Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa
File:                     ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (raw, json)
Hash identifier:          d3fV09yCUPav/zzP6200CpH67X1hYTUcY6e5MwD+Xv8=
Subject key identifier:   45:48:4F:35:BC:E7:1B:22:CE:69:D3:79:13:54:C3:D8:58:5A:E1:71
Certificate issuer:       /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Certificate serial:       0CDF
Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:18:37 +0000
ROA not before:           Thu 24 Jul 2025 18:57:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58946
IP address blocks:        103.26.136.0/23 maxlen: 23
                          103.26.136.0/24 maxlen: 24
                          103.26.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
                          rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3295 (0xcdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
        Validity
            Not Before: Jul 24 18:57:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a42e9c-1fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:2a:38:2c:c5:db:93:7c:e3:16:38:5c:b5:
                    b8:e5:11:4a:93:11:61:6b:79:2f:7a:16:fe:ef:a8:
                    13:a6:5e:fa:fe:f4:a6:33:54:1a:e2:cf:00:6e:06:
                    21:42:c7:31:7f:d6:ec:5e:97:fb:2d:29:53:0b:9e:
                    11:32:14:c3:d0:6e:03:cd:04:05:bc:c4:37:b9:c2:
                    76:3d:a0:11:0c:1a:60:60:fa:27:ed:89:4a:b4:55:
                    b4:2f:88:39:fa:85:20:d8:ef:ca:f4:ff:bc:6e:c3:
                    e8:0f:59:00:c1:20:51:7c:4f:72:9a:ca:b4:bc:1b:
                    c4:51:42:59:59:82:bb:cd:df:f1:69:47:e6:23:53:
                    52:d1:b3:50:b8:db:65:05:ec:8f:ed:7c:f7:e8:d3:
                    f8:ed:0f:6c:f2:08:48:ed:5c:bf:01:6f:ad:12:cb:
                    a7:50:ce:2a:b0:a0:20:00:43:ad:e9:8d:6a:73:0b:
                    19:43:f8:55:d6:44:b6:54:6e:50:86:08:26:73:d7:
                    7c:b8:25:99:cb:06:1f:ad:c1:91:7f:7d:91:dd:be:
                    75:aa:14:5a:00:69:96:55:95:78:c8:a4:8a:ef:0c:
                    d1:91:b2:64:0c:74:9a:3e:b6:d7:3f:24:bd:64:79:
                    a7:8f:10:c3:d1:c8:27:35:fb:55:11:c1:23:7e:2b:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:48:4F:35:BC:E7:1B:22:CE:69:D3:79:13:54:C3:D8:58:5A:E1:71
            X509v3 Authority Key Identifier:
                keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:0a:c2:cf:93:e5:02:62:48:5d:ba:9a:9f:70:f4:9f:24:b4:
         e4:8b:32:96:da:77:32:26:3e:9a:77:a0:23:74:3d:09:e9:fb:
         3e:f2:73:c9:ab:35:73:59:3e:19:8b:28:24:91:c9:e3:8e:46:
         e8:5e:5a:92:49:9c:bf:a1:6f:cd:e1:e9:ff:aa:5c:2b:48:08:
         25:40:b6:dc:8c:7d:9c:62:0a:b7:e4:b7:4d:ad:a4:5e:48:0d:
         6b:89:53:4a:ba:1a:a0:70:b1:fe:5a:11:0d:b6:21:e6:42:7d:
         f4:c7:33:c9:9f:3f:bc:86:96:1c:27:60:61:2f:a2:ea:f9:7a:
         23:06:22:04:8c:69:07:f5:1d:0a:da:a2:8b:f4:52:1c:e6:c2:
         e2:05:1e:c8:56:f4:6f:a3:9f:8d:61:6f:b9:82:9b:16:83:c1:
         08:9b:2f:6c:0d:57:3c:5e:71:28:c0:5f:25:0b:ef:db:12:57:
         89:77:49:f6:fc:26:c1:64:e6:0e:2f:82:e3:aa:61:6f:15:67:
         5c:ea:4c:78:3e:81:fd:26:6f:fb:d8:7b:08:89:22:50:4a:09:
         64:48:ef:e2:fb:87:e1:1e:32:5c:17:4c:0d:c9:3c:ae:ca:c7:
         b8:4c:a0:f4:ff:d5:b8:fe:eb:9f:b6:56:ae:5f:36:a0:48:e7:
         64:03:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:45 2026 by rpki-client