Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa
File:                     A26E4F16C13411ECA5838429C4F9AE02.roa (raw, json)
Hash identifier:          Q8R/e0WkRoUvhV/duXOH10RMzYjCZjcCedO7vhrkXRQ=
Subject key identifier:   AB:CE:AD:4D:4A:9A:B0:08:E5:EA:15:72:E7:85:70:ED:91:8A:13:02
Certificate issuer:       /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Certificate serial:       03FD
Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa
Signing time:             Wed 27 May 2026 01:31:10 +0000
ROA not before:           Wed 27 May 2026 01:31:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     148968
IP address blocks:        103.186.156.0/24 maxlen: 24
                          2001:df0:ab40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
                          rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
        Validity
            Not Before: May 27 01:31:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a16495d-0955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:b4:6f:60:10:ce:5a:0e:15:3b:ce:49:06:
                    79:8c:52:f0:45:f0:21:a3:b1:21:9a:85:44:c4:56:
                    ae:50:e0:8e:75:5d:be:3a:e3:66:74:10:e5:c4:9e:
                    ee:50:94:70:c3:b9:26:03:d2:08:4c:1f:cc:f4:79:
                    33:0d:05:c2:4d:f2:41:cd:f6:1e:d2:b2:df:6c:16:
                    ed:72:d1:d1:f2:bf:83:1a:87:fe:47:63:1f:0e:c1:
                    54:6c:20:e1:11:33:fc:c6:ed:1c:58:04:f2:1b:42:
                    d2:43:a6:2d:bb:aa:16:9e:de:f5:0c:3c:bf:14:24:
                    9d:97:19:d6:77:3d:71:b6:45:06:4e:15:a8:25:1a:
                    8c:79:00:16:23:99:1b:f7:52:20:60:99:16:de:cd:
                    b9:49:da:98:d7:6d:67:31:5c:4a:9b:0b:d6:02:bd:
                    c1:5c:e6:9b:cd:cd:2c:0b:b6:7f:f4:4d:00:a8:77:
                    3c:24:cc:45:64:96:48:9a:1f:06:ab:c0:3f:b7:d5:
                    47:de:4f:65:de:24:ac:bd:54:f9:fe:95:b8:8d:c0:
                    7b:a4:f8:15:00:86:41:38:8d:93:f3:4a:23:31:2b:
                    38:5f:09:6d:13:56:a3:8a:28:46:2e:33:bf:49:5d:
                    02:c9:09:2c:de:84:b0:4d:7b:03:7f:55:ee:08:e7:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CE:AD:4D:4A:9A:B0:08:E5:EA:15:72:E7:85:70:ED:91:8A:13:02
            X509v3 Authority Key Identifier:
                keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/A26E4F16C13411ECA5838429C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.156.0/24
                IPv6:
                  2001:df0:ab40::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:d1:7e:ec:13:b6:58:9c:f5:2f:79:c8:01:7c:fc:99:45:97:
         30:86:61:4b:45:fa:fe:e8:9a:8a:1a:79:59:6b:bc:e5:0c:ec:
         e8:71:8b:8d:b5:af:fa:e4:78:14:e7:58:31:1a:4e:10:f6:a8:
         7d:f6:97:fe:e7:a9:46:27:ba:56:98:a3:3f:92:3e:62:30:c1:
         37:43:87:2d:e3:a5:c9:44:dc:cc:71:32:7e:6a:60:71:c5:b9:
         25:8d:cd:24:45:1d:53:56:4c:71:2a:78:7b:1d:8f:d8:89:6e:
         8b:cf:f1:9a:90:e3:5e:54:51:1f:f9:32:17:4f:c4:7f:b2:29:
         33:84:a2:ad:6b:65:46:82:04:78:28:78:86:78:9d:87:fb:f2:
         77:12:c5:5e:35:e4:71:06:9c:57:f0:09:91:05:91:d1:28:25:
         52:9a:9b:00:94:e7:57:43:1e:48:f6:47:c8:42:8a:79:84:fc:
         3f:fa:ec:59:92:90:28:96:10:74:00:bc:66:86:0b:71:fa:f5:
         2b:b6:83:6c:69:1d:83:cb:e1:3f:92:60:7d:65:ed:f7:9b:90:
         e9:8e:99:f3:f5:96:11:b3:9e:ae:72:70:a1:1a:43:b4:d1:a8:
         20:d4:c9:31:ea:8e:98:78:1d:ee:87:32:25:a3:11:5b:9f:10:
         61:01:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:33:33 2026 by rpki-client