Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/9F155A86125111F1BDB1E8192A3D8C67.roa
File:                     9F155A86125111F1BDB1E8192A3D8C67.roa (raw, json)
Hash identifier:          pRika4Tu0KmadmyWesTU8YrrTwZ2/MD++nUBvNTu4zA=
Subject key identifier:   EF:F7:09:09:9D:12:6E:75:9B:3C:9A:E5:58:A7:88:9B:AA:C3:43:EF
Certificate issuer:       /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial:       09D9
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/9F155A86125111F1BDB1E8192A3D8C67.roa
Signing time:             Wed 25 Feb 2026 13:55:20 +0000
ROA not before:           Wed 25 Feb 2026 13:55:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.151.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
                          rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2521 (0x9d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
        Validity
            Not Before: Feb 25 13:55:20 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=699eff47-c93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:08:8e:2d:32:cf:33:87:8f:a0:66:81:52:
                    57:0d:f5:d2:9f:f2:05:05:09:d4:93:46:3a:ee:63:
                    fb:45:26:12:96:df:7f:f0:f6:9e:d2:69:82:74:6a:
                    7c:9c:75:17:21:06:99:dc:be:f2:40:5a:9f:94:3f:
                    73:50:08:8b:48:95:bf:b4:c1:d2:3c:2d:31:ca:02:
                    ae:8e:54:fc:d7:de:c7:3b:4c:c0:fd:e8:a7:78:0a:
                    c3:20:b8:99:fe:39:3e:08:4c:70:4c:1f:22:28:c0:
                    a6:b8:92:b3:d2:7a:34:49:37:ad:59:b2:61:7e:af:
                    c0:72:9a:c9:60:db:d3:cf:77:c5:6f:cd:21:2b:8d:
                    96:4d:3a:e3:65:44:5a:d5:cd:8f:12:0b:37:bf:44:
                    e1:b2:7c:e7:88:e0:88:03:ec:85:55:c7:87:1b:a8:
                    41:41:5c:1b:5a:1d:b1:99:43:82:81:83:5d:3b:e5:
                    19:de:27:e7:2b:6a:da:eb:43:6d:26:ba:56:5a:cf:
                    19:5e:0f:a0:54:3c:20:e0:2b:8b:66:77:6f:b9:95:
                    21:41:7d:3b:d7:50:35:13:0d:12:0d:c9:01:7c:fa:
                    55:d0:50:7d:74:11:14:89:70:14:99:0c:c2:9b:b0:
                    46:ad:c9:1b:8e:97:bb:ab:70:47:1c:00:6f:d7:ae:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F7:09:09:9D:12:6E:75:9B:3C:9A:E5:58:A7:88:9B:AA:C3:43:EF
            X509v3 Authority Key Identifier:
                keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/9F155A86125111F1BDB1E8192A3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:d2:bd:d0:3e:a7:30:5b:b4:df:39:e2:71:67:76:b8:cb:b1:
         df:f4:f5:73:eb:60:a7:83:89:fe:77:ab:53:d8:d5:3c:c6:91:
         11:e6:ef:c4:8c:4b:78:43:cc:8a:39:35:94:55:89:8e:31:06:
         69:9e:76:14:ab:a5:9e:e9:fc:e3:48:eb:87:42:e9:f8:80:30:
         69:77:9a:62:70:2f:29:7f:4b:d4:37:8c:a9:f1:30:08:d4:8c:
         2a:0c:06:4a:df:aa:f6:b8:be:e1:22:80:7f:a5:25:dd:a4:96:
         4e:61:83:75:e8:36:ff:e2:da:1a:ff:37:61:e3:d7:9d:f5:23:
         86:b5:09:7b:dc:e7:c6:46:0a:3b:73:e5:e6:ef:18:17:26:f3:
         2e:84:7f:f6:ea:32:fb:95:b5:2c:ff:cb:44:fd:92:64:74:64:
         68:af:28:73:b3:9a:a6:fc:2c:0b:24:43:2f:1d:98:75:6c:d6:
         dc:04:e5:75:e5:89:c4:7d:5c:ff:eb:80:50:77:09:84:b6:4b:
         7e:6c:ca:56:07:56:d4:5f:19:84:4f:c8:9b:c8:2e:05:02:87:
         25:14:91:38:59:f1:6a:69:81:bc:14:a6:5e:c5:a4:eb:80:06:
         46:00:08:66:a8:b8:f4:e4:8d:b7:fb:a7:8f:e2:9c:df:8c:78:
         51:df:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:22 2026 by rpki-client