Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa
File:                     459A5D3EB10F11E5A010921EC4F9AE02.roa (raw, json)
Hash identifier:          /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=
Subject key identifier:   CD:24:C6:95:E6:77:FB:E7:54:38:35:DB:20:AA:A0:39:8C:2D:B3:9C
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       241A
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:23:41 +0000
ROA not before:           Mon 18 Aug 2025 16:23:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     201755
IP address blocks:        103.15.170.0/24 maxlen: 24
                          103.15.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9242 (0x241a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Aug 18 16:23:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4680d-3c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:d4:99:b3:b4:2b:7c:f8:b6:ff:91:f4:b4:
                    7a:b9:bb:5c:a4:5f:23:95:97:f6:df:8e:12:32:67:
                    8c:bd:79:c3:55:3f:fa:24:7a:4b:57:2f:0e:b9:fd:
                    03:b0:0f:a8:d1:8c:82:ce:cb:cd:7f:aa:16:cc:20:
                    11:22:12:68:49:73:b5:98:74:6a:ad:20:7f:1d:bf:
                    ec:47:e7:1e:70:8a:76:83:a1:bf:71:63:93:4e:31:
                    8f:ba:25:30:0e:98:1f:8a:0d:06:f8:bb:61:3a:52:
                    a0:6f:62:64:a5:44:13:68:d8:3b:54:79:f8:5e:e5:
                    24:b5:0e:1c:96:a4:a1:b2:65:a5:44:65:35:71:41:
                    b5:78:30:bd:8b:0e:3c:32:69:5a:c6:34:69:bb:84:
                    e9:74:6a:89:2f:77:ae:91:84:66:bc:30:76:83:b5:
                    bf:0a:5a:6a:10:89:54:47:ce:ab:aa:5d:ee:e1:3a:
                    c3:de:32:72:b3:e0:db:19:d9:f4:80:f7:52:99:ce:
                    83:56:7d:01:78:34:10:ca:30:41:18:0d:23:4d:22:
                    45:03:86:5f:73:ba:7e:7f:03:b2:ec:47:c4:ee:56:
                    3a:67:9c:f4:68:a9:eb:0e:58:14:27:af:93:7c:bd:
                    85:ed:63:93:f4:a4:45:78:60:d0:7d:9e:ef:a8:39:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:C6:95:E6:77:FB:E7:54:38:35:DB:20:AA:A0:39:8C:2D:B3:9C
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:8f:62:bf:3c:01:f0:d4:91:a9:96:13:af:ae:59:ca:3e:
         bc:55:8d:25:7a:c0:d4:b4:90:5d:12:d6:68:fd:ee:82:60:e1:
         08:25:64:0b:5c:c9:26:60:34:fa:b4:4f:a3:5c:2b:86:0c:6b:
         70:eb:5d:54:b5:08:f0:11:6a:90:ae:78:5b:3c:f8:4f:47:54:
         6f:9f:91:03:b5:f5:bc:7e:a1:fa:3e:23:aa:93:af:7c:17:6f:
         39:64:cf:07:15:c0:aa:23:3f:14:25:34:a8:40:3b:b2:8b:c3:
         d8:ef:80:87:10:41:18:1a:6a:70:7a:87:99:a7:9e:a3:fc:af:
         a9:ad:7a:4f:02:1e:d6:ce:a8:5c:0d:8a:0d:5a:8d:1f:78:a2:
         78:c7:ed:9c:91:29:09:c1:3b:7a:de:e3:f8:76:27:fa:9d:52:
         98:1e:08:e1:81:67:22:39:cf:99:43:83:83:75:f0:47:3b:d8:
         1e:af:92:9d:90:77:76:d6:2d:47:97:4c:1c:ed:7a:e2:26:a4:
         68:df:80:e8:11:de:44:b3:b1:6e:0d:f0:cd:12:fa:b1:62:e0:
         58:53:98:8c:af:19:9d:1d:9f:16:e2:53:69:4d:b2:e0:ef:87:
         a1:8f:35:d0:16:90:ac:25:13:1c:66:dd:91:5b:12:c3:20:6c:
         e4:35:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:10 2026 by rpki-client