Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa
File:                     B8BB04788D0E11EF9759C171C4F9AE02.roa (raw, json)
Hash identifier:          QKLGspANWbxw8KYj33JMMJdYgC4PO2q64kvi/bPww0U=
Subject key identifier:   D3:DB:9A:C8:3E:E6:A1:82:74:8B:98:82:05:E6:AA:D1:29:EC:25:71
Certificate issuer:       /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial:       0848
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:51:47 +0000
ROA not before:           Thu 26 Jun 2025 21:29:09 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        45.123.100.0/24 maxlen: 24
                          45.123.101.0/24 maxlen: 24
                          103.9.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
                          rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
        Validity
            Not Before: Jun 26 21:29:09 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a45283-080a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:91:77:47:37:a8:0e:06:80:00:de:b0:21:
                    cc:10:89:9b:9a:0d:9a:f4:e5:fb:c1:5f:1f:a3:1d:
                    d6:48:22:23:71:f5:cc:24:2e:4c:4f:a9:e5:76:89:
                    e9:0f:89:ef:9d:a8:db:16:88:13:16:66:ae:9a:f4:
                    d5:d1:54:3d:86:12:31:bd:56:5d:48:0a:4c:fc:aa:
                    71:15:02:fe:ac:22:9a:2b:83:f6:b9:aa:1c:b2:c9:
                    f2:32:71:86:b6:4e:50:2d:bd:e2:47:32:8d:32:fd:
                    cf:f4:c9:15:e4:4a:b6:65:70:4d:49:8f:b1:9e:d3:
                    74:b7:cb:b5:dd:d1:40:72:98:d9:eb:56:9c:c9:c8:
                    e3:b9:fa:35:3c:37:cb:9b:21:37:b8:87:56:6f:97:
                    b3:29:bf:ea:0d:77:d5:1c:38:03:82:fa:b3:91:1d:
                    c2:94:84:8c:24:8a:ee:21:89:bd:46:39:66:c6:c5:
                    17:b9:af:64:61:c4:fb:6f:3f:13:2e:25:01:1a:38:
                    ba:c3:8d:98:f9:20:0d:0c:52:e9:1e:e9:58:0b:3e:
                    7c:bd:b0:93:b7:b3:68:3e:29:7f:90:d1:d6:65:1d:
                    df:d9:69:2f:6a:14:82:34:d7:31:65:07:85:93:6c:
                    37:8b:b7:0a:68:ba:c5:0e:89:c3:58:91:ea:fd:f9:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DB:9A:C8:3E:E6:A1:82:74:8B:98:82:05:E6:AA:D1:29:EC:25:71
            X509v3 Authority Key Identifier:
                keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.100.0/23
                  103.9.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6a:4d:8d:8e:66:8c:24:29:c3:dd:52:77:38:60:3f:97:57:
         31:3c:f3:76:a7:0e:0e:68:df:21:06:d7:86:73:ee:91:ea:b7:
         3b:bb:11:64:ed:7b:c4:0a:64:56:1d:ee:16:fb:08:42:9f:56:
         eb:00:8e:44:66:0a:71:37:88:b1:f8:58:14:5b:5a:9c:8c:81:
         73:5d:bc:9b:51:0f:57:0a:35:b1:91:cf:ab:2e:b6:c0:5a:d5:
         ab:33:2a:d6:c6:83:5c:c9:04:ab:76:c2:3c:b4:be:25:1e:10:
         6b:93:f8:a4:21:05:f3:6f:76:b1:1b:9d:2a:96:17:8c:c8:66:
         06:17:0b:2c:16:ab:74:44:1f:fc:9e:84:da:af:fd:b6:51:57:
         64:61:3e:08:af:39:4f:b0:ba:cf:56:6a:33:d3:6e:4f:e1:26:
         81:77:20:48:b6:3e:ee:fb:87:c9:9c:06:bc:66:34:d5:c1:15:
         09:4c:08:57:8c:be:85:fd:bc:1d:c6:04:3f:f7:bf:57:7c:e7:
         70:12:1b:a7:75:12:e3:77:19:3e:69:21:f9:0d:ff:b9:d3:9a:
         53:0c:77:fa:28:ec:a0:55:ef:42:0c:23:07:54:51:5c:f9:48:
         6d:7e:9e:57:7c:68:30:29:64:dc:98:57:43:a9:f5:f7:63:9e:
         74:ac:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:19 2026 by rpki-client