Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/BBD396F8CC1D11F09B362031C4F9AE02.roa
File:                     BBD396F8CC1D11F09B362031C4F9AE02.roa (raw, json)
Hash identifier:          uYu81Ofvac/sxYt3CFpFhByoQ1Jw6rz75k426W/IqYM=
Subject key identifier:   DA:97:3E:6C:52:37:AD:A8:D1:D8:29:9C:B9:3E:6E:18:2C:05:C9:31
Certificate issuer:       /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial:       35
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/BBD396F8CC1D11F09B362031C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:59:46 +0000
ROA not before:           Fri 28 Nov 2025 05:47:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141518
IP address blocks:        103.160.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
        Validity
            Not Before: Nov 28 05:47:33 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d5d2-a3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:ae:66:9d:f2:c4:d9:87:c7:12:9b:6e:53:
                    87:1d:8f:f9:c8:fd:e9:34:1f:6c:84:62:a0:df:b3:
                    29:c3:76:4f:86:6b:e4:37:36:29:b7:53:51:fc:65:
                    7c:77:63:8c:c6:29:fa:27:76:1e:3c:c9:1e:f3:ff:
                    0b:cf:b6:f1:b0:e9:f8:7f:ff:3a:35:4a:d7:e8:5f:
                    2c:28:4e:6f:6c:ff:ca:46:b6:c1:31:ad:4f:35:fa:
                    c3:28:ba:1b:81:21:f0:be:7d:3e:83:4f:55:ae:48:
                    f2:b4:d6:fa:40:a2:36:24:8f:83:d8:f4:51:5e:9e:
                    3d:06:d8:74:b7:ac:9c:32:41:c2:7c:16:01:81:13:
                    6e:5c:d0:b7:e3:b2:b0:97:98:b4:1e:f6:11:34:0d:
                    c6:0a:21:f5:2e:ed:af:89:71:f8:bb:30:fa:a2:b9:
                    36:5d:06:da:94:ba:4a:92:e9:8d:7f:cf:93:05:dc:
                    e6:af:13:17:82:ee:eb:ba:86:54:07:18:1c:24:4e:
                    49:55:87:66:0c:69:ea:0d:00:36:e2:b9:29:3b:e8:
                    ab:f0:9f:a5:b1:97:6b:85:84:8b:a5:b6:89:9d:a5:
                    6d:26:93:67:54:e9:9b:29:7f:de:55:36:e6:36:96:
                    4a:d3:5c:ae:0a:d6:30:43:9b:98:0a:6b:6c:e9:ca:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:3E:6C:52:37:AD:A8:D1:D8:29:9C:B9:3E:6E:18:2C:05:C9:31
            X509v3 Authority Key Identifier:
                keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/BBD396F8CC1D11F09B362031C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:8d:37:5b:d1:cd:b2:5b:52:7a:2e:cd:99:a5:62:af:f8:17:
         61:3a:61:1f:97:9d:ee:07:a8:cd:d8:e2:02:c0:a4:b7:c7:ff:
         5a:0b:ec:85:ea:06:b1:15:92:5d:ae:15:7b:f0:03:9a:10:a4:
         e8:3b:c7:c2:66:30:47:42:c7:37:b4:43:41:32:2a:7d:05:fd:
         a4:9f:e4:3a:66:7a:cc:b5:da:d6:3a:5b:22:94:76:1a:2d:57:
         27:f8:77:26:ff:c9:7c:6a:39:11:d5:9e:e1:4f:19:1f:71:50:
         f0:a4:6d:14:ce:1e:34:f2:45:7d:ab:52:ce:46:36:31:b0:37:
         b9:1b:16:5d:1c:b1:77:3d:29:ae:06:89:e0:db:0d:ff:8f:3c:
         48:ef:6f:03:b7:63:9b:9d:b3:1c:c3:e2:db:e8:f1:97:d8:77:
         ee:dc:41:f1:25:20:37:4f:7b:81:7d:94:7e:4c:d9:c5:bc:0c:
         2a:a3:20:50:eb:a3:f1:55:90:08:af:01:c4:d8:c0:72:bd:61:
         d2:76:b5:d3:cc:14:c9:d1:f3:d9:6d:8f:18:5e:9b:89:5d:1a:
         94:2e:8d:fc:54:de:ad:d4:73:83:73:64:c7:ec:cd:49:bc:e7:
         15:7b:49:e2:19:64:35:7b:58:6b:1c:39:5e:ce:51:76:19:cc:
         83:9f:8a:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:33 2026 by rpki-client