Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa
File:                     1B3EC39C525311EA939E4652C4F9AE02.roa (raw, json)
Hash identifier:          OlyIY7R0t7UmXYws0QWQQU3lNAFUrjDepPqWUn8CEMM=
Subject key identifier:   2A:6C:EB:67:55:94:72:B6:42:10:4B:6B:2D:5F:A6:CD:06:ED:1B:E4
Certificate issuer:       /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial:       11FF
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:31:57 +0000
ROA not before:           Thu 04 Dec 2025 17:18:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     35916
IP address blocks:        103.127.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
                          rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4607 (0x11ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
        Validity
            Not Before: Dec  4 17:18:13 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a45bed-2700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:ea:3f:e3:1e:7d:10:84:3c:27:f5:80:87:
                    63:8f:54:1f:0e:be:9d:eb:d2:83:5c:64:dc:9e:7c:
                    41:1c:17:d2:1f:3d:bc:76:a1:4d:84:06:e5:44:48:
                    33:12:d8:8b:c6:73:b1:8e:14:57:28:c3:84:8f:81:
                    76:9c:b0:fd:5c:7c:62:60:d0:50:0a:5a:90:29:66:
                    f9:6d:71:01:53:eb:73:58:b2:67:6b:9b:52:ad:3e:
                    42:8a:88:bb:b4:3c:44:af:a5:e2:d8:b8:f5:ad:dd:
                    67:ac:49:58:d2:1e:41:cc:b1:2f:73:28:fc:16:f2:
                    83:51:b9:1a:4b:69:c6:42:71:ea:b9:8b:c9:89:c7:
                    83:8d:dc:05:cd:d4:cb:c3:b8:40:74:e3:53:3c:27:
                    3e:80:51:7e:2f:c9:c0:b2:ec:bf:f4:ba:8c:58:f7:
                    ee:d5:96:6b:b7:a7:31:e0:6c:9f:7b:8e:ca:4c:eb:
                    8f:25:a0:30:dc:42:bd:1e:ba:21:d4:bb:ea:e1:d1:
                    c9:23:c8:a8:1c:3b:27:97:a3:36:c4:3c:2c:24:13:
                    ee:31:13:87:54:36:03:4d:72:7f:3d:39:58:f0:25:
                    3c:9a:bb:5d:cb:74:3b:d1:9c:98:22:ed:81:d3:b4:
                    a2:83:e6:9a:91:7e:b6:58:47:4a:55:f0:fe:43:b2:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6C:EB:67:55:94:72:B6:42:10:4B:6B:2D:5F:A6:CD:06:ED:1B:E4
            X509v3 Authority Key Identifier:
                keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b2:92:e5:17:da:36:22:9b:b8:17:bb:5f:2a:d1:70:f7:3e:
         0f:18:3a:6a:72:c3:e8:f2:1f:46:cb:49:b6:ee:51:7f:30:bd:
         63:db:a7:c9:5a:0e:9a:9a:9d:88:fa:ab:9a:f3:3e:95:3d:94:
         13:fd:2c:b0:4e:39:a6:5b:cd:d2:ad:b5:16:2f:09:f3:1c:67:
         e3:c4:12:3d:4f:a2:75:52:b6:0b:a4:92:80:de:2e:54:c5:e6:
         ac:22:3a:72:7a:66:8e:ff:a4:23:79:5f:b8:57:61:ac:ab:a3:
         b5:f6:07:18:59:db:15:50:e4:ce:40:5c:a5:ea:76:3e:d7:04:
         23:45:47:61:94:0c:39:9d:b7:e5:4e:2e:b9:d4:53:98:9e:60:
         ea:b3:aa:c7:dc:cf:7b:e6:af:ea:42:27:5d:ba:bd:0b:28:ca:
         29:f3:89:c5:06:d5:15:f1:96:2e:d6:02:c5:d3:14:fa:70:3e:
         e5:4e:11:54:f8:73:4e:fa:85:5a:f5:f6:ea:82:4f:17:5c:b0:
         fd:8d:90:9d:3e:05:c9:4f:56:85:4c:b1:6e:e2:29:81:50:0a:
         a0:22:3a:f8:db:81:63:b5:b7:05:d9:fd:af:97:8c:b9:8d:34:
         f3:a7:40:d1:9d:46:42:74:28:62:71:2a:d9:eb:a7:02:70:47:
         93:da:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:10:05 2026 by rpki-client