Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4ED7C794FF1D11F08FCF41D6436F56BC.roa
File:                     4ED7C794FF1D11F08FCF41D6436F56BC.roa (raw, json)
Hash identifier:          VZ7qL+XZo7DtyaTco73NW7VaAmAzKT6zJIWqxWJy1Uc=
Subject key identifier:   B0:6C:BF:9F:D0:98:22:E4:2C:C0:30:F0:7B:45:29:52:3B:FC:A1:02
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0907
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4ED7C794FF1D11F08FCF41D6436F56BC.roa
Signing time:             Sun 01 Mar 2026 18:11:19 +0000
ROA not before:           Sun 01 Feb 2026 03:22:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9457
IP address blocks:        103.72.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2311 (0x907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Feb  1 03:22:59 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48147-72cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:ab:44:3d:9e:06:aa:78:a8:78:63:1e:ad:
                    d6:57:95:bf:15:51:30:63:73:a2:bc:21:e6:cf:c3:
                    52:01:31:e5:8c:f2:22:e4:e3:6d:30:62:23:4d:a0:
                    b2:3b:5e:5d:64:ca:71:b9:d3:d3:e1:20:5f:d3:10:
                    a6:10:9f:b7:8e:c2:cf:4c:89:e0:ea:5f:e4:58:df:
                    6b:b7:da:69:f3:5e:47:e2:97:dc:b8:57:e9:a5:21:
                    69:3b:fa:eb:64:10:96:82:90:96:3a:e8:23:77:fc:
                    67:45:dd:da:bd:41:96:a8:07:ec:e8:bb:c4:e5:49:
                    7a:89:0c:b1:7f:d7:03:56:b3:39:9b:b3:16:35:e8:
                    ea:49:a4:0a:14:70:cd:35:eb:13:22:cb:32:c9:1d:
                    93:63:4d:cf:56:d4:b4:d4:14:fa:6c:7a:d4:7b:7e:
                    63:22:6d:4d:0a:da:00:20:f3:46:7c:6c:fc:6b:43:
                    51:db:89:fb:4a:54:dc:ed:49:f0:56:7a:29:c5:1a:
                    be:1a:c9:a4:65:a3:d7:c3:68:2c:21:2a:2e:71:ad:
                    21:29:06:15:70:22:4c:01:79:eb:a7:04:2e:7d:17:
                    5f:b7:fc:74:74:75:01:3e:68:63:3f:5c:a9:73:6e:
                    13:f4:84:e5:35:03:27:d7:74:a3:ad:c3:b5:9a:9e:
                    d2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6C:BF:9F:D0:98:22:E4:2C:C0:30:F0:7B:45:29:52:3B:FC:A1:02
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4ED7C794FF1D11F08FCF41D6436F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:74:56:18:30:15:92:05:d3:c7:14:83:90:72:07:01:e6:
         f5:bd:f8:c6:72:2d:e3:da:db:7c:2e:50:7a:f7:32:65:5d:ab:
         44:d3:12:fe:dd:92:1d:51:b5:72:7d:c5:74:9c:4e:68:a0:32:
         59:84:da:bc:12:46:98:ba:72:30:bc:17:11:db:a9:c4:b5:50:
         83:5e:1b:3f:86:1b:8e:fe:85:d3:46:67:98:60:c0:ea:7e:cb:
         a5:09:4b:b6:d6:27:67:ba:8b:8d:55:f4:22:cd:47:0c:31:73:
         95:5f:f4:2c:29:f2:b5:4f:ae:1a:4d:5a:c4:18:95:46:e4:a4:
         64:54:03:04:8f:75:7a:13:1b:46:90:6a:5d:58:dd:e7:a9:95:
         04:e0:cf:b9:06:10:10:dc:95:bf:45:6f:bd:a4:49:a2:da:1f:
         6a:32:73:eb:d1:51:18:85:b4:12:bb:be:dc:d6:ea:b8:4a:09:
         c1:34:d5:ec:78:0b:da:be:6b:09:d3:b6:13:75:de:93:ae:60:
         bf:12:0b:0e:c0:ca:5f:00:fa:36:5c:75:09:0a:67:1c:ec:30:
         22:aa:4e:0a:05:69:6b:bf:c6:7c:12:4f:28:a2:a0:4f:4b:3d:
         b2:91:d4:4d:8a:6d:36:c2:ae:81:5d:7b:c7:df:df:d2:ef:e0:
         64:d1:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:31 2026 by rpki-client