Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa
File:                     903E0F1652BD11F0A9261F57C4F9AE02.roa (raw, json)
Hash identifier:          U9H5l1ZbJh0tHhCGTWDWxFOlVgyCElxhxwRUXVPz79Y=
Subject key identifier:   CE:FC:0D:69:C4:E6:4F:A2:93:8E:3E:D7:48:C1:A7:6F:10:95:5A:AA
Certificate issuer:       /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Certificate serial:       D1
Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:27:17 +0000
ROA not before:           Sun 01 Mar 2026 08:27:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16552
IP address blocks:        203.119.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
                          rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800
        Validity
            Not Before: Mar  1 08:27:17 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f864-eafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:49:5c:b5:7d:54:1e:98:39:97:10:52:90:
                    be:55:41:09:af:2c:2b:fd:95:7d:61:86:e8:a7:cf:
                    e1:cd:5c:61:bd:6a:8b:d9:cd:00:5d:79:1d:1d:63:
                    9e:7d:0c:9f:74:1d:81:3b:91:bc:4b:d8:1d:63:be:
                    59:e3:71:d4:1e:02:46:9f:5e:a0:c5:4a:a3:6c:3d:
                    df:7e:09:94:41:77:34:10:aa:89:37:0d:42:fe:a0:
                    6c:08:60:48:8f:e2:70:f0:d5:2b:86:e8:f8:9c:39:
                    df:0a:bd:51:18:73:d5:56:95:53:f8:07:a1:8b:f4:
                    f6:67:4e:e1:8a:d8:24:62:c6:29:b4:64:7e:b6:6e:
                    27:a3:c4:5c:de:7e:1c:50:30:dc:d0:17:d2:2d:5c:
                    43:53:78:04:02:60:6e:58:0e:f1:e3:e8:00:78:bc:
                    4d:88:e8:28:af:e6:fc:ff:cf:b1:96:51:27:03:f3:
                    5c:55:70:cf:e7:4d:99:da:bf:d6:68:2c:e4:05:77:
                    eb:ad:5d:53:37:83:a2:90:b4:f9:bf:8e:a1:d6:c1:
                    f7:21:71:a6:ca:bc:aa:97:41:e6:12:43:75:3f:2e:
                    97:70:b8:d4:60:d5:2d:5e:ff:3e:b8:bc:7d:45:68:
                    1c:60:7e:11:be:d6:ad:26:a7:8d:f2:81:47:96:f7:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FC:0D:69:C4:E6:4F:A2:93:8E:3E:D7:48:C1:A7:6F:10:95:5A:AA
            X509v3 Authority Key Identifier:
                keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:31:cb:71:ef:6b:3f:3d:35:02:0c:99:0a:83:50:1f:df:
         64:d0:df:bb:cb:48:9d:1c:1f:1d:4e:15:08:31:c3:56:12:00:
         1f:70:20:e4:96:dd:4b:84:e4:ba:4b:10:e9:8d:b7:a8:b9:10:
         af:01:73:50:6f:ee:5a:4a:cc:ef:b0:ad:10:b0:5c:a5:81:a8:
         08:ef:9b:6a:84:21:a3:2d:b8:57:5b:6b:b0:5d:2c:72:1f:ce:
         31:b3:ac:47:a4:6b:00:25:29:4d:23:5e:77:ee:57:1f:62:b1:
         19:cf:63:cb:de:eb:e1:36:15:8f:ef:f1:43:c5:92:f9:cb:e3:
         22:a3:11:5d:22:ef:89:07:23:3a:16:e2:e8:71:66:63:38:c7:
         4e:cb:af:9a:c4:ad:64:d5:3d:81:06:53:03:96:4e:69:d4:a4:
         ad:c0:14:d9:75:84:b6:b1:8f:96:a6:c8:31:74:b9:f4:33:1f:
         93:c2:bb:c8:7b:fd:c5:cc:9e:5a:ea:8b:84:a1:17:22:f7:53:
         dc:44:07:cc:09:7b:f5:6c:7e:fc:b2:75:5f:cb:97:43:10:d0:
         ab:6a:8b:9b:bb:91:dc:25:05:93:e9:9d:ea:3c:7f:f7:ef:29:
         8f:e9:ca:8e:21:b6:2c:93:0a:f2:9b:91:7e:ea:42:81:da:48:
         5d:a0:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:27 2026 by rpki-client