Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15335506DD8C11F0AEC3F5743D6F56BC.roa
File:                     15335506DD8C11F0AEC3F5743D6F56BC.roa (raw, json)
Hash identifier:          DQNFdBFL+0TtFwrA9F0i05j25xzVKCNmCBUcl2do47w=
Subject key identifier:   5D:A0:C4:C1:21:02:68:D7:91:32:11:3B:86:2D:C1:7C:C4:B5:5D:E9
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       087C
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15335506DD8C11F0AEC3F5743D6F56BC.roa
Signing time:             Sun 01 Mar 2026 14:06:46 +0000
ROA not before:           Sat 20 Dec 2025 10:10:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4755
IP address blocks:        103.26.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
        Validity
            Not Before: Dec 20 10:10:17 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a447f5-635c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:39:fb:af:96:51:f9:95:0c:59:9c:0d:26:
                    ff:38:44:a1:9a:93:e3:15:a3:52:39:62:70:32:43:
                    0e:ef:54:8d:e8:20:d6:a6:ef:29:d4:d8:45:42:a7:
                    a6:71:85:29:56:89:11:34:95:aa:f8:d8:e0:3e:30:
                    52:a2:54:6b:4a:86:d5:d4:c1:c5:9c:a6:af:47:08:
                    96:d1:ba:56:4c:f0:76:82:68:35:f9:a5:97:bb:e1:
                    d7:9a:15:39:71:91:ac:ea:ed:c5:eb:59:37:bc:9d:
                    90:e6:d7:33:cd:af:73:b7:13:89:af:a9:d3:99:67:
                    a0:fe:0e:8b:c2:2b:54:a4:fe:aa:39:c2:20:66:66:
                    f7:6f:94:2c:59:4c:bc:4e:50:15:52:64:1f:5c:eb:
                    b8:04:7c:d1:82:49:e6:f1:f9:e1:b8:00:b9:a6:d7:
                    7a:5a:fc:ee:e4:84:90:ff:7c:ae:67:53:d7:32:88:
                    58:d8:54:ab:18:4f:3f:f9:09:bc:4f:f4:f2:b1:f0:
                    50:0e:04:7c:72:02:c6:91:fa:33:c1:3f:88:e2:4d:
                    ff:d3:74:43:cd:9d:09:2c:0f:22:90:2a:d0:29:7c:
                    fc:67:69:3f:77:d5:89:2c:2f:74:5f:23:98:5d:c1:
                    7c:46:48:91:eb:f1:8a:e8:d9:24:99:53:bd:35:bf:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:C4:C1:21:02:68:D7:91:32:11:3B:86:2D:C1:7C:C4:B5:5D:E9
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15335506DD8C11F0AEC3F5743D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:8c:2c:ce:42:39:a4:cc:89:6a:a1:c5:c6:55:b4:63:37:
         3d:52:8f:0a:08:ff:26:79:45:01:b3:06:65:01:43:ff:75:47:
         02:8a:00:af:88:f5:d0:1c:da:65:b0:d5:64:aa:27:fe:1c:d2:
         5d:59:f8:8f:6c:10:c4:06:e1:13:64:ab:30:90:a5:26:51:2e:
         13:b4:a8:e4:07:1a:ec:9e:99:94:1c:2e:42:44:f5:97:10:04:
         a4:3d:7c:c0:23:9c:6f:6b:26:ec:eb:73:6d:d3:5f:6c:e9:2f:
         55:84:2f:aa:c0:e3:e7:2f:a3:c7:37:51:dd:2f:95:ed:93:fc:
         a6:4c:50:c4:a1:53:6b:55:e1:91:c9:15:e9:3f:c4:c3:c3:88:
         52:f8:96:77:e8:3f:76:f6:e4:b9:53:f5:f2:0f:5f:ca:44:1c:
         07:d1:bf:f3:5c:9d:f5:e4:bf:83:db:c7:45:31:2e:aa:fd:dd:
         f2:48:44:f4:8f:d1:a2:84:d5:24:6d:ad:af:a9:41:00:74:0e:
         3f:2b:18:03:f7:eb:c4:28:bd:21:75:0e:7e:ae:ba:3d:8e:71:
         b4:0a:02:a3:f3:15:44:63:2c:53:06:4f:d0:24:54:51:4f:68:
         a8:f0:87:df:a9:34:92:23:2d:93:77:0d:cb:98:f2:58:ae:8d:
         13:e0:e8:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA0ODgxMTAvBgNVBAUTKEM0RjZDOTMwRTA5QjgxQUY1RThDMDBFNzlBNTg0MkFB
NzI3M0QxMEYwHhcNMjUxMjIwMTAxMDE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDdmNS02MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Sc5+6+WUfmVDFmcDSb/OEShmpPjFaNSOWJwMkMO71SN6CDWpu8p1NhFQqem
cYUpVokRNJWq+NjgPjBSolRrSobV1MHFnKavRwiW0bpWTPB2gmg1+aWXu+HXmhU5
cZGs6u3F61k3vJ2Q5tczza9ztxOJr6nTmWeg/g6LwitUpP6qOcIgZmb3b5QsWUy8
TlAVUmQfXOu4BHzRgknm8fnhuAC5ptd6Wvzu5ISQ/3yuZ1PXMohY2FSrGE8/+Qm8
T/TysfBQDgR8cgLGkfozwT+I4k3/03RDzZ0JLA8ikCrQKXz8Z2k/d9WJLC90XyOY
XcF8RkiR6/GK6NkkmVO9Nb/e6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF2gxMEh
AmjXkTIRO4YtwXzEtV3pMB8GA1UdIwQYMBaAFMT2yTDgm4GvXowA55pYQqpyc9EP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4OC82NTIwRkYwOEYx
RDAxMUVBQTQ4Q0VFNkZDNEY5QUUwMi94UGJKTU9DYmdhOWVqQURubWxoQ3FuSnow
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hQYkpNT0NiZ2E5ZWpBRG5tbGhDcW5KejBROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA0ODgvNjUyMEZGMDhGMUQwMTFFQUE0OENFRTZGQzRGOUFFMDIvMTUzMzU1MDZE
RDhDMTFGMEFFQzNGNTc0M0Q2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZxrYMA0GCSqGSIb3DQEBCwUAA4IBAQBox4wszkI5pMyJaqHFxlW0
Yzc9Uo8KCP8meUUBswZlAUP/dUcCigCviPXQHNplsNVkqif+HNJdWfiPbBDEBuET
ZKswkKUmUS4TtKjkBxrsnpmUHC5CRPWXEASkPXzAI5xvaybs63Nt019s6S9VhC+q
wOPnL6PHN1HdL5Xtk/ymTFDEoVNrVeGRyRXpP8TDw4hS+JZ36D929uS5U/XyD1/K
RBwH0b/zXJ315L+D28dFMS6q/d3ySET0j9GihNUkba2vqUEAdA4/KxgD9+vEKL0h
dQ5+rro9jnG0CgKj8xVEYyxTBk/QJFRRT2io8IffqTSSIy2Tdw3LmPJYro0T4Ojs
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:35 2026 by rpki-client