Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EBEA51DC4EE311EFA1615635C4F9AE02.roa
File:                     EBEA51DC4EE311EFA1615635C4F9AE02.roa (raw, json)
Hash identifier:          NWJw87iGPcBaGP0PIOvFnWY4dzwoZ1iihk/1tJetYcM=
Subject key identifier:   C5:F3:F4:8C:92:98:0C:3A:9D:25:0C:BD:D9:38:F9:0D:60:AF:96:9E
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       2320
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EBEA51DC4EE311EFA1615635C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:48:57 +0000
ROA not before:           Mon 02 Feb 2026 16:13:25 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135009
IP address blocks:        103.205.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8992 (0x2320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Feb  2 16:13:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47c09-9c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:38:c5:b3:38:f6:9e:95:d1:a8:fc:13:66:
                    a9:ac:a3:9f:51:72:8f:d0:1b:38:d9:48:5f:f6:de:
                    4d:ca:37:2f:4b:3c:e2:2e:d9:03:22:76:ae:e3:d2:
                    02:a6:91:e1:01:77:8b:2c:03:cc:ad:ac:d3:25:a0:
                    46:29:f1:df:fa:17:b0:69:bf:77:a9:5c:dd:e1:3c:
                    e9:51:7c:f9:58:5e:75:cf:66:7e:ad:37:e7:4c:b6:
                    d8:33:de:8d:63:47:27:de:a0:b4:72:55:b0:05:4b:
                    10:96:2e:f6:ba:4b:d0:2e:7e:44:d2:16:90:3d:e6:
                    a4:b8:f8:0d:38:b9:bd:c5:07:58:9c:70:a5:8b:d5:
                    e9:a6:5d:33:9d:54:d1:ff:61:23:7f:ff:54:ec:fe:
                    bb:c7:26:95:6a:68:7b:02:39:a9:83:47:e8:3f:3a:
                    35:01:cc:0a:54:a2:b8:f6:37:f1:87:23:1c:bc:42:
                    6d:33:4a:f4:1b:3f:5c:56:ec:25:21:5b:87:09:12:
                    d2:0e:14:33:cf:a2:a9:5b:1e:e7:3c:3f:78:79:cc:
                    d4:79:80:25:5e:15:cd:36:9d:07:1b:69:e2:98:83:
                    90:2e:07:c8:da:bb:cb:74:7b:0d:cc:93:89:41:63:
                    1a:e6:f5:1c:99:76:0f:ba:4f:55:cc:99:0d:59:3a:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:F4:8C:92:98:0C:3A:9D:25:0C:BD:D9:38:F9:0D:60:AF:96:9E
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EBEA51DC4EE311EFA1615635C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:e3:21:7e:a3:8d:2c:5a:1b:b1:74:e8:3c:41:ce:30:78:
         2f:0d:ef:80:7d:84:58:da:d7:99:5f:95:1e:e5:d6:92:d4:42:
         7f:be:e9:6d:50:1d:36:87:14:87:bc:c9:da:c5:5d:3c:48:7c:
         df:7a:e1:be:7c:90:b6:69:05:e4:bf:53:b7:0e:10:9c:fa:a5:
         05:d2:31:14:ed:68:b1:8b:95:b1:1d:0b:04:33:a0:2f:24:50:
         72:9f:6d:0f:d0:48:36:dc:a4:1e:5a:1e:67:c6:b3:b0:4c:c4:
         d5:42:b4:88:39:51:e7:c8:4d:73:6b:d1:0b:97:3e:2f:57:c6:
         6e:41:87:ec:16:47:f9:5d:cc:1d:c2:86:18:90:5f:e6:fa:00:
         63:18:6d:d4:76:36:5d:d7:ac:13:6a:fc:90:f8:09:6e:6b:eb:
         0d:19:0c:23:90:bd:dc:4b:a2:3e:88:72:a9:ff:23:62:32:eb:
         28:59:cd:cc:c3:30:90:c2:b9:60:73:ad:e6:d2:c1:cb:bd:c1:
         17:73:cc:4b:31:12:13:83:c4:9f:3d:fd:87:a9:80:19:1a:49:
         35:97:7e:1f:78:bd:1a:bc:ec:c1:32:59:99:16:ca:da:b2:ce:
         47:a6:ff:26:c2:44:47:65:0e:25:d9:3d:31:a4:6c:77:08:32:
         55:96:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:27 2026 by rpki-client