Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/2F9BA582021311F19CF662E3456F56BC.roa
File:                     2F9BA582021311F19CF662E3456F56BC.roa (raw, json)
Hash identifier:          u0IV4WpfZVo/gGclcgn/9zhDLwmJapXxrIYkkYa+G0A=
Subject key identifier:   0A:6F:AC:10:22:50:96:17:68:E9:21:39:17:F6:59:DA:CF:28:89:1C
Certificate issuer:       /CN=A9154C6E/serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Certificate serial:       11
Authority key identifier: 48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/2F9BA582021311F19CF662E3456F56BC.roa
Signing time:             Sun 01 Mar 2026 05:37:19 +0000
ROA not before:           Wed 04 Feb 2026 21:48:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        103.242.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154C6E, serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
        Validity
            Not Before: Feb  4 21:48:05 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3d08f-6e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:23:a3:2e:49:4e:da:8c:3e:c3:5a:c5:5b:
                    c9:6b:42:41:17:20:a1:da:e1:e6:36:25:bc:c2:a0:
                    c7:f6:33:0a:a8:90:0a:3c:45:df:89:08:a3:ac:26:
                    27:a4:41:60:0c:c5:eb:88:74:2c:1a:36:d2:e5:cc:
                    9e:34:a7:b8:85:50:24:77:22:b9:fb:18:c6:3b:93:
                    19:1d:79:dc:75:73:23:f7:24:8b:fe:6d:34:1f:58:
                    5a:ee:5d:3b:e4:46:50:cb:8b:08:0b:08:37:a3:06:
                    7f:43:24:5e:9e:c5:3c:97:6f:e5:ba:fe:2d:a5:d1:
                    e5:48:1e:73:92:7c:c7:70:22:38:d6:67:6d:c3:da:
                    25:b9:d6:e0:23:26:6e:28:05:0b:a7:67:a2:9f:84:
                    54:0c:3e:80:09:0c:7f:85:b9:6e:5b:45:bd:f3:d7:
                    75:6b:b4:12:62:b0:77:20:a4:2e:bd:b9:1b:40:16:
                    ba:d1:66:1d:3c:dc:ba:75:68:05:1a:4e:82:7d:04:
                    c9:24:6b:a2:05:a7:1b:1f:a9:e4:89:28:d7:9d:5c:
                    53:26:ac:0d:bb:d3:b6:07:d5:3b:4a:c5:67:01:f3:
                    40:f3:99:78:0f:11:ed:23:b6:4c:c2:b2:ca:6a:4d:
                    e8:13:e5:10:b1:d5:3d:d7:f2:3c:74:89:b9:b6:67:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6F:AC:10:22:50:96:17:68:E9:21:39:17:F6:59:DA:CF:28:89:1C
            X509v3 Authority Key Identifier:
                keyid:48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/2F9BA582021311F19CF662E3456F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:23:cb:4e:c7:ee:e9:d6:65:27:05:b2:35:89:27:20:5e:76:
         1c:1b:1b:67:3a:d4:cd:3c:33:3c:9f:a3:6f:ad:44:c9:5a:ef:
         52:ad:c4:1c:7d:aa:8f:4a:09:9d:fc:ce:6f:be:07:0f:55:4a:
         8f:f6:b9:1c:0c:6f:f5:d3:47:79:80:46:cb:89:06:04:5e:92:
         4f:31:55:b0:41:d5:ff:39:a4:46:2d:b8:d5:d8:af:e7:57:cb:
         16:f0:64:c8:d0:b8:86:91:b4:b8:a4:1f:a5:60:52:11:e9:81:
         98:03:da:89:54:d6:e6:31:7b:07:b6:e9:e0:56:19:38:2d:61:
         80:9b:63:54:d8:77:25:e2:41:d6:c8:fa:b4:4d:05:5c:bf:4e:
         86:0a:0f:0f:4e:08:5b:43:75:98:cb:a9:e6:c7:93:ac:a5:d8:
         93:57:9f:6a:ec:ae:40:64:ff:7e:90:4a:f6:f3:70:02:df:a1:
         da:ce:2e:40:cc:05:e8:b0:23:ec:71:1a:e5:e9:bb:79:53:56:
         af:be:74:f0:fc:32:4b:56:1c:77:0e:ea:3e:11:70:fc:e1:76:
         3a:73:25:66:8b:42:10:b2:f0:89:ca:4c:6a:0c:fb:bf:e2:4a:
         82:a4:6b:0d:f1:4f:df:35:1e:e9:69:b9:3c:d0:ce:30:dc:5e:
         ad:31:93:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:41:48 2026 by rpki-client