Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
File:                     026E7E4EA4BE11EA873A5A41C4F9AE02.roa (raw, json)
Hash identifier:          YWuawBdfKtu6PotchTxSSERmqgfLjDc702+I3DYwK90=
Subject key identifier:   D2:82:8D:78:DF:6B:23:A3:3D:13:AC:7C:F5:A1:D5:66:0E:7C:F4:E6
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       09D2
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
Signing time:             Sat 16 May 2026 20:25:14 +0000
ROA not before:           Sat 16 May 2026 20:25:14 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139605
IP address blocks:        103.151.204.0/23 maxlen: 23
                          103.151.204.0/24 maxlen: 24
                          103.151.205.0/24 maxlen: 24
                          2001:df3:d780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2514 (0x9d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: May 16 20:25:14 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a08d2aa-ad05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:40:6a:da:58:c0:15:24:bf:b0:16:ef:45:
                    f2:d9:77:04:43:d0:59:32:79:be:80:62:b3:7e:ba:
                    5b:14:eb:8e:07:06:e6:f8:cf:b6:46:cd:19:8e:ba:
                    05:5d:bc:f6:21:54:0b:69:88:c5:1e:e2:31:e0:e1:
                    4e:b3:e0:6e:71:3c:28:5b:2a:e3:c3:40:ad:72:2c:
                    a0:e9:40:18:69:47:d2:97:df:b2:d7:e0:d2:4e:cd:
                    51:cc:a4:77:14:29:bd:0a:bf:ec:51:4e:54:d4:52:
                    d6:58:23:30:1c:bd:7c:25:83:48:fa:a7:4b:a9:60:
                    d5:91:56:74:9b:a3:80:b3:b8:86:1a:24:7b:cb:f9:
                    5d:cb:d8:50:f3:84:5f:67:24:ef:b8:9e:50:6d:9c:
                    47:f7:3f:7b:9a:15:1c:75:91:bb:5a:48:d2:71:b7:
                    ad:76:69:b7:5a:97:b5:95:be:a2:90:ac:2e:f3:b5:
                    39:20:74:88:70:cc:39:9c:4f:a9:f0:b8:bf:4f:52:
                    00:eb:71:ba:fb:6c:bf:a6:5e:51:34:ba:15:f0:8d:
                    b2:6b:7e:97:ec:3b:a6:00:ca:60:b3:8f:be:bf:08:
                    de:f5:9d:dd:0e:20:ce:73:df:f1:2f:36:5f:55:f9:
                    39:86:68:70:b5:0f:5a:2e:fe:a7:da:de:24:0d:94:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:82:8D:78:DF:6B:23:A3:3D:13:AC:7C:F5:A1:D5:66:0E:7C:F4:E6
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.204.0/23
                IPv6:
                  2001:df3:d780::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:70:8c:8f:02:52:3b:5e:b1:53:76:0e:30:55:60:a5:99:
         41:3d:96:3f:f1:8e:ef:af:0f:89:01:60:c8:6b:2f:71:29:c3:
         93:17:2f:3d:27:a6:4e:22:88:6d:99:38:2f:8c:02:1e:3b:ea:
         81:a0:c6:cf:04:81:f7:02:bf:31:83:10:20:e7:0d:89:ab:f6:
         02:e8:d9:85:83:64:dc:15:5f:15:f0:32:e8:73:ce:c0:58:f3:
         6d:1e:5e:b7:13:39:2c:4a:d8:17:81:3c:7d:57:f0:8e:dd:ef:
         80:78:b5:1f:15:cd:b5:11:75:2e:a9:a9:cd:1f:97:16:fe:0b:
         0e:6f:cc:60:97:ac:fd:ab:d3:c3:95:68:ab:04:10:11:ae:99:
         8a:8e:b9:65:10:29:77:a3:8c:cd:b3:6b:2c:a5:ca:61:3f:c9:
         40:7f:14:e7:a8:98:94:08:8d:7b:b1:4a:cb:bd:c2:55:bc:6a:
         22:3e:5f:91:1e:a0:09:02:0a:83:fa:98:d8:06:51:fb:67:2f:
         b3:eb:f0:2b:a3:8f:15:a1:42:47:d8:69:3e:f5:04:10:72:18:
         a8:20:57:82:be:d6:7c:4c:22:18:08:5a:e0:4a:f2:3a:61:3b:
         d5:35:ea:fd:98:1e:31:9b:f8:e0:e6:28:d2:ce:d5:1c:82:3d:
         94:ee:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:28:35 2026 by rpki-client