Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa
File:                     B7DF4CB0143711ECA137850DC4F9AE02.roa (raw, json)
Hash identifier:          gs/VsOiCfQg70V+/s3SLyTkS+1XUJY7RhDq1hFkklMI=
Subject key identifier:   FB:53:97:33:45:D8:6C:D1:A6:24:F8:99:85:C7:A2:64:34:DF:36:72
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       0862
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:02:59 +0000
ROA not before:           Wed 08 Oct 2025 21:21:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.155.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146 (0x862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912, serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
        Validity
            Not Before: Oct  8 21:21:51 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46333-ac2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:ea:09:2b:58:f7:78:42:4f:9b:4d:72:e1:
                    7e:8a:b9:27:66:14:0e:31:52:cd:31:5e:6d:dc:dc:
                    80:c4:d6:b7:0e:f5:bc:11:23:57:26:e8:79:15:05:
                    a2:5f:d7:92:5f:1c:1e:0f:11:78:43:e9:dc:9f:9e:
                    f5:0c:62:ca:c1:5d:8c:ed:c0:02:03:32:32:56:18:
                    d6:11:e5:f8:a0:f9:29:7b:c7:b2:0f:45:55:c1:6d:
                    e4:34:a0:4d:56:59:85:cb:95:0a:97:a4:44:12:19:
                    80:48:bc:f2:c0:eb:47:41:5e:37:9a:e3:eb:94:de:
                    56:6b:4c:43:f8:73:39:bc:19:c0:f9:91:fb:b9:65:
                    50:54:f3:15:b4:7f:46:ba:9f:ab:89:2d:8a:85:ef:
                    ae:24:6e:d1:f7:d0:fb:24:30:38:42:43:e5:67:95:
                    c0:26:00:0d:5a:da:17:57:b8:83:ae:b8:5f:e8:fc:
                    9a:6d:4d:54:ce:3e:ad:c6:ab:f7:e9:33:db:e2:51:
                    fb:2a:d6:0d:e6:02:c6:c6:9f:a8:7d:a1:af:f8:25:
                    87:39:24:f3:ed:f4:9e:67:47:7e:5a:f1:5b:5f:32:
                    ea:52:3f:08:a0:03:20:70:59:52:5c:60:09:79:1e:
                    6c:10:1a:c4:be:9f:a6:6f:c0:4e:85:6e:68:6f:bd:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:97:33:45:D8:6C:D1:A6:24:F8:99:85:C7:A2:64:34:DF:36:72
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:3a:ba:f5:78:55:a7:be:e7:9a:39:5f:5e:84:0c:1f:5a:
         08:5b:b7:66:1b:8b:6c:ef:1d:58:ad:3c:f5:58:59:8d:74:a2:
         2c:d9:49:25:b6:72:c0:ec:d4:c3:79:20:f5:50:8b:ad:0f:f4:
         9a:4c:24:cb:80:38:52:fa:b2:1f:75:f1:8f:4c:0d:6c:dc:5e:
         40:ac:41:de:57:47:e6:62:a6:1b:2f:b0:fe:e9:df:f1:8d:c9:
         5e:b4:f2:b3:78:70:14:94:50:f2:10:25:1e:15:da:58:f0:a1:
         40:4d:71:96:f5:ee:71:ad:19:1d:db:f0:7a:88:64:db:db:43:
         a1:4f:22:83:a8:54:45:ec:f1:f4:3d:a7:45:ff:0a:2a:c9:df:
         3b:a8:88:dc:a3:7d:9b:f4:fc:f9:a2:78:5c:e8:cd:37:0b:7d:
         cd:6c:ef:16:28:32:c9:5d:02:09:ab:f9:3f:55:d3:fc:fb:f1:
         1c:c0:d1:ab:e7:9f:a7:0c:36:10:8a:0d:25:69:89:92:43:d9:
         c0:f7:f3:55:ef:f3:d2:1c:6a:41:31:55:b7:aa:fe:42:5d:71:
         9f:dc:f2:ba:3d:f2:f8:21:4f:f0:ba:b1:04:83:4b:36:d1:29:
         7a:7d:b9:c3:cd:cf:cf:e7:fb:52:31:02:0f:9a:72:00:e7:67:
         32:eb:9a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:23 2026 by rpki-client