Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7B6F6276E03811EFAC3C5652C4F9AE02.roa
File:                     7B6F6276E03811EFAC3C5652C4F9AE02.roa (raw, json)
Hash identifier:          W4goqtPYzyLcCdBI7xc2Qn8MqCV+FsXgvw4MFdwTxhk=
Subject key identifier:   11:5F:6C:7B:72:9D:C4:39:27:99:D5:C7:DF:A6:1C:D0:88:ED:69:F8
Certificate issuer:       /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial:       0452
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7B6F6276E03811EFAC3C5652C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:31:43 +0000
ROA not before:           Sun 15 Feb 2026 00:21:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     23750
IP address blocks:        103.159.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
                          rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
        Validity
            Not Before: Feb 15 00:21:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5832e-245c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:05:0c:37:24:31:c8:22:e1:d7:db:20:bd:
                    e4:83:88:6f:cf:f2:f1:07:7f:10:4f:29:bf:0f:b4:
                    d1:be:de:4d:e2:a8:91:21:71:fc:21:20:db:e4:1d:
                    95:22:8e:fd:2a:12:45:68:f3:b8:f1:6f:5a:3d:4d:
                    06:f5:c5:8c:97:7b:3e:1d:93:17:c8:84:b5:e9:8f:
                    8f:6e:0e:e2:9e:1a:b6:8a:0d:ba:5f:df:b2:09:aa:
                    a1:2b:7a:37:7c:1a:a4:33:25:c9:a0:a3:28:6f:ef:
                    de:97:e2:e7:71:ae:96:5b:06:d0:6f:7e:a7:3c:99:
                    16:8d:57:ca:f5:93:ad:9a:fe:c8:9c:44:fe:34:07:
                    74:86:01:53:a9:fc:45:7c:0a:58:fc:d4:ba:bb:80:
                    d8:f0:11:ef:b8:f5:01:5a:65:b4:ae:06:ac:09:5c:
                    1d:de:93:47:bf:1e:cd:1f:12:c8:3c:a2:4e:47:02:
                    20:4c:cd:12:42:f9:8b:41:70:da:c8:0f:40:e9:56:
                    02:0a:04:bb:23:3b:03:e2:4e:7b:65:4f:e5:f4:dc:
                    0e:f8:4b:14:17:3b:dc:57:cd:9c:44:da:37:4f:aa:
                    73:75:11:a8:24:32:91:b6:83:e8:27:07:c8:36:5d:
                    bb:1b:8d:9d:e7:70:81:17:d7:6a:40:1a:d4:34:83:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5F:6C:7B:72:9D:C4:39:27:99:D5:C7:DF:A6:1C:D0:88:ED:69:F8
            X509v3 Authority Key Identifier:
                keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/7B6F6276E03811EFAC3C5652C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:81:30:c4:1f:7c:b6:46:78:e3:e3:a3:70:08:25:67:a4:
         fc:55:68:c9:08:50:4c:47:62:dc:9e:a1:70:4f:4b:84:45:0a:
         6e:aa:35:d3:01:5f:37:b4:ef:3c:ea:b1:12:5c:3c:3c:c2:e8:
         55:a7:77:97:17:fa:63:66:d6:96:91:9d:1b:5a:8c:a5:b3:1e:
         4e:f0:5f:0e:46:f1:b4:41:9a:5c:cc:f3:bd:4d:09:37:55:5a:
         19:44:6b:70:b2:bd:68:51:7e:cf:ad:d0:2d:54:f6:f6:e3:a6:
         ad:46:06:13:8b:ca:86:0a:71:5b:68:f7:1c:dc:a0:c7:e4:4a:
         41:10:40:c3:22:c1:ed:e3:ce:4d:90:26:b2:e3:ae:a8:57:14:
         e5:a1:a4:c9:1c:c7:5c:1c:89:04:ac:29:d6:63:80:73:c6:25:
         fb:61:d1:e4:f1:53:ad:4a:ff:ce:43:09:8e:ec:21:d7:28:14:
         08:ed:d2:61:e4:a3:1c:af:97:1e:cc:eb:a4:b8:81:98:04:b1:
         ce:6f:ac:91:59:c8:2f:e3:60:72:59:67:ad:9e:db:4e:78:f7:
         29:36:61:d4:24:6f:19:f8:26:2d:64:8b:fc:93:e4:29:0d:81:
         f5:b4:a5:9f:16:94:38:48:24:f7:df:a1:93:d7:49:52:f7:10:
         32:b9:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:33 2026 by rpki-client