Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/8B626F5487C911EC908CE327C4F9AE02.roa
File:                     8B626F5487C911EC908CE327C4F9AE02.roa (raw, json)
Hash identifier:          UJpA5zEw7YjHmI7sbnVaspAGcZB71kOVdtEMUuEsETo=
Subject key identifier:   1E:CD:66:71:B7:D6:A9:16:C5:D8:D2:0D:B4:E8:F2:87:90:B3:6E:15
Certificate issuer:       /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial:       0478
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/8B626F5487C911EC908CE327C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 00:31:23 +0000
ROA not before:           Thu 09 Apr 2026 00:31:23 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149497
IP address blocks:        103.181.72.0/23 maxlen: 23
                          103.181.72.0/24 maxlen: 24
                          103.181.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
                          rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
        Validity
            Not Before: Apr  9 00:31:23 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d6f35b-043c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:5a:e6:b1:89:82:64:9f:55:5e:5b:95:67:
                    72:5c:93:0e:cc:9a:7e:1c:e7:9c:f4:f8:1e:e3:ba:
                    85:07:25:96:62:ae:6f:0e:9a:50:e6:99:63:ca:63:
                    cd:81:db:5c:fc:24:eb:0c:58:70:21:b2:08:ee:42:
                    f8:a9:69:6a:ef:18:de:04:76:32:c0:31:3a:5f:78:
                    6f:7f:e7:61:b4:f2:9b:44:3e:d0:5b:a9:58:9f:8d:
                    fe:13:65:7c:c0:e7:3f:5a:19:f8:5f:90:31:bb:46:
                    b9:38:b9:40:91:15:b9:d7:1d:3a:4d:1a:2e:ff:a8:
                    df:f8:3d:9d:49:9d:1e:a6:0d:63:22:00:95:53:19:
                    63:37:f0:48:a2:11:9e:29:6d:98:76:c8:44:a2:51:
                    87:ac:ec:90:4c:79:f6:2c:7f:8b:b3:e7:c6:c6:1f:
                    4d:11:84:bc:cd:47:0a:75:ce:34:5a:97:55:3c:5e:
                    dd:7b:95:d8:da:d9:0c:57:c1:89:3f:c9:50:de:fc:
                    1b:59:a3:6a:64:df:11:09:5c:96:34:23:87:73:24:
                    2a:b8:f3:a1:e5:98:95:4d:38:9d:3a:c4:ad:e0:f8:
                    21:a6:a9:7c:52:d8:5b:ce:08:e7:e5:a1:20:d9:0e:
                    ca:96:4a:20:a6:61:1c:41:ed:b5:bd:c4:10:6c:fc:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CD:66:71:B7:D6:A9:16:C5:D8:D2:0D:B4:E8:F2:87:90:B3:6E:15
            X509v3 Authority Key Identifier:
                keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/8B626F5487C911EC908CE327C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:ec:96:9e:fb:4b:0c:93:57:4b:e1:52:a4:6a:02:7b:59:72:
         b8:de:02:0b:af:18:97:a5:3d:9e:d0:ab:15:12:52:21:7a:34:
         f2:74:f6:17:37:67:fc:17:99:75:0a:06:21:66:f1:76:32:cf:
         9b:0c:0b:da:f1:b1:d9:5e:f4:bf:bb:fd:60:fe:e0:dc:17:a4:
         52:e0:1a:73:57:e7:1d:ca:48:48:96:ed:ae:e8:1a:6a:2d:e3:
         6f:4b:67:75:57:47:e4:3b:c5:fa:c7:d6:5b:84:a9:cb:ae:bc:
         b1:68:a4:ae:a6:f8:03:50:05:01:bd:f3:25:bc:48:4e:f0:6e:
         3d:a6:6c:46:dc:21:e2:a4:71:4b:21:84:64:0a:17:eb:96:62:
         85:85:04:8c:b0:18:a1:c9:7f:30:aa:e8:bc:77:71:48:34:33:
         39:a0:49:0d:49:26:98:4b:0e:1a:a0:9d:38:4e:30:04:81:b2:
         30:86:76:4b:fe:08:67:de:a0:7b:9d:c0:35:00:3a:bc:0f:e8:
         df:f3:bd:47:60:ef:1a:6d:34:3c:78:a5:c5:ab:e8:89:9f:3d:
         0a:04:86:88:c0:a6:1f:ad:a9:42:cd:c0:03:55:ed:8e:48:6b:
         5e:79:da:b1:62:4d:08:7a:da:5a:ce:df:6c:94:bd:f6:19:d6:
         6b:0b:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:29 2026 by rpki-client