Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/51C3E830926B11F09CB88A3FC4F9AE02.roa
File:                     51C3E830926B11F09CB88A3FC4F9AE02.roa (raw, json)
Hash identifier:          3ZXUqVaSWRuqxEz8m47I5k4iPWpdb6iN8DnYHpIukoI=
Subject key identifier:   23:EA:27:66:89:19:94:4F:3F:6E:09:34:77:1D:11:83:D2:3F:DD:F2
Certificate issuer:       /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial:       130B
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/51C3E830926B11F09CB88A3FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:35:56 +0000
ROA not before:           Mon 15 Sep 2025 19:36:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     154207
IP address blocks:        103.114.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
                          rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4875 (0x130b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
        Validity
            Not Before: Sep 15 19:36:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44ecc-f3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:6c:87:75:62:f6:32:ca:b1:86:16:ec:b6:
                    a5:69:e8:e1:3f:f4:80:5a:13:29:f4:5d:61:7f:1e:
                    59:8d:52:e4:71:0a:9f:07:0c:9f:e0:38:15:e2:0f:
                    31:35:40:9d:23:dd:2c:9a:0e:8c:1a:3a:78:7d:98:
                    4c:54:ff:77:fa:f2:5d:a0:3f:e0:3e:9d:ff:a0:1e:
                    28:a0:d9:30:48:f8:d9:a7:01:6f:46:3c:b6:31:95:
                    ed:b5:fe:42:cf:04:36:d7:23:1f:0c:7e:ac:dd:41:
                    d3:07:58:46:43:e4:59:d6:81:33:9e:b9:86:96:74:
                    f7:d0:06:cc:5e:42:25:df:05:5b:65:3a:5f:d9:62:
                    ea:d5:cf:14:32:09:ed:38:5c:aa:84:8e:6c:b7:99:
                    5d:f1:77:06:d2:56:76:8f:0d:78:81:27:08:a1:bd:
                    dc:46:cf:62:31:90:8d:b7:27:5f:68:ad:b3:40:12:
                    df:3f:15:94:ab:28:c8:ce:7c:bb:1a:5b:4e:ba:05:
                    01:f7:13:57:3d:13:d2:cc:9c:90:e4:a5:55:fe:eb:
                    cf:60:2c:c2:8f:59:45:c0:bb:55:ab:7a:fa:f9:12:
                    66:73:8b:07:2b:5b:5c:ce:e8:cb:6d:4c:90:05:db:
                    bf:92:2e:45:4a:44:4d:98:f0:be:6d:9e:bc:a3:ae:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EA:27:66:89:19:94:4F:3F:6E:09:34:77:1D:11:83:D2:3F:DD:F2
            X509v3 Authority Key Identifier:
                keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/51C3E830926B11F09CB88A3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:dc:46:f7:06:8a:18:07:02:c4:34:c6:e1:e4:bb:6f:57:18:
         33:7f:e8:89:8a:6a:5e:bf:3e:a1:17:40:37:eb:32:8e:59:ac:
         2e:73:7a:c3:50:71:f8:c0:6a:88:54:d3:09:23:c3:1d:52:5f:
         a3:00:7a:6e:77:55:20:92:5c:c6:69:2f:3f:91:6e:c4:35:1a:
         fa:8d:e1:e1:e3:ea:04:c3:d4:26:e4:4d:ef:30:88:15:87:4e:
         0c:af:e7:71:b6:dd:4a:8b:08:92:d5:e4:0f:bc:59:46:27:74:
         31:38:06:44:c8:aa:3d:7d:e1:92:f8:a4:40:6b:83:d4:77:de:
         2e:47:28:a5:09:35:af:25:f1:92:35:39:b1:a7:05:12:2a:75:
         31:63:fb:4f:22:81:90:3d:32:70:02:a2:49:d9:9c:fa:bd:9d:
         d4:3a:4f:1a:f3:8c:1c:12:d9:d3:e4:50:c1:88:e0:11:5e:2a:
         4a:25:14:ee:ed:4a:67:2e:a3:bf:0b:6c:53:8f:7a:ea:eb:a3:
         3f:bc:6e:d2:0b:fe:99:f2:0c:dc:06:c2:dc:25:99:8a:b7:ba:
         fa:63:ab:c0:a2:3a:34:30:2b:0d:36:50:96:ae:f8:13:33:26:
         0e:59:b2:08:23:b4:d1:1a:27:17:a3:87:3f:d5:1a:2c:60:c7:
         ce:d8:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:54 2026 by rpki-client