Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa
File:                     15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa (raw, json)
Hash identifier:          2uCbpjvfq4YvnddB40jrJriUX1Cml5veDQrnZl2hjsg=
Subject key identifier:   30:07:D8:6A:F8:95:E1:3C:3B:21:38:96:F5:3D:5B:F2:05:63:DC:5A
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       087D
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa
Signing time:             Sun 01 Mar 2026 14:06:46 +0000
ROA not before:           Sat 20 Dec 2025 10:10:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     6453
IP address blocks:        103.26.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
        Validity
            Not Before: Dec 20 10:10:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a447f6-de78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:20:20:a9:dc:3e:3a:fc:ca:7d:2e:ab:d6:
                    99:a7:1c:de:52:d3:d3:50:78:04:2b:da:28:90:b2:
                    88:33:ad:17:04:2d:03:28:ea:35:3f:62:5f:8f:d3:
                    5c:37:f6:43:c0:26:a4:12:9c:c2:c9:88:c1:1e:fe:
                    a4:56:0d:38:67:46:b4:35:7a:c5:9f:f9:50:bc:2e:
                    67:57:6d:ca:f6:43:48:b4:5f:d4:f2:60:77:d2:fa:
                    fe:cd:4c:bd:e3:ea:6c:00:01:0b:db:c6:85:78:52:
                    bc:7f:02:55:b3:5c:b8:ee:49:e1:64:47:9d:a5:d4:
                    64:e0:cb:0e:92:64:79:35:3a:77:c7:54:80:0b:13:
                    ac:eb:5c:8f:c7:24:b0:1a:0d:55:20:51:08:2c:02:
                    c7:cd:5f:db:4b:b6:c8:84:ca:6a:d5:27:ef:64:79:
                    ea:14:85:2c:77:de:51:bc:6d:36:b7:54:d6:24:b8:
                    62:db:f1:d9:4c:33:fb:ff:89:ef:15:56:60:32:a3:
                    34:68:68:11:7b:64:8e:3a:a4:af:f0:e9:41:bd:88:
                    90:c1:6d:b9:a6:0e:db:a5:3b:8f:1c:6d:09:03:26:
                    3a:2f:f3:72:c9:f3:e3:bc:1d:fd:8e:e2:73:1e:ce:
                    14:a2:be:c7:30:f8:6c:4d:d7:fb:59:a8:5e:75:2e:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:D8:6A:F8:95:E1:3C:3B:21:38:96:F5:3D:5B:F2:05:63:DC:5A
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:34:fa:28:fa:16:db:a7:e2:c2:6a:5c:52:14:5d:25:e9:
         65:ee:28:57:9d:7f:b9:c4:24:59:a6:2f:aa:03:ef:8b:80:60:
         c1:90:c8:ec:ed:6a:4f:ff:52:da:47:14:0a:9f:04:fa:0f:b1:
         9f:ff:e0:83:b3:14:54:f0:62:86:f7:55:b9:eb:12:e8:11:23:
         e8:a7:24:d3:29:a6:6f:d7:ed:70:7a:1c:7c:6e:57:95:e2:b7:
         47:62:41:f6:33:30:d9:3f:94:2a:1a:cb:4c:3c:0d:f6:89:05:
         6f:ff:61:16:16:a3:8e:87:bb:00:e1:d8:97:63:d1:4e:13:d7:
         5e:33:c5:88:2b:38:b0:83:34:a9:ef:63:2b:49:b6:e0:fd:c4:
         8e:df:4c:ab:63:6d:70:f1:5f:fd:2b:1f:9e:97:3a:15:c5:29:
         80:8e:0f:e3:60:fd:7b:4d:98:ae:fe:e7:02:fe:62:30:2e:86:
         e9:f4:cd:55:19:83:5c:b5:aa:c1:2d:f9:60:0b:3d:44:89:17:
         f7:61:0d:fd:9a:3b:76:98:35:40:0e:8e:b9:a6:fc:e2:23:05:
         f0:1d:cd:3b:c4:ae:c9:b1:87:d5:6c:e9:58:56:99:5a:e9:d1:
         c5:aa:e2:01:e4:85:8b:c4:e7:d5:00:66:24:1d:3e:60:a9:e2:
         af:ed:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:13 2026 by rpki-client