Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/A155911C4BCA11EEBC8C8B82C4F9AE02.roa
File:                     A155911C4BCA11EEBC8C8B82C4F9AE02.roa (raw, json)
Hash identifier:          ul9EAOzO4X5WSgm0Um4L21nKCG4Fzp+91sYnSwxatf4=
Subject key identifier:   5F:A8:D5:21:CE:EB:29:71:C9:7B:D5:77:F0:4E:4A:DB:12:69:2A:E3
Certificate issuer:       /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Certificate serial:       01E5
Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/A155911C4BCA11EEBC8C8B82C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:16:42 +0000
ROA not before:           Sat 13 Sep 2025 04:09:54 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150288
IP address blocks:        103.126.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
                          rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
        Validity
            Not Before: Sep 13 04:09:54 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4666a-a403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:73:6c:42:6f:33:12:fa:2f:43:1f:a8:f3:
                    f3:a5:f7:33:4d:79:f2:b4:5f:de:bb:a4:02:c8:bc:
                    34:08:66:5d:3b:8f:eb:2d:57:da:d7:a3:6f:e2:a3:
                    78:34:7b:ce:cf:48:86:3f:04:45:a1:a2:23:2b:de:
                    31:57:73:3c:2c:46:08:0d:53:f6:93:76:69:c4:7f:
                    e4:d9:4c:e9:4b:ee:41:1a:08:7b:92:5f:13:0d:61:
                    b3:98:d9:d3:74:ba:a7:39:f2:75:89:2b:41:b2:e8:
                    b0:c4:d8:f0:80:2e:4a:1e:49:a5:b8:20:bd:20:ab:
                    91:80:c8:80:0b:f9:ee:e6:ff:2a:e4:c3:5c:c7:e1:
                    f3:d6:05:4e:17:41:02:71:b2:e5:40:a4:d1:7e:33:
                    9c:03:5c:db:26:e8:3f:91:70:50:4c:d6:33:b7:e3:
                    16:42:9e:fe:33:ad:1d:1f:c0:7c:0b:b0:40:2f:da:
                    27:b6:fe:dd:76:e9:b1:00:53:55:5a:b4:30:f3:e2:
                    e9:5c:af:58:ff:3e:47:01:e5:67:37:48:d1:62:6e:
                    f4:b0:4d:5b:ea:c5:4f:e6:dc:8f:09:fa:4c:a3:6d:
                    3e:3f:6d:2b:5c:71:57:92:85:6b:5f:12:19:43:e2:
                    3e:33:53:9a:46:36:9e:05:9d:79:ab:e0:10:2b:fd:
                    67:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A8:D5:21:CE:EB:29:71:C9:7B:D5:77:F0:4E:4A:DB:12:69:2A:E3
            X509v3 Authority Key Identifier:
                keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/A155911C4BCA11EEBC8C8B82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:65:73:c1:c9:c5:97:7c:42:e0:6d:76:71:6f:5a:e6:54:8a:
         07:ba:c4:6a:51:27:7e:9f:9a:7a:31:cb:35:51:38:4a:e8:79:
         a7:f7:03:2a:49:9c:71:e3:bd:8b:97:9e:da:4b:d0:f1:cf:be:
         b5:a0:e9:3d:aa:de:bc:74:ac:4e:70:29:bb:8d:6c:99:3b:87:
         b4:be:05:85:e8:2e:da:cd:1e:e1:ab:83:db:69:c9:f8:5a:c8:
         59:bd:f8:6c:41:ae:07:a2:46:3c:17:28:d3:ab:77:16:54:e7:
         34:03:aa:94:54:6f:95:03:7a:b0:8e:59:26:4f:e6:d6:bf:d5:
         71:e1:9f:7a:2b:8b:9e:07:38:db:a6:ca:c0:74:a2:59:b3:1a:
         9f:c7:5f:b0:14:65:01:9f:99:18:b1:4d:aa:e5:74:9f:bc:e0:
         36:69:96:66:30:26:d2:f1:48:85:5d:fb:bd:6c:55:4d:32:dd:
         68:ac:c4:de:ff:23:96:4c:9c:c8:f8:fd:42:5f:08:ee:a5:6e:
         75:26:83:50:74:bb:46:1c:46:23:a4:3b:01:f6:95:e4:6b:d6:
         ce:7c:b2:d1:e5:c8:65:18:79:d8:88:46:55:6a:9c:1b:db:ca:
         a1:47:d9:29:85:4c:5a:4d:f8:de:80:f5:54:e0:1b:d4:f4:9c:
         3e:be:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:18 2026 by rpki-client