Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa
File:                     A045C92CB46611EEAFEE8758C4F9AE02.roa (raw, json)
Hash identifier:          GGi4WKr5J/co8rUxY6XhZiQWpGv4cgJGL7H5da+yC00=
Subject key identifier:   84:B0:AD:FF:36:4D:5D:66:23:DC:D7:4E:24:42:5E:DA:28:20:A9:17
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0215
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:55:39 +0000
ROA not before:           Thu 17 Jul 2025 04:40:50 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        103.115.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Jul 17 04:40:50 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a46f8b-5241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:09:65:69:df:c8:8c:6e:6e:54:53:14:3b:
                    90:f3:5f:17:a2:19:73:0b:fd:d6:e8:90:a1:4a:c9:
                    3b:91:4a:ac:84:92:99:79:d6:64:f3:64:6f:53:8b:
                    5f:29:58:fe:75:a9:bc:cf:6e:d4:d5:8e:42:fa:20:
                    4d:f3:53:76:20:7d:bf:f6:af:6a:7c:30:99:5d:17:
                    9b:64:f5:fc:de:e7:5f:7b:fc:4d:33:06:04:60:2a:
                    3c:33:1e:1a:2e:6c:c5:02:08:1b:b7:f3:81:59:97:
                    e9:47:f5:84:b4:65:cd:7c:d5:aa:4f:d9:af:0e:b9:
                    27:8e:c3:87:9b:86:e4:ee:9a:29:ef:c0:0f:fa:0d:
                    6b:81:f8:6d:07:fa:eb:f6:36:25:7d:3d:c0:52:db:
                    44:aa:46:8a:10:43:bb:1d:60:f1:dd:b7:47:65:c4:
                    31:92:e6:b9:18:5b:c4:b2:49:93:07:b3:39:8f:f9:
                    38:a1:eb:6b:a1:3e:d6:8d:f3:ec:05:06:5b:4d:18:
                    45:4a:03:46:45:68:1c:d5:e3:1d:98:65:9a:97:54:
                    1b:e0:ff:a3:48:53:5d:5b:46:f5:f7:96:5d:4d:81:
                    a6:2f:a8:9f:81:c8:34:5d:b3:24:d5:15:da:70:87:
                    92:09:34:15:53:c0:59:37:60:dc:a0:b2:20:cc:ac:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B0:AD:FF:36:4D:5D:66:23:DC:D7:4E:24:42:5E:DA:28:20:A9:17
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:28:25:bf:b5:fc:55:78:5f:5f:a7:73:e2:8c:f4:c5:10:
         55:c1:96:0b:f2:83:84:35:9c:f8:8b:11:06:55:98:cd:d5:4d:
         87:51:dc:31:f4:a3:69:9a:d4:7a:76:f7:57:e2:84:02:6d:75:
         1e:26:b9:1b:83:7d:65:0c:ed:c5:d7:be:89:e0:ee:be:90:a1:
         e7:33:25:47:ab:8d:fd:12:d6:37:d5:b9:fd:d6:a2:1a:7e:a1:
         23:e8:2a:1b:ff:9f:9a:aa:bc:d7:e4:df:b4:17:dc:04:63:23:
         57:4b:09:5a:93:8a:ee:84:df:1d:71:4b:39:ed:ea:2e:0d:d8:
         cc:0c:fe:37:0e:c7:6c:a0:89:0f:71:65:3c:77:18:a7:42:40:
         0c:b8:fc:75:14:00:cf:15:0a:f0:27:56:f9:00:c6:85:ae:31:
         e7:b2:f7:f8:bb:b8:be:2b:bb:ad:12:ab:5a:7e:89:3f:9e:3a:
         c7:ed:df:84:cc:72:41:f3:37:0a:50:ba:87:52:22:04:b4:f8:
         45:ef:ea:63:6e:0c:bb:27:90:25:72:77:16:ec:c9:aa:78:06:
         e5:46:e9:52:7a:72:b0:8f:e1:fd:21:de:2a:56:78:ec:d4:27:
         d0:5e:86:00:85:11:7f:ab:ff:fa:af:64:61:46:32:a2:1b:9f:
         80:0b:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:02 2026 by rpki-client