Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/E1AF45B0232211EB8E8FB50AC4F9AE02.roa
File:                     E1AF45B0232211EB8E8FB50AC4F9AE02.roa (raw, json)
Hash identifier:          EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=
Subject key identifier:   A0:37:E1:54:F0:98:DE:D3:85:03:F7:73:F1:4A:B0:88:DF:0C:D2:E8
Certificate issuer:       /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial:       0CEC
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/E1AF45B0232211EB8E8FB50AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:40:21 +0000
ROA not before:           Wed 31 Dec 2025 18:16:12 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137969
IP address blocks:        103.145.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
                          rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
        Validity
            Not Before: Dec 31 18:16:12 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47a05-a37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:f3:0d:c3:48:d4:d5:b3:cf:e6:79:af:30:
                    c7:6b:78:a4:b7:09:f6:8d:a9:0b:bb:87:27:08:94:
                    8f:20:38:07:62:f4:3b:02:64:d3:65:f3:01:3b:bd:
                    fc:d8:2b:d0:bc:ce:2b:37:de:fb:c0:43:b5:33:a4:
                    fc:c6:f9:17:73:45:d1:89:5a:2d:a8:4a:3a:35:f7:
                    d9:52:98:01:0f:b8:a7:97:f4:f7:f1:bd:aa:1b:27:
                    c4:70:b8:d2:40:de:04:1d:4b:2f:03:78:9b:8c:03:
                    49:4b:f2:d6:b2:0e:ad:07:48:13:e7:bd:e0:cc:6b:
                    34:92:c0:fe:88:d4:0b:72:66:49:07:39:3c:79:2a:
                    ba:fb:a0:5e:68:bd:f6:4a:1b:31:1d:ea:68:16:1a:
                    fb:1c:17:86:df:28:f3:8e:ea:7a:9b:da:a6:a1:58:
                    a1:9b:df:93:a6:3a:6d:af:ff:8a:d0:8e:47:d3:04:
                    a7:15:a9:74:d9:68:00:88:06:c9:5e:3c:c7:0b:da:
                    6b:2c:23:c7:43:b2:9d:25:8b:ec:1e:b9:81:39:48:
                    8f:81:04:0a:7a:52:87:6e:0f:fa:8b:2d:74:30:21:
                    b4:f8:47:22:b7:f2:1a:91:4d:d3:29:a9:a7:be:7a:
                    ba:15:18:f3:db:97:20:87:cc:11:3e:f7:75:12:f9:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:37:E1:54:F0:98:DE:D3:85:03:F7:73:F1:4A:B0:88:DF:0C:D2:E8
            X509v3 Authority Key Identifier:
                keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/E1AF45B0232211EB8E8FB50AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:57:ac:31:5f:78:0d:53:bc:0c:4b:28:f3:80:53:16:e1:
         8d:b1:9b:ef:c8:42:94:cf:8b:fb:70:80:af:6d:39:35:68:31:
         a5:11:c8:d3:f7:b9:9f:40:7e:8f:39:68:62:2f:f2:6f:f6:88:
         2f:15:68:32:bf:a9:a1:5d:ab:84:2a:8e:cd:0c:35:c4:d4:86:
         ba:dd:e4:80:6b:87:5a:3a:46:c5:89:38:de:84:03:57:c1:b4:
         e9:29:d2:ac:ca:62:5b:6a:55:7a:6d:02:68:0d:85:19:f0:cd:
         06:42:ab:cb:44:1d:33:f7:ab:12:35:56:a5:07:10:4a:09:98:
         3d:fd:10:5d:4a:f6:42:cb:6f:f2:b9:c3:b0:40:7b:b5:2b:23:
         b9:83:6c:e8:6d:fa:5a:6e:d5:61:76:6a:bb:26:b9:6b:15:1d:
         ae:c8:d5:fe:4f:81:55:ef:b5:5e:1c:8f:00:67:08:97:82:3d:
         8e:a7:13:95:19:04:e9:75:e4:a0:f5:ae:62:db:b2:9f:ff:a0:
         cc:1f:b4:3f:5b:28:7e:5a:9f:2a:97:30:d0:7b:de:52:42:ec:
         25:e6:45:f7:20:57:37:21:33:46:54:fd:10:5a:5d:85:19:d4:
         42:d2:9f:0f:61:2d:66:93:0b:1f:a1:99:02:eb:f5:f4:e7:3f:
         6f:a3:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:58 2026 by rpki-client