Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/596C54DCE83F11EE81772A87C4F9AE02.roa
File:                     596C54DCE83F11EE81772A87C4F9AE02.roa (raw, json)
Hash identifier:          lqLW/3F13QI9kdxsDx9jr2d/mE+vvyfFH4FKs/rBDIU=
Subject key identifier:   8D:98:0E:B4:12:38:98:9D:E0:F9:64:DC:80:75:28:A4:0D:09:DF:4D
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1A6B
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/596C54DCE83F11EE81772A87C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:35:33 +0000
ROA not before:           Thu 08 Jan 2026 17:13:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     17639
IP address blocks:        118.215.72.0/21 maxlen: 21
                          122.252.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6763 (0x1a6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jan  8 17:13:48 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a486f4-8b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:65:a1:cb:9a:c3:ba:df:86:f6:d7:ec:a2:
                    11:97:b5:6a:4c:7d:d4:5e:4a:17:7d:17:c8:91:cf:
                    9f:07:46:b4:1d:c4:0c:53:a8:af:28:fc:ad:f8:3d:
                    e0:8c:13:df:52:f2:02:48:af:22:fa:b1:57:42:98:
                    79:41:a5:f1:9c:27:8a:6e:00:06:fe:6a:47:33:eb:
                    55:ae:b8:97:dd:e5:1b:c1:4a:20:5c:ff:1c:26:ef:
                    29:98:6b:e5:d6:c3:e1:5e:09:b2:bf:64:57:bf:9f:
                    f0:99:03:5b:b0:e3:cf:f7:76:54:7b:79:a3:05:09:
                    93:93:03:3d:59:6d:bc:c5:a4:b7:04:a6:25:01:90:
                    93:ea:c9:c1:2c:ea:26:fb:d5:c6:bd:da:45:77:d4:
                    cd:20:e4:f9:cf:11:67:8c:b0:3a:12:66:35:6b:8e:
                    b6:9e:81:9c:49:20:97:7c:4e:ff:69:66:ef:b0:b3:
                    06:50:a8:7a:7f:a5:84:4d:e9:35:5b:03:fc:4c:2a:
                    64:da:0c:f0:a6:a4:36:01:d3:f7:5c:ae:a0:5f:8b:
                    ee:ad:c1:c2:3b:f6:1a:3c:39:ec:af:89:e3:98:9d:
                    65:a2:55:52:87:d1:f0:3c:25:77:2e:3e:0c:c0:10:
                    1b:5e:ea:01:08:ce:11:51:7d:9e:07:73:f1:3d:b9:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:98:0E:B4:12:38:98:9D:E0:F9:64:DC:80:75:28:A4:0D:09:DF:4D
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/596C54DCE83F11EE81772A87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.215.72.0/21
                  122.252.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:24:d0:9e:56:fa:fc:60:be:f6:9b:04:01:be:8f:63:b6:
         d6:26:0a:88:08:54:1a:2b:14:1e:b2:16:3b:34:54:77:27:a0:
         5d:b5:3c:13:d9:42:1a:9b:49:f4:83:8a:c6:14:91:a7:7e:0f:
         93:93:5d:e9:aa:b7:72:79:50:0c:ad:6c:39:95:57:61:31:f8:
         b6:d3:72:7f:75:a3:f6:02:9a:6e:7b:eb:cf:43:83:f4:0d:37:
         a2:de:2c:08:ba:bf:15:58:95:bc:66:d0:8a:c4:8b:fd:ea:fe:
         e5:9b:9a:c6:40:a4:14:ed:e9:d0:12:24:d5:fa:b9:17:6b:96:
         df:ff:ba:55:85:43:9f:0d:f6:a0:37:6d:33:00:b4:81:89:98:
         73:55:0a:94:f0:3b:5f:f5:9b:66:ac:49:94:f1:b9:6d:dd:02:
         6c:1d:c7:81:5d:62:14:e3:9b:05:89:89:b5:e1:2e:90:19:8c:
         3d:ed:12:73:13:eb:b2:c3:24:2d:2a:08:ec:3f:01:cd:59:71:
         03:b8:0c:22:94:6a:a5:26:b3:95:03:0a:2b:d8:48:e5:0f:fe:
         83:17:0e:ad:3a:f4:db:c3:52:ee:23:96:6f:d0:7b:40:20:15:
         67:2a:4b:a9:ec:9e:6e:e8:7d:9f:83:33:f9:51:c9:8c:f2:ca:
         95:9d:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:47 2026 by rpki-client