Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/578C92D62F6611EE9CAFAA58C4F9AE02.roa
File:                     578C92D62F6611EE9CAFAA58C4F9AE02.roa (raw, json)
Hash identifier:          z9CfvJM12QlNZXNF44p70rHwRjByPI+ZqLnmCsquLHk=
Subject key identifier:   13:FE:EC:1B:EF:16:2B:1C:B5:EE:D3:FD:1E:7C:A2:23:D9:0A:95:88
Certificate issuer:       /CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
Certificate serial:       01E9
Authority key identifier: CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/578C92D62F6611EE9CAFAA58C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:36:01 +0000
ROA not before:           Sun 31 Aug 2025 04:21:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151637
IP address blocks:        103.215.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F, serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
        Validity
            Not Before: Aug 31 04:21:54 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3ec61-1428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:aa:40:4e:3f:6f:81:ef:76:b4:ee:c3:21:
                    92:8b:59:31:c0:b6:83:a0:15:f7:1c:ff:4d:0b:79:
                    2a:fb:1b:bd:ad:0f:ee:33:65:80:fe:07:58:c1:de:
                    8d:03:98:f4:a7:43:b0:f7:2c:52:a5:9d:42:6d:0a:
                    82:c3:ba:23:25:9a:f7:ac:7f:f3:14:5a:6f:3e:10:
                    6b:bc:e8:cc:d9:1f:3c:74:e8:80:f9:77:f5:8a:d9:
                    d1:a5:0f:95:0f:66:a0:4f:62:03:19:83:42:04:46:
                    57:a0:ae:00:6e:2f:bf:a8:e4:a8:42:e2:bb:7d:ef:
                    01:12:f0:ee:f9:3f:fe:61:e4:68:2a:ff:e8:ee:72:
                    47:08:2d:db:4a:eb:2f:9d:a7:9b:2f:46:ec:0a:e6:
                    aa:0a:e3:7b:b7:c1:10:16:ce:ed:8b:2c:a9:8f:94:
                    81:10:ac:93:1e:f1:56:ef:6a:82:31:20:c9:36:a5:
                    12:4a:5d:ae:1f:3e:d7:9f:5a:c4:97:5e:3d:6a:7a:
                    73:9e:2b:ad:75:49:1b:65:b2:19:27:a4:c9:3c:2d:
                    56:83:68:e7:86:52:87:e1:89:0d:ee:5b:b8:39:10:
                    ad:f9:78:46:f3:6f:fb:cf:91:f4:80:93:58:45:be:
                    e3:87:26:51:fb:96:53:a2:d0:38:e7:89:ef:cf:77:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:EC:1B:EF:16:2B:1C:B5:EE:D3:FD:1E:7C:A2:23:D9:0A:95:88
            X509v3 Authority Key Identifier:
                keyid:CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/578C92D62F6611EE9CAFAA58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:3e:6b:5f:c1:3f:6c:b3:f8:44:92:13:21:b0:74:60:d1:
         ff:0b:eb:72:54:aa:06:7b:f0:52:a7:5a:d8:c8:8e:d5:07:7a:
         6c:2d:c0:9a:c0:f1:b7:f3:9b:e6:f3:9d:34:62:8e:c8:40:94:
         f0:3b:b1:f5:f1:ef:a8:f5:65:21:0c:61:00:38:3b:fb:b5:58:
         85:f8:dd:da:e6:51:0c:0d:5f:f0:04:1b:11:2c:38:7a:ff:88:
         20:f5:b5:6d:61:7e:14:61:2f:b4:fe:39:99:83:98:82:50:6e:
         83:28:a0:ff:71:d8:83:72:ee:f1:84:e7:7c:a1:95:f0:5a:61:
         4b:ae:8d:c4:6b:3f:59:91:46:54:1e:23:31:58:5d:8a:9e:c8:
         5f:b2:64:84:e0:a1:1d:7c:a0:61:30:6d:b8:a3:82:ae:01:8c:
         fe:74:9a:27:69:cf:3c:85:db:0b:40:52:ee:6c:b2:c8:8a:fd:
         f2:ff:51:7e:87:df:e3:f0:36:6f:53:f7:0f:0e:e2:f8:e6:54:
         46:af:f0:0a:80:25:bd:96:cc:51:f9:47:0a:2f:af:39:19:49:
         30:4f:93:b7:08:12:15:f0:1f:48:67:6a:c7:28:6b:d8:85:24:
         0c:1d:6d:f6:32:07:8d:a5:66:0c:ed:c8:4b:ad:ec:56:eb:4e:
         1d:df:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:50 2026 by rpki-client