Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/8B729608B62F11EFB2DE315FC4F9AE02.roa
File:                     8B729608B62F11EFB2DE315FC4F9AE02.roa (raw, json)
Hash identifier:          htZKbTCRw2kolIOs+1xX3ByAdUKRSkWwNNKR43qldvc=
Subject key identifier:   0C:79:79:4A:1F:5B:DB:B7:4B:2A:71:95:86:6B:12:EB:21:75:46:4C
Certificate issuer:       /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Certificate serial:       0496
Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/8B729608B62F11EFB2DE315FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:21:30 +0000
ROA not before:           Sat 31 Jan 2026 00:20:51 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     151957
IP address blocks:        103.179.154.0/24 maxlen: 24
                          103.179.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
                          rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EA16, serialNumber=6E148A0D085780386A817DCD8D64695411C76838
        Validity
            Not Before: Jan 31 00:20:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44b6a-905c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:5a:56:8f:65:3c:80:cc:ed:7c:3a:ee:e5:
                    e1:27:05:fd:4f:5a:a6:07:a6:eb:bd:1b:28:84:61:
                    22:a3:7f:8f:a3:c6:34:10:ff:2f:17:cb:b1:16:7f:
                    7c:34:83:fb:3a:c9:f3:a7:72:83:06:3f:9c:c6:d0:
                    16:98:68:a6:4d:54:ad:36:bf:c8:6d:9a:20:4a:aa:
                    7f:da:b0:58:b8:a5:ed:67:ef:a4:25:10:c7:20:6b:
                    8f:2a:e2:71:c5:79:37:4b:1d:ba:3e:11:b2:fd:c4:
                    c4:34:37:05:be:5e:32:3b:2d:05:d7:d2:8d:cb:52:
                    3f:c8:a1:92:c1:f6:10:5a:ab:16:d0:c3:3c:91:db:
                    20:47:79:f1:61:b6:9a:d7:a5:8c:91:f4:3f:03:84:
                    dd:c0:e5:23:b4:8b:7f:f9:26:43:e8:44:6b:63:74:
                    2f:5d:f9:74:94:2e:f8:8b:48:7a:bc:b4:05:b9:91:
                    ac:04:67:b6:82:87:ee:9b:25:32:11:69:51:15:a9:
                    ba:b0:e9:0d:3c:43:7e:98:e7:6b:1c:ad:dc:5a:c4:
                    c7:ac:5c:6c:31:fc:fa:e3:ee:9c:73:d5:89:ab:ca:
                    07:6f:06:c4:cb:13:33:63:fc:3b:c4:e5:17:51:8a:
                    a5:80:7b:03:29:18:22:3c:6c:ad:f9:a2:02:af:e4:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:79:79:4A:1F:5B:DB:B7:4B:2A:71:95:86:6B:12:EB:21:75:46:4C
            X509v3 Authority Key Identifier:
                keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/8B729608B62F11EFB2DE315FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:86:8c:49:a2:58:a1:a8:2a:a3:7a:ed:85:aa:3d:69:97:
         8f:24:72:7d:4a:b7:08:77:be:a5:d3:49:7c:d7:81:ec:d0:c3:
         b3:ce:5e:62:b5:a5:20:07:02:98:bc:a7:c6:04:2d:1c:d7:b6:
         f6:24:6f:26:ac:e6:1b:46:6d:04:f9:de:99:75:1e:af:d5:5c:
         68:ce:4a:45:36:c2:5b:cb:ab:5a:33:2e:a4:6f:aa:ba:b2:f3:
         c5:93:b9:9a:a4:cc:2f:2e:65:86:9e:78:3e:d9:42:67:90:ce:
         ea:5d:d0:e0:ba:69:ea:91:b4:25:cf:7e:e6:c5:38:5e:1d:0c:
         6b:bb:7e:3e:0b:26:49:1a:9f:c4:5a:3f:ea:03:4b:cc:3a:48:
         c2:50:05:1d:c9:0f:77:1c:11:88:e3:86:f6:89:74:88:37:91:
         9c:3a:93:7e:1c:ef:ec:0d:ba:36:23:39:9a:89:1d:37:74:c5:
         05:6f:80:15:78:1b:f9:af:b4:1d:d8:5b:96:f0:ee:e1:e6:0f:
         56:00:10:9f:cf:59:ad:da:d7:31:46:ca:c9:24:4a:60:c5:88:
         60:86:d9:96:13:07:51:37:5c:01:83:b5:e3:73:65:b8:10:97:
         49:46:16:de:fc:85:6f:96:fb:77:22:11:2d:71:06:48:c2:8a:
         06:e0:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:40 2026 by rpki-client