Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/602984F09C0611EE93EA142EC4F9AE02.roa
File:                     602984F09C0611EE93EA142EC4F9AE02.roa (raw, json)
Hash identifier:          waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=
Subject key identifier:   42:89:1C:A5:08:42:91:BA:7E:FC:98:2F:1B:02:3C:B4:3F:DF:74:94
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       02E4
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/602984F09C0611EE93EA142EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:18:18 +0000
ROA not before:           Fri 03 Oct 2025 02:27:28 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137897
IP address blocks:        103.1.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Oct  3 02:27:28 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a482ea-22ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:5b:01:f2:c2:ff:02:8c:89:bc:08:18:7e:
                    16:9c:c8:91:41:98:a6:22:e3:6c:05:51:17:04:95:
                    d1:c7:3c:bc:91:0a:f2:5b:dd:85:cb:fe:4a:48:00:
                    f7:26:0f:b6:2e:80:00:42:f2:87:fa:44:30:7d:68:
                    5d:b2:2f:7f:e4:b0:bc:05:3b:a8:00:ee:f1:d4:e9:
                    ca:da:fd:4a:af:11:91:b6:63:2a:6e:12:60:5f:4c:
                    af:3a:ef:83:ee:3b:82:0c:c9:2b:ac:c1:62:35:46:
                    1a:b8:c0:08:aa:cd:1c:db:d3:6d:f9:20:5b:41:44:
                    8a:8d:48:64:05:67:9c:87:09:94:cb:6f:de:27:0f:
                    2f:af:77:a8:00:eb:6e:c0:fb:8b:2f:ea:90:f9:ee:
                    87:f2:79:0c:af:0c:11:54:7f:28:88:7c:05:9a:c0:
                    ca:de:e0:f7:71:c8:c0:9c:b3:87:82:34:e5:3c:a3:
                    ef:4d:44:b2:a6:0d:d2:dd:48:b0:ea:db:37:09:ff:
                    6d:6d:0f:b2:3c:b9:5e:ce:a6:a7:81:04:e5:26:c0:
                    1f:d6:1d:f9:e3:c0:e9:fe:7a:b4:39:9c:85:8d:00:
                    f9:68:83:26:35:7e:c1:63:f8:b1:35:5e:f5:6b:8a:
                    19:e8:db:7c:b9:9d:6b:72:11:fc:27:36:7c:a8:b3:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:89:1C:A5:08:42:91:BA:7E:FC:98:2F:1B:02:3C:B4:3F:DF:74:94
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/602984F09C0611EE93EA142EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:dc:a4:54:b3:24:8f:78:9f:1b:c2:a1:cc:8d:42:b8:fb:
         19:63:eb:f3:a5:ec:bb:bb:a8:ee:cb:4c:18:c4:ed:d7:18:84:
         34:8b:9c:9d:02:c4:82:8a:30:7d:2f:44:bd:80:7d:da:42:78:
         b0:81:e4:fb:b1:d9:a9:98:00:65:dc:74:ec:96:62:2a:27:52:
         19:13:20:73:1e:5d:d6:1f:23:35:91:4c:b8:52:c7:9a:49:fc:
         4d:8f:5b:6c:bd:b1:e5:49:62:c2:ac:27:cd:26:9e:d7:19:c0:
         25:bc:a7:cb:e0:4b:81:7e:68:9c:ad:72:51:41:9a:d0:dd:96:
         32:8e:12:ec:6e:59:f3:6c:98:95:19:f4:b4:24:92:29:e0:75:
         ae:5f:69:7f:ba:52:e7:11:a7:e8:93:76:50:14:86:b8:c1:84:
         38:29:29:a9:95:d1:41:81:1d:29:dd:e8:1e:23:fe:48:52:95:
         31:72:4e:7b:6e:cc:cd:62:4c:66:8e:27:09:ac:c8:45:e7:da:
         c6:52:f3:5f:6a:4f:40:24:5a:b7:e1:c2:53:dd:b9:44:a5:3d:
         51:de:31:ea:dd:1c:00:d9:c8:9d:98:60:92:cf:a7:ff:6e:a9:
         c4:88:26:1a:33:0e:cc:3c:7e:d0:7c:d9:e3:6f:e0:3b:47:af:
         ef:59:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:16 2026 by rpki-client