:b2:da:76:1a:be:ac:ff:cd:12:b1:
                    cd:fd:dd:5e:ed:7f:8e:f7:e3:e4:b2:a5:18:9f:3c:
                    63:88:70:2d:b1:db:c8:e1:ff:39:e1:89:55:c3:c7:
                    f7:74:62:39:e1:23:fd:28:53:4c:98:03:b9:0b:bc:
                    99:44:5b:88:27:d4:0b:8f:16:c5:21:d5:52:43:ea:
                    91:9d:08:01:33:d6:17:52:86:f1:a1:f7:05:cf:3d:
                    73:d7:ae:ac:42:8c:0a:ac:2f:06:ad:0a:a9:3e:92:
                    4a:4a:cf:ac:7b:1a:cf:ce:c0:ef:e9:64:84:a7:c0:
                    83:cc:89:f7:9e:4c:9b:0b:2e:fb:69:3f:6f:09:4a:
                    60:1d:09:dc:4e:f9:31:d4:d4:74:0d:a1:90:c3:f6:
                    67:57:b5:9b:93:5f:8c:49:c6:12:78:e1:da:38:e3:
                    8a:70:91:ca:5c:05:b3:6e:7e:da:8d:55:11:ff:39:
                    1e:0d:92:d7:ac:b3:dd:7a:72:7e:f7:06:c6:df:7f:
                    a1:85:3c:96:ee:53:ad:23:85:92:eb:76:72:16:25:
                    8c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:3B:A3:23:77:CD:5A:98:2B:59:14:F1:0B:A0:BB:E8:3D:65:9F
            X509v3 Authority Key Identifier:
                keyid:15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:dc:d4:47:96:92:fe:9d:cf:e7:87:81:b5:29:ba:a9:d5:
         ce:4a:09:16:3c:c6:bb:ad:e3:1c:5a:d6:9a:ec:3b:ed:1b:c5:
         d4:53:2f:a0:99:75:e4:94:2e:75:65:ee:e2:85:5a:77:e7:5b:
         b4:cc:80:2e:ac:8c:e2:da:4d:d3:3e:1c:79:c3:41:9c:fa:31:
         2d:33:19:51:1d:90:5b:42:63:e7:42:43:6c:17:2a:3a:9e:98:
         01:0d:a4:6a:07:3c:b9:0c:e5:a3:e8:16:b1:ad:33:1e:c5:64:
         f7:be:d3:92:9f:52:8b:6f:56:4f:56:37:37:ed:e3:37:d7:d8:
         79:b1:e3:30:c5:0e:9f:ef:d5:8e:cd:50:53:a0:22:c8:95:7e:
         5b:33:1b:bb:d5:f7:38:08:b5:bc:14:26:32:a1:f9:90:e0:58:
         39:34:b0:ad:91:54:ea:f2:4c:00:12:84:f6:37:ce:2d:f0:6e:
         74:21:85:22:bb:7d:49:b1:d2:71:af:9b:0a:aa:5f:22:6e:9f:
         60:ac:ca:08:fe:ff:15:d8:39:4e:0e:30:aa:2c:b7:6f:cd:d7:
         29:63:a9:78:f1:f3:f6:b4:d2:58:3d:d3:79:ee:9a:fe:c2:34:
         74:06:c7:66:21:92:d7:a9:be:e7:94:b2:72:a2:5c:63:2e:de:
         db:c1:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:30 2026 by rpki-client