Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
File:                     8479151EC72011EA8062547CC4F9AE02.roa (raw, json)
Hash identifier:          3E7ChRCMaLQlU6kDMvoRL8ym3usW2YbTyGhondeg9co=
Subject key identifier:   F8:59:72:66:0B:D9:D8:CD:C2:50:73:B8:1E:8C:6A:73:F3:62:5E:45
Certificate issuer:       /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
Certificate serial:       08F5
Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:33:59 +0000
ROA not before:           Fri 30 May 2025 20:59:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139034
IP address blocks:        103.138.186.0/24 maxlen: 24
                          103.138.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
        Validity
            Not Before: May 30 20:59:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a40807-4772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b7:6d:ee:9e:5d:ba:55:3d:76:82:62:e7:01:
                    b3:e4:ff:11:98:39:62:cf:a4:81:4a:1d:74:65:e1:
                    1d:b3:87:30:5d:1c:6c:ee:6b:72:ec:ef:59:2e:de:
                    00:a4:6f:72:b6:d5:98:6b:1a:4c:56:64:ac:ac:0f:
                    85:a3:0a:c5:ec:cd:6f:fb:4d:ca:96:ea:84:7a:cc:
                    00:6e:88:67:9c:a0:16:98:e2:34:37:b5:36:27:15:
                    22:c2:f4:0c:4d:bc:f1:1d:7e:a0:12:ae:64:5a:40:
                    0e:8f:02:a7:b9:7a:58:a0:1f:5e:34:79:b7:ea:3d:
                    6e:d9:3e:11:f1:64:a4:fd:a6:93:f0:8b:5c:59:d5:
                    76:de:f3:2e:d8:bb:93:c6:ec:c7:96:c2:2e:22:92:
                    75:49:e0:fa:10:c8:dc:99:3b:ce:ed:c7:8d:f7:61:
                    36:70:77:ee:73:8a:03:c1:4f:43:56:b7:ff:1b:71:
                    54:a5:a0:7b:84:08:9c:04:d0:b2:a3:49:ae:96:5f:
                    22:a0:7e:56:3c:b9:f7:32:6a:13:f6:f3:8f:9d:0c:
                    b2:2d:58:02:e7:8a:fd:d0:55:a8:3f:fe:86:d8:b0:
                    e2:a4:82:8e:e6:19:50:20:b8:16:a5:15:ee:06:b5:
                    00:71:5d:1e:d0:75:5c:8b:c0:ca:6b:2b:19:22:f2:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:59:72:66:0B:D9:D8:CD:C2:50:73:B8:1E:8C:6A:73:F3:62:5E:45
            X509v3 Authority Key Identifier:
                keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:a6:90:73:19:6c:b0:b0:6e:58:fb:8d:cf:15:a4:65:26:14:
         8b:54:f9:c8:30:33:70:40:34:e5:34:9d:dc:f9:9b:e6:83:e5:
         d7:3e:76:fe:ed:26:ab:95:3a:1d:81:98:79:85:49:77:e1:a5:
         a5:51:77:82:35:6b:8d:fe:77:5c:6f:b2:88:2e:87:3c:2f:0f:
         9b:e4:68:3a:62:1b:37:eb:f9:47:b0:18:f2:49:ef:fa:5a:8c:
         9e:c3:6d:01:c8:dd:8d:97:48:b0:8b:00:27:c2:25:02:2b:4e:
         d4:74:31:42:84:90:ee:3e:83:de:bb:5b:26:dd:28:45:95:e0:
         c4:6b:b7:65:89:7e:9b:5d:f6:a7:2e:40:fb:2e:21:88:81:a2:
         2e:a0:7b:dc:52:9c:d9:e5:4b:75:8e:10:d8:8b:0d:d6:8a:f0:
         18:f1:4c:3d:25:32:e4:60:aa:09:d0:50:a1:23:04:6a:f4:97:
         57:95:ec:98:2b:9a:77:84:15:2d:d1:72:fb:72:2d:9e:f1:d4:
         d0:79:a9:0d:38:45:eb:e5:c8:b4:62:9a:18:69:c7:48:40:5c:
         62:79:bf:66:ce:a2:fa:1c:7f:7d:d3:61:21:58:7c:11:68:f2:
         a9:f2:d8:b6:aa:c7:d5:c3:0e:02:5c:eb:e8:76:19:24:6b:fd:
         14:5c:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:18 2026 by rpki-client