Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/B8F865A2147B11E7B5BEC457C4F9AE02.roa
File:                     B8F865A2147B11E7B5BEC457C4F9AE02.roa (raw, json)
Hash identifier:          j+T6bJd+cSNSQ1iQrWISPs5fEYaHz+YvZS+Tkog1UjU=
Subject key identifier:   1A:F2:B6:0B:ED:6D:A8:6B:35:FA:7C:AD:17:43:71:28:BC:7D:08:01
Certificate issuer:       /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Certificate serial:       1C07
Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/B8F865A2147B11E7B5BEC457C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:36:59 +0000
ROA not before:           Fri 02 May 2025 16:53:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18172
IP address blocks:        103.87.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
                          rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7175 (0x1c07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
        Validity
            Not Before: May  2 16:53:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a513eb-d1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:da:5f:8c:2b:34:b3:f5:75:d0:dd:01:79:
                    1b:2e:7c:64:77:5b:c1:5c:f7:e1:dd:d1:96:f7:35:
                    4e:6d:c4:cb:62:97:7b:b6:ff:20:13:83:ee:bf:74:
                    26:69:1d:43:9b:06:77:c1:5d:3a:7c:07:6d:e8:d8:
                    a1:ac:ed:0d:16:18:1a:47:74:8c:de:d5:17:0e:16:
                    67:20:b0:4c:38:6d:ba:5d:28:c2:bf:18:9b:01:79:
                    b7:82:af:6d:df:b6:5f:7c:e3:20:0c:b1:0e:2e:98:
                    45:33:bc:4f:e1:50:24:99:3e:39:b4:d1:56:4b:f1:
                    c1:08:b8:a3:35:54:3e:49:d8:90:6c:bc:7d:1c:c2:
                    45:72:47:62:ff:5a:dc:5d:c1:32:8e:2c:c1:00:7f:
                    ba:52:c3:c9:b3:47:5a:b3:f6:b1:bb:38:d8:e8:09:
                    00:98:84:40:18:22:35:6c:04:73:0a:91:79:03:8e:
                    16:4b:39:8c:f3:b0:97:1b:1a:6b:48:e4:48:27:36:
                    9d:9c:6a:30:a7:74:f6:ee:1d:3a:6b:41:f8:f4:af:
                    68:c8:38:ec:ab:9b:2a:03:2f:83:34:db:3b:b1:5e:
                    e1:01:e1:bb:21:5e:53:06:f5:e7:6b:1f:f0:6a:51:
                    9b:b9:a9:ce:dc:15:1a:96:a6:2a:24:e4:a3:94:75:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:B6:0B:ED:6D:A8:6B:35:FA:7C:AD:17:43:71:28:BC:7D:08:01
            X509v3 Authority Key Identifier:
                keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/B8F865A2147B11E7B5BEC457C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:22:c1:47:04:c6:ec:e1:5b:2b:0d:9f:29:5e:67:6c:80:
         a1:87:a0:ec:fe:e3:2b:45:6e:b0:cb:16:d0:0a:bd:d1:c9:78:
         ae:fa:42:86:7f:1b:00:02:0c:b0:9a:d2:18:c3:9f:5c:29:07:
         f6:5a:63:c0:ab:25:5f:c4:96:29:7e:00:19:15:cc:55:75:ad:
         1b:ae:fb:1b:b1:32:be:ad:33:97:44:d8:da:22:d9:6b:ba:47:
         05:18:a3:27:f9:6c:e6:91:a8:ac:7b:21:31:0f:79:46:87:0e:
         b5:43:36:43:f5:eb:56:e3:84:aa:5e:aa:b7:ce:10:ee:7f:a0:
         fb:92:09:28:53:82:d3:dd:a9:7a:a5:d5:ae:e1:0d:a4:60:8d:
         55:38:0e:f0:2b:a2:a6:d8:29:d0:fc:40:96:5a:52:03:bd:d0:
         ad:61:11:45:b7:1b:a1:4e:68:1c:6f:10:3f:43:c6:d0:bb:f4:
         ab:74:04:27:6a:61:5f:81:d2:e6:ea:14:87:c5:03:db:08:fb:
         c4:ad:87:9c:03:28:39:39:3c:6e:56:19:71:c4:7a:05:a3:48:
         b9:f1:e7:09:4e:bf:e7:80:1c:1f:10:53:90:ae:b8:3c:ac:6f:
         05:d3:45:e5:c2:db:91:7c:cb:77:6e:66:2e:11:92:d1:44:69:
         f0:8e:f4:96
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD
M0Y1MzAyQTgwHhcNMjUwNTAyMTY1MzU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTNlYi1kMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnnaX4wrNLP1ddDdAXkbLnxkd1vBXPfh3dGW9zVObcTLYpd7tv8gE4Puv3Qm
aR1DmwZ3wV06fAdt6NihrO0NFhgaR3SM3tUXDhZnILBMOG26XSjCvxibAXm3gq9t
37ZffOMgDLEOLphFM7xP4VAkmT45tNFWS/HBCLijNVQ+SdiQbLx9HMJFckdi/1rc
XcEyjizBAH+6UsPJs0das/axuzjY6AkAmIRAGCI1bARzCpF5A44WSzmM87CXGxpr
SORIJzadnGowp3T27h06a0H49K9oyDjsq5sqAy+DNNs7sV7hAeG7IV5TBvXnax/w
alGbuanO3BUalqYqJOSjlHXjEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBrytgvt
bahrNfp8rRdDcSi8fQgBMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE
RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdFNkUvODMwQzY5NzAwREVCMTFFNzk3NzFCNjY2QzRGOUFFMDIvQjhGODY1QTIx
NDdCMTFFN0I1QkVDNDU3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1f/MA0GCSqGSIb3DQEBCwUAA4IBAQBqAiLBRwTG7OFbKw2fKV5n
bIChh6Ds/uMrRW6wyxbQCr3RyXiu+kKGfxsAAgywmtIYw59cKQf2WmPAqyVfxJYp
fgAZFcxVda0brvsbsTK+rTOXRNjaItlrukcFGKMn+WzmkaiseyExD3lGhw61QzZD
9etW44SqXqq3zhDuf6D7kgkoU4LT3al6pdWu4Q2kYI1VOA7wK6Km2CnQ/ECWWlID
vdCtYRFFtxuhTmgcbxA/Q8bQu/SrdAQnamFfgdLm6hSHxQPbCPvErYecAyg5OTxu
VhlxxHoFo0i58ecJTr/ngBwfEFOQrrg8rG8F00XlwtuRfMt3bmYuEZLRRGnwjvSW
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:31 2026 by rpki-client