Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/80C08414A45B11EDA610F30BC4F9AE02.roa
File:                     80C08414A45B11EDA610F30BC4F9AE02.roa (raw, json)
Hash identifier:          P3opEb2CgPB1rmAPiFiBoEkGX9RSiKODeElpZX4BNBk=
Subject key identifier:   8E:AD:33:50:69:E7:3B:00:3E:A1:AC:D4:1A:CE:83:07:61:CC:3E:20
Certificate issuer:       /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
Certificate serial:       0318
Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/80C08414A45B11EDA610F30BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:04:43 +0000
ROA not before:           Tue 05 Aug 2025 02:40:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     147181
IP address blocks:        103.191.50.0/23 maxlen: 23
                          103.191.50.0/24 maxlen: 24
                          103.191.51.0/24 maxlen: 24
                          2001:df0:f7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl
                          rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915547C, serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
        Validity
            Not Before: Aug  5 02:40:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4012b-3d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:1e:ca:d4:b6:e8:29:3c:f4:74:b4:8d:74:
                    80:a1:d2:04:14:a7:b7:b2:9f:4e:2a:21:a9:4c:33:
                    cf:6f:c9:08:75:bd:a8:fb:0c:2f:b1:29:d3:35:d7:
                    66:05:9c:3d:5c:ea:e5:60:8b:2e:da:00:5a:a3:c4:
                    29:f6:aa:08:55:26:70:0e:40:80:05:bc:82:b8:c2:
                    e6:d5:88:2b:1e:02:00:9b:7e:af:39:28:d1:28:da:
                    76:33:b5:39:02:5b:64:17:a9:b8:d6:a6:68:89:9d:
                    ec:12:f9:10:dd:78:30:f4:a8:a9:b5:57:8e:15:0e:
                    7b:2e:8a:ed:af:dd:e8:74:4f:e4:45:a0:6e:29:0c:
                    5c:b9:b7:f0:ae:0c:7a:42:b2:75:35:30:13:ae:85:
                    c7:07:7c:7c:c9:06:13:3e:3a:a6:57:91:39:e0:61:
                    df:0e:ec:36:6e:6e:ab:29:be:8c:50:40:dd:13:19:
                    74:f8:3a:91:73:91:15:0d:e2:41:f2:bd:58:dd:b1:
                    1b:ad:a8:a0:33:84:93:7b:07:57:b4:d4:2c:e6:e1:
                    b9:73:bc:21:65:fb:fd:9c:6a:b4:07:12:d8:33:44:
                    c8:5f:c6:5e:fb:18:44:4b:a8:08:de:df:74:84:aa:
                    85:6b:12:34:67:f2:1d:a6:01:4a:24:46:a3:96:3c:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:33:50:69:E7:3B:00:3E:A1:AC:D4:1A:CE:83:07:61:CC:3E:20
            X509v3 Authority Key Identifier:
                keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/80C08414A45B11EDA610F30BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.50.0/23
                IPv6:
                  2001:df0:f7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:9e:dc:97:07:4a:a8:32:b8:44:bf:20:f7:e8:ca:39:9d:
         89:1c:c2:e2:0f:a8:b6:8d:ce:e1:23:56:d6:80:17:98:29:47:
         e2:4b:53:92:d6:c4:10:ea:57:89:d5:e5:9e:15:21:64:8e:f5:
         45:66:1e:03:88:7b:13:26:4b:4e:0e:16:14:ff:02:81:40:e4:
         9c:9c:3a:5b:08:33:a4:e7:b6:17:75:b3:d8:2b:33:9c:d0:e4:
         5f:52:78:c7:7b:64:2d:17:35:25:f4:18:5c:0f:b3:54:45:a3:
         be:b9:6d:07:6b:a9:b2:91:4a:55:f9:7c:21:30:91:b4:12:3e:
         43:34:a9:42:0c:3d:77:ef:5b:4a:8f:a9:5d:20:39:94:e2:36:
         4d:7d:65:f2:7b:9d:7b:87:1b:42:c3:4a:ee:6a:6f:4c:4c:ab:
         c5:e5:e3:a1:d4:db:e6:cb:bf:4e:ea:58:b4:22:78:88:42:42:
         a3:ad:cc:fe:85:e4:14:65:e1:a8:60:43:71:6d:ac:79:15:5d:
         00:e8:da:87:35:06:6b:7b:58:1b:3a:96:ad:d4:9f:08:34:c9:
         b3:26:d4:1d:46:a9:53:c7:53:51:4d:dd:87:54:5b:d6:24:b9:
         8b:c1:d6:bf:51:36:ea:0a:47:43:03:ed:04:fb:43:58:10:9d:
         9e:3e:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:46 2026 by rpki-client