Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/04F02E3CCA7F11F0BFDF2176C4F9AE02.roa
File:                     04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (raw, json)
Hash identifier:          8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=
Subject key identifier:   C0:EE:40:EC:89:62:CD:E1:F5:95:69:3D:72:14:3B:36:A6:5D:F3:6D
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       02E8
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/04F02E3CCA7F11F0BFDF2176C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:18:21 +0000
ROA not before:           Wed 26 Nov 2025 04:18:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150318
IP address blocks:        103.1.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Nov 26 04:18:54 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a482ed-414b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:34:ee:00:0f:2c:36:11:3f:01:36:67:98:
                    cd:08:a6:8a:46:66:8e:b3:fd:98:07:6a:8d:b9:08:
                    05:e3:50:b7:3c:f0:52:bb:6b:c0:c0:84:46:ee:61:
                    60:20:5a:1d:89:8e:5e:05:15:5a:11:5e:9b:18:a6:
                    a5:68:74:e6:d5:1f:62:63:c4:a2:3b:98:bf:cf:cb:
                    ea:e6:1a:68:10:78:f7:3e:42:07:99:11:54:d1:ad:
                    cc:6e:f2:99:fb:e1:ad:28:6b:5f:a3:cc:0c:6c:22:
                    bd:02:b7:18:d9:4a:40:55:e3:08:81:bc:70:4a:ba:
                    53:1b:ac:6b:94:59:1e:03:bc:56:8d:52:b7:d2:3a:
                    cb:09:4c:11:0b:d5:f6:11:93:71:2a:15:ff:22:3a:
                    5b:dc:a1:0b:7c:e4:23:35:60:f1:b3:59:12:fa:63:
                    38:8e:ba:00:6b:df:e1:c4:25:b4:80:06:06:1b:e0:
                    17:4c:7a:ef:9f:45:92:53:6e:91:b8:25:97:38:07:
                    2e:cb:0d:cf:40:74:cd:4c:ac:69:a8:6c:b5:85:57:
                    4c:6d:72:78:18:89:3d:2b:93:b3:bf:2c:92:90:17:
                    a8:ca:23:2f:ed:9a:17:4c:ff:ec:17:b1:fc:f6:5a:
                    68:a2:e4:d3:f2:98:09:62:91:6c:9b:11:de:f8:51:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EE:40:EC:89:62:CD:E1:F5:95:69:3D:72:14:3B:36:A6:5D:F3:6D
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/04F02E3CCA7F11F0BFDF2176C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:60:bc:6d:c2:fb:14:4b:69:46:ba:84:a7:b8:5a:ec:3a:98:
         72:39:38:89:dc:2d:fb:e9:9c:62:2a:48:e3:10:73:94:a9:e5:
         b8:10:d1:af:d6:f1:b5:f4:63:3a:ea:2c:e5:a3:10:af:c2:c4:
         04:52:34:80:80:6e:e3:6c:1a:25:3e:b8:65:99:22:af:e7:02:
         d7:8d:a1:1b:75:03:da:51:52:87:2c:cc:31:d9:ee:ae:46:51:
         78:cb:70:61:8c:aa:96:59:4e:11:3a:4b:3a:c2:c6:c7:45:29:
         c6:d2:eb:ba:cf:8f:e7:b9:c9:56:0b:0d:fb:12:c6:0d:b4:ca:
         ea:63:ec:96:39:b0:75:77:fd:9e:d2:4d:0f:eb:c9:3e:ce:67:
         8d:c7:50:92:f2:8f:7b:e7:eb:d6:2e:c7:67:6f:68:f7:93:a4:
         9e:f3:fd:e3:74:43:73:30:fe:68:6c:95:02:e4:7b:b3:93:b5:
         b2:66:87:9e:9a:00:79:4e:b1:4e:7e:ba:b4:45:8f:d9:e4:af:
         c4:e0:a7:ae:5b:af:5e:cb:4c:ca:2e:15:8e:cd:ef:d6:b7:65:
         2f:de:40:9a:ae:5b:98:2d:1d:b0:fa:1f:92:79:8f:25:e2:6c:
         6a:4b:2f:55:1d:b2:9c:72:e2:eb:3a:67:40:a7:7f:cf:8d:db:
         21:e0:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:50 2026 by rpki-client