Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa
File:                     1E1A1DB28C6A11EB91832D52C4F9AE02.roa (raw, json)
Hash identifier:          1TSa0PPd+7pwYyolW0O6jfoDGRjZIL5Y7Dutt5Dic1E=
Subject key identifier:   6F:66:71:78:04:6A:F2:89:5A:DE:77:E5:34:B4:E3:53:3D:BE:1B:B4
Certificate issuer:       /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial:       06E6
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:45:36 +0000
ROA not before:           Mon 14 Jul 2025 23:04:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139213
IP address blocks:        103.139.248.0/24 maxlen: 24
                          103.186.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
                          rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766 (0x6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
        Validity
            Not Before: Jul 14 23:04:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a40ac0-f212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c9:78:04:c6:2c:7a:95:55:4a:a3:3f:4d:6b:
                    46:6f:45:7f:ae:50:c1:ea:34:aa:27:7f:90:53:ca:
                    34:50:49:bf:ae:6e:db:54:4b:e1:00:5d:53:09:83:
                    dc:dc:af:b2:8e:d4:e2:94:18:9c:05:8a:5a:76:92:
                    df:1e:ad:84:41:b7:12:f4:46:22:fc:e5:e4:92:47:
                    c1:7d:f8:ca:34:03:91:c0:a2:e5:43:a2:8a:33:59:
                    5b:12:55:e4:a0:21:0b:08:d5:72:19:6a:4a:1d:60:
                    56:fc:8c:b4:da:bd:7b:23:44:3b:23:14:98:b2:f7:
                    9f:de:82:63:2a:7f:ce:dd:8d:72:5a:a3:d9:d8:73:
                    12:88:5f:dd:d3:e3:69:f9:7a:75:02:19:8a:a5:a9:
                    2b:a4:96:a5:c3:9b:de:2f:5e:6c:9b:ac:1c:9a:e6:
                    35:07:0b:8e:35:45:47:bb:14:d4:92:4c:4f:53:1a:
                    f0:9c:ba:56:1c:98:78:be:78:2d:a3:d5:37:ac:d5:
                    e5:78:71:e9:49:37:61:50:44:db:0a:bc:7d:1e:8a:
                    a8:cb:8a:b3:79:a7:eb:ae:a6:7b:7e:49:a7:c3:52:
                    35:74:69:23:f3:72:77:ba:26:a8:17:18:97:06:15:
                    35:6b:8e:7d:62:cc:b3:96:f0:06:9e:16:70:6f:84:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:71:78:04:6A:F2:89:5A:DE:77:E5:34:B4:E3:53:3D:BE:1B:B4
            X509v3 Authority Key Identifier:
                keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.248.0/24
                  103.186.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:c4:97:46:52:07:eb:e1:fb:0b:95:f7:27:51:de:9b:48:
         36:a0:9d:70:6c:09:cc:c6:f0:7a:cb:3a:97:09:a1:0a:5c:b5:
         5a:80:8b:cb:4f:f5:cc:8b:d1:b1:f8:e0:69:47:d0:9b:c7:41:
         8a:64:44:13:10:50:fa:b6:11:10:ed:a6:e7:89:32:c8:21:43:
         a3:dc:e0:9b:13:e3:b3:02:b8:1e:c4:b0:9c:56:89:9a:af:3a:
         06:17:82:12:93:e9:6a:35:24:26:3e:fc:bf:a5:b5:6a:b6:7d:
         a0:db:ca:27:26:4c:6c:61:d1:7b:33:b1:4d:de:b8:ea:93:57:
         9c:ae:1b:44:28:0f:38:43:68:4c:c4:86:47:6d:02:fb:0e:d0:
         57:5e:8f:8e:e4:c1:cd:7a:eb:2d:2a:6c:96:d5:ea:9a:df:a4:
         6f:4e:7b:bd:7a:01:fe:9e:75:23:af:b9:06:0a:5e:4d:87:05:
         2e:88:e3:50:c7:b1:18:06:68:85:30:25:b9:c3:7c:64:ba:ce:
         b0:46:5f:27:9b:4a:de:2e:40:65:2d:20:51:0e:9f:4b:3b:11:
         2e:e8:55:4c:9e:15:8e:a4:c6:30:f3:75:f6:d6:0c:51:74:bd:
         ab:4e:3b:0f:c9:3c:ea:5e:f1:b4:7e:65:d1:62:fa:b7:9f:3c:
         5b:6a:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:45 2026 by rpki-client