Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa
File:                     15875DC27B5E11EFAB71253BC4F9AE02.roa (raw, json)
Hash identifier:          VHajbTjmwkX2RW0fXipdm5sMeEnHYksBbQ58cyoCp5s=
Subject key identifier:   D0:30:2E:DA:DA:BF:04:0B:BF:02:53:CF:B9:B8:83:02:26:A9:F2:FE
Certificate issuer:       /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
Certificate serial:       014B
Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 05:39:01 +0000
ROA not before:           Fri 05 Jun 2026 05:39:01 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     26380
IP address blocks:        45.115.128.0/23 maxlen: 24
                          45.115.130.0/23 maxlen: 24
                          103.55.148.0/23 maxlen: 24
                          103.55.150.0/23 maxlen: 24
                          180.92.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl
                          rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
        Validity
            Not Before: Jun  5 05:39:01 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2260f5-e14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:e9:b2:e0:e9:2b:b0:86:73:44:70:ba:b9:
                    33:bc:54:31:9d:87:83:5d:6c:f5:5b:86:bb:64:ea:
                    91:40:61:0c:2c:28:aa:a3:f8:76:46:51:89:79:3c:
                    40:30:44:86:33:07:5c:b5:9d:6e:70:2a:76:98:93:
                    20:dc:25:67:eb:8c:17:1c:0e:9c:c5:31:92:bd:1f:
                    49:cf:65:18:f7:f6:24:92:b8:39:fb:ae:34:d0:c0:
                    9a:a3:5f:28:35:a1:5a:f9:dd:c7:29:0d:ba:2e:f4:
                    9c:90:f2:b6:ed:ba:ee:de:eb:cf:fe:7d:52:cf:59:
                    16:dc:aa:fb:1e:46:bd:f8:03:6f:39:23:bc:1c:51:
                    fa:d4:2c:cc:e9:1c:60:73:59:6d:59:7c:4a:65:db:
                    7f:f2:6f:04:a3:80:73:6c:2c:4f:57:12:d9:e2:96:
                    60:ad:e6:b6:c0:a3:96:15:39:0a:56:59:6f:be:07:
                    4d:42:ee:6f:47:19:78:f2:b4:47:cc:b4:0b:89:c8:
                    f4:1d:77:b0:9d:ff:9d:7e:1c:38:32:6f:e8:d9:d2:
                    69:d8:89:70:98:28:17:24:b8:be:ad:eb:e8:61:3e:
                    e4:c5:72:2a:9f:db:7b:83:ed:bf:63:71:27:b5:1c:
                    92:85:93:03:25:68:d2:60:c6:27:50:f8:27:5d:a7:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:30:2E:DA:DA:BF:04:0B:BF:02:53:CF:B9:B8:83:02:26:A9:F2:FE
            X509v3 Authority Key Identifier:
                keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.128.0/22
                  103.55.148.0/22
                  180.92.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:0b:42:b3:e1:d6:d5:ab:8e:c2:0c:b9:ca:c8:89:f0:f7:
         d1:05:75:71:01:11:2a:59:a6:36:75:d0:11:69:0b:72:81:6a:
         0f:bf:73:e7:f5:a2:f3:50:21:0f:fb:62:45:ec:6b:ee:e0:e8:
         e2:95:ce:9f:62:b8:4b:32:d2:0b:a4:bd:a4:0b:4c:b9:09:ab:
         4d:bd:17:50:c6:a0:f7:65:fb:c3:9c:34:a4:2b:88:f8:74:34:
         37:9b:36:e2:d0:cf:cf:11:66:42:ea:38:bf:35:76:f5:09:e3:
         3a:43:bd:ac:c1:db:3f:13:51:4d:c9:39:88:b7:e3:07:8e:a6:
         fc:ee:09:e5:2b:40:64:9f:95:96:e7:9c:04:80:9b:44:1b:8c:
         dd:7d:2d:78:3f:5d:a1:e8:eb:60:74:71:0b:ee:31:08:52:6d:
         7e:e7:1a:4c:8e:81:ee:27:40:3b:1d:8b:13:66:64:e4:11:0b:
         ea:03:bc:fa:93:51:bb:e3:d4:45:ac:08:ad:9d:e5:bc:36:24:
         cf:f9:48:34:cb:ec:1e:bb:6d:51:23:5e:23:ee:ba:ea:14:17:
         f7:c1:35:ee:ba:03:8a:05:2b:ab:9b:57:5e:21:5d:2e:a3:d2:
         c4:17:dc:43:90:3c:15:fa:dc:a0:78:5d:c4:a7:e4:00:61:ce:
         6d:ea:5c:84
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M5QkYxMTAvBgNVBAUTKDVDQUNFNUJGNjU1QUFDRjdDQkM2MjcyQzVDNjk3RjM3
N0EwNkNFOEMwHhcNMjYwNjA1MDUzOTAxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyNjBmNS1lMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyaTpsuDpK7CGc0RwurkzvFQxnYeDXWz1W4a7ZOqRQGEMLCiqo/h2RlGJeTxA
MESGMwdctZ1ucCp2mJMg3CVn64wXHA6cxTGSvR9Jz2UY9/Ykkrg5+6400MCao18o
NaFa+d3HKQ26LvSckPK27bru3uvP/n1Sz1kW3Kr7Hka9+ANvOSO8HFH61CzM6Rxg
c1ltWXxKZdt/8m8Eo4BzbCxPVxLZ4pZgrea2wKOWFTkKVllvvgdNQu5vRxl48rRH
zLQLicj0HXewnf+dfhw4Mm/o2dJp2IlwmCgXJLi+revoYT7kxXIqn9t7g+2/Y3En
tRyShZMDJWjSYMYnUPgnXadqhwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNAwLtra
vwQLvwJTz7m4gwImqfL+MB8GA1UdIwQYMBaAFFys5b9lWqz3y8YnLFxpfzd6Bs6M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzlCRi9CRTFENEEzNDdC
NEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQZkx4aWNzWEdsX04zb0d6
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M5QkYvQkUxRDRBMzQ3QjREMTFFRkIwMjM2Qzc4QzRGOUFFMDIvMTU4NzVEQzI3
QjVFMTFFRkFCNzEyNTNCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQCLXOAAwQCZzeUAwQBtFywMA0GCSqGSIb3DQEBCwUAA4IBAQAwrAtC
s+HW1auOwgy5ysiJ8PfRBXVxAREqWaY2ddARaQtygWoPv3Pn9aLzUCEP+2JF7Gvu
4Ojilc6fYrhLMtILpL2kC0y5CatNvRdQxqD3ZfvDnDSkK4j4dDQ3mzbi0M/PEWZC
6ji/NXb1CeM6Q72swds/E1FNyTmIt+MHjqb87gnlK0Bkn5WW55wEgJtEG4zdfS14
P12h6OtgdHEL7jEIUm1+5xpMjoHuJ0A7HYsTZmTkEQvqA7z6k1G749RFrAitneW8
NiTP+Ug0y+weu21RI14j7rrqFBf3wTXuugOKBSurm1deIV0uo9LEF9xDkDwV+tyg
eF3Ep+QAYc5t6lyE
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:19:51 2026 by rpki-client