Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/A15F9276E2A911EAADD4CF7AC4F9AE02.roa
File:                     A15F9276E2A911EAADD4CF7AC4F9AE02.roa (raw, json)
Hash identifier:          bEqnNhExi+S6UrBf6pOpBdTKkWHt+Uwlc4tyuSLmmqQ=
Subject key identifier:   E7:37:96:9E:12:4D:4E:6C:05:F9:D6:A5:F0:31:33:01:A4:55:E5:C6
Certificate issuer:       /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial:       090E
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/A15F9276E2A911EAADD4CF7AC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 20:41:41 +0000
ROA not before:           Fri 02 Oct 2026 20:41:41 +0000
ROA not after:            Mon 01 Feb 2027 00:00:00 +0000
asID:                     140908
IP address blocks:        103.153.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
                          rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318 (0x90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
        Validity
            Not Before: Oct  2 20:41:41 2026 GMT
            Not After : Feb  1 00:00:00 2027 GMT
        Subject: CN=6ac01705-44cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:64:43:12:85:f4:0f:93:ae:e4:6a:16:e9:
                    5f:aa:95:be:3f:c9:44:dc:92:ff:34:02:50:28:0f:
                    28:78:3b:c6:8c:98:c8:91:dc:bd:b1:92:55:90:d9:
                    22:b5:38:c3:c2:a6:44:14:85:30:f9:83:45:f1:ee:
                    71:43:fb:b2:3b:25:8a:14:3b:3e:a5:96:6e:5b:84:
                    e1:d2:8a:39:03:e9:e4:60:1c:7a:10:dd:71:ff:d9:
                    70:d5:bb:1c:96:4a:1e:b8:e7:df:e1:19:88:6d:95:
                    ea:1b:12:e7:72:e0:d5:cc:a4:3b:85:b1:91:4c:e1:
                    04:38:3f:64:1d:10:9d:37:25:ca:59:6e:80:cd:f6:
                    9b:ce:30:1e:b3:fd:30:24:8b:80:45:a6:9e:43:4d:
                    45:c5:f0:9e:88:69:47:9f:6d:1f:63:54:fc:2d:9c:
                    6e:ba:77:3f:43:e3:c2:d2:3b:85:40:45:72:77:be:
                    ae:f2:3c:f7:ec:99:6b:b2:75:db:30:cd:fb:cd:e3:
                    57:45:3e:d1:7d:92:9f:f2:75:ac:3f:3f:18:28:c0:
                    08:6f:71:66:27:7a:f7:a8:4d:01:32:a0:fd:4c:c4:
                    d2:f9:5f:15:f6:98:eb:48:3b:1d:e8:25:3d:58:2d:
                    7b:a4:45:e0:0f:25:79:37:e8:db:ea:2b:a1:54:37:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:96:9E:12:4D:4E:6C:05:F9:D6:A5:F0:31:33:01:A4:55:E5:C6
            X509v3 Authority Key Identifier:
                keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/A15F9276E2A911EAADD4CF7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f1:fd:04:34:5a:16:ab:5f:34:03:74:5f:e0:3e:db:87:ce:
         d2:83:8b:5c:de:55:f9:6c:bd:30:bd:15:bf:46:32:21:48:89:
         98:b1:1c:58:97:bb:6c:a3:69:c1:6e:62:9f:d0:c5:07:8c:25:
         26:a5:48:ae:b2:18:6d:ca:67:fe:38:c7:15:da:c8:eb:40:73:
         d3:e0:c5:c3:60:7d:4b:74:07:47:b7:0c:3e:bc:00:b8:7e:82:
         ac:d7:a8:0a:82:7d:71:be:0b:40:14:34:15:78:61:3a:c1:6d:
         fa:ee:8c:31:57:18:21:a6:e9:3a:8f:ba:62:e2:06:23:4b:ef:
         b1:37:6e:df:dc:7a:29:f7:11:42:45:89:b0:b0:45:48:24:26:
         47:4d:90:4a:3a:32:6e:2f:0f:c0:e5:14:cf:65:54:31:b5:14:
         31:f0:db:f2:90:85:f4:96:8a:74:2a:1f:5e:ac:6e:6e:26:6f:
         8f:90:d9:a8:e2:7c:d5:87:38:a8:15:09:88:ec:72:5a:c9:e7:
         ab:c2:26:28:db:ca:12:9e:10:9e:26:e5:49:1f:d5:18:db:08:
         50:ff:85:3b:d6:c3:ae:21:7a:06:1d:1c:40:f7:33:1d:26:7f:
         1f:57:67:36:e8:6e:f3:b0:1e:27:1d:d7:86:05:ab:1c:cd:23:
         c2:c9:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:05:07 2026 by rpki-client