Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/8415F4AA928511EE8AE43D75C4F9AE02.roa
File:                     8415F4AA928511EE8AE43D75C4F9AE02.roa (raw, json)
Hash identifier:          YMH/2sGF2Gp98kUhlKPwS2v2VuTCl17HNRsaxRsG690=
Subject key identifier:   BD:8A:D8:6D:FE:C2:FB:7D:16:44:F3:6B:DF:40:93:39:22:2D:5D:34
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       01B9
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/8415F4AA928511EE8AE43D75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:19:49 +0000
ROA not before:           Tue 23 Dec 2025 03:23:49 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138469
IP address blocks:        103.126.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Dec 23 03:23:49 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a45915-a0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9b:46:e6:69:28:fa:42:b6:a7:23:86:c4:c3:
                    1e:4a:3f:e1:72:c9:85:0e:be:90:43:d0:76:98:21:
                    d0:ff:be:48:9f:ed:e4:0e:58:51:58:6b:57:8c:39:
                    07:c4:3a:ff:f4:55:f2:2a:da:95:1e:d0:68:c6:b0:
                    3f:b0:8e:61:cb:78:25:c2:ad:f6:1d:c1:3d:14:23:
                    27:57:5e:78:d8:af:94:35:60:e2:e4:31:5f:6e:92:
                    80:f0:a3:20:6b:c7:80:36:8c:fb:25:41:eb:52:e3:
                    8c:48:54:e0:4d:8f:79:e9:61:25:ed:b5:50:91:df:
                    cc:cc:f9:bd:c9:d8:2e:f7:2a:ff:e5:60:7a:73:35:
                    a4:c3:e0:68:fe:75:d3:ee:a5:7d:6c:fd:e8:72:29:
                    51:b5:e7:07:d5:bd:0c:fd:eb:e9:73:e1:93:82:0e:
                    30:67:36:e2:b0:5a:8d:c8:ba:11:c1:62:8d:0a:c1:
                    41:53:2e:fa:85:86:2e:76:4c:b2:89:5e:ce:c5:cc:
                    8c:c4:bc:f5:fc:9d:25:a3:a2:f1:9a:f5:0b:c9:e5:
                    7b:95:5c:25:ad:e5:8d:a9:b8:fc:cd:13:57:e3:4c:
                    1e:bc:5f:70:ae:25:c2:3a:26:9f:96:d4:31:1d:f7:
                    25:22:9b:a7:76:fb:5d:41:0f:87:25:07:66:30:f8:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8A:D8:6D:FE:C2:FB:7D:16:44:F3:6B:DF:40:93:39:22:2D:5D:34
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/8415F4AA928511EE8AE43D75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:57:87:28:df:e3:99:db:18:dc:c3:1a:b8:97:98:f5:f8:f9:
         aa:6f:70:93:72:c3:68:22:1a:72:27:34:86:f9:48:b3:cb:e6:
         f3:34:d4:55:9e:df:cd:51:1d:3a:a2:c4:80:e3:ca:9a:28:46:
         c7:df:ee:6b:78:19:d1:e3:e3:35:68:5b:c2:a9:95:18:a6:72:
         68:b3:53:0f:06:7f:b0:25:0b:4a:b1:59:55:81:03:62:96:f7:
         02:c0:b8:89:bb:d7:c5:77:b1:61:5f:48:c4:5d:d7:8a:12:d6:
         2d:66:b9:93:c1:e2:30:ad:43:30:80:2c:78:00:45:f4:cb:d3:
         09:e1:1a:0d:da:24:14:88:46:89:d8:9f:bb:b9:66:f3:0d:2c:
         bf:cf:89:49:22:6d:e1:98:88:f1:4d:d0:ff:ce:6d:42:97:75:
         bc:d2:0f:43:7a:97:50:de:f1:a6:d2:ab:d2:31:fe:38:5f:3f:
         7b:0b:3c:25:ab:91:fe:79:30:c7:94:35:26:92:05:d7:f2:d0:
         55:26:80:f6:d5:68:ed:81:60:2e:b8:69:b1:0e:bb:d8:be:86:
         4b:f5:67:a9:53:72:08:68:fc:1d:94:d1:ec:fb:d1:ad:ef:62:
         94:1a:7f:37:e8:d0:44:15:c8:10:b1:53:c4:88:0e:93:a9:d8:
         1a:05:3b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:51 2026 by rpki-client