Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/026DBC9A4A2711E9A05D2324C4F9AE02.roa
File:                     026DBC9A4A2711E9A05D2324C4F9AE02.roa (raw, json)
Hash identifier:          YIzpeMeWqs42MJPGPIa2RAOYgAFRaWqA5il7QXG95yY=
Subject key identifier:   DD:4A:6E:2B:8C:E4:E4:61:87:49:FB:2D:29:83:50:7B:EC:91:FE:0D
Certificate issuer:       /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial:       158B
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/026DBC9A4A2711E9A05D2324C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:25:47 +0000
ROA not before:           Tue 02 Sep 2025 17:06:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     0
IP address blocks:        203.159.68.0/23 maxlen: 23
                          2001:df5:b881::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
                          rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5515 (0x158b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
        Validity
            Not Before: Sep  2 17:06:12 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4688b-c959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:ba:5c:68:0a:d4:df:3e:f9:fc:76:6f:b1:
                    67:a6:65:e2:4a:53:3a:9a:86:40:70:96:1d:90:d7:
                    b7:c7:df:1c:bd:2a:a8:e0:da:bd:7d:df:47:f5:83:
                    ed:1d:23:5b:e9:51:12:8d:91:8f:18:4e:33:c7:e9:
                    b9:a3:e1:55:b3:b5:a1:e9:61:ac:14:aa:e8:84:00:
                    bf:08:74:68:85:60:83:9c:a6:4d:aa:4d:5e:09:aa:
                    7a:53:be:35:1b:1a:60:3b:f8:4c:67:09:e8:52:62:
                    72:ba:85:ba:86:7d:fd:57:9b:b7:07:29:22:58:08:
                    b6:8e:87:d4:86:9e:d6:e7:95:9a:ab:02:86:b9:c0:
                    95:5b:e0:e7:d4:10:ca:8d:61:96:7f:97:d3:3c:5b:
                    46:60:b4:0e:47:f5:c4:ea:9f:49:8a:59:13:bb:a9:
                    22:80:25:fd:9b:04:31:44:6c:15:01:b1:33:93:54:
                    16:96:fb:68:e1:fc:98:ef:54:f1:fe:c2:27:da:dc:
                    20:1d:4e:05:33:39:66:db:71:2d:20:c0:e0:ce:6b:
                    08:54:9b:08:46:fd:cc:de:0e:a6:ef:99:ae:ff:00:
                    bf:ba:c4:ff:95:bc:3c:56:04:f3:3e:8a:1b:ef:b7:
                    e5:8f:8f:50:28:c6:db:dc:32:50:d7:fa:15:12:cc:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4A:6E:2B:8C:E4:E4:61:87:49:FB:2D:29:83:50:7B:EC:91:FE:0D
            X509v3 Authority Key Identifier:
                keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/026DBC9A4A2711E9A05D2324C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.159.68.0/23
                IPv6:
                  2001:df5:b881::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:5b:fb:15:60:fd:6d:a1:10:66:75:3a:df:7e:28:72:30:
         b7:b6:5a:b7:66:e8:c8:95:97:c9:7f:15:08:4f:4b:b1:00:ae:
         84:15:b2:b8:e7:45:22:d8:5c:dd:f7:b4:a2:07:71:71:98:2b:
         d2:00:cb:a1:ea:ef:99:12:9f:61:5e:59:ea:89:a7:b2:51:1a:
         b4:71:c9:f5:f1:64:ff:33:44:3a:a2:cd:16:87:db:c1:ec:f3:
         82:22:e9:d1:c5:0a:2d:f4:d3:74:e9:10:09:a8:04:41:2c:6e:
         fa:ca:de:87:5f:a5:0a:3a:e7:97:41:0c:cf:17:0f:bd:f4:8a:
         5a:60:a7:ae:1a:8e:cf:6a:4a:44:02:64:e5:68:6d:d2:5b:08:
         6c:bb:5a:32:b9:db:86:dc:c3:2d:4c:b0:18:4d:32:e7:f2:ec:
         4f:ff:dd:8a:d5:97:a2:f3:e9:41:2a:29:92:5b:aa:3a:7d:6b:
         55:76:35:46:16:a9:64:7d:4a:c9:62:19:83:be:a5:69:c2:fb:
         17:49:b6:9a:97:55:01:8e:58:5f:52:57:00:5c:e6:b1:08:eb:
         69:8c:8c:e0:e7:44:53:64:e9:9c:35:fb:18:0e:4a:eb:b4:a2:
         65:13:01:b4:0e:fb:49:cd:46:93:b3:94:60:22:a2:da:f2:5f:
         db:b2:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:52 2026 by rpki-client