Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa
File:                     C130A016889811EE8EB03D6EC4F9AE02.roa (raw, json)
Hash identifier:          cGT1GtukriCvrd1Pi2qRMUlR6UU6oh7XqqypKNl1qDY=
Subject key identifier:   B1:6D:E3:D5:67:C1:D6:86:DC:E9:40:32:A7:70:E1:3C:0C:9E:68:A8
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       0875
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:51:05 +0000
ROA not before:           Wed 24 Sep 2025 21:12:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138197
IP address blocks:        103.155.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Sep 24 21:12:12 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45259-d2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:ab:ea:23:94:14:dd:64:0a:af:32:a1:fd:
                    37:1e:f7:d4:7d:a1:24:62:1a:ff:d0:50:35:4a:e9:
                    52:c1:80:54:d9:f6:97:68:97:dd:78:ab:b6:9d:25:
                    85:cf:36:32:b4:36:ed:14:77:24:47:41:a5:ed:35:
                    08:f3:e9:f0:5f:d3:5c:89:e9:93:53:47:05:e7:e4:
                    b3:4f:e8:ad:e2:66:b6:bc:85:64:e9:46:0e:9d:29:
                    ad:22:68:f6:dc:9c:24:f6:ff:ec:0e:bf:2d:84:97:
                    17:0e:9c:12:06:0b:a7:8c:8c:a0:12:3c:93:4c:e0:
                    12:bd:1a:dd:9e:ee:bb:54:31:89:37:4e:14:0b:4f:
                    e8:8e:4e:dd:c3:70:65:33:e2:b7:0f:cc:0e:f6:e7:
                    a6:1d:22:56:a4:b8:e0:15:3a:a2:78:a2:a4:0b:e7:
                    af:0b:a8:34:70:48:b5:c4:1c:0f:22:1a:1f:61:86:
                    e0:39:b9:69:4b:13:a5:b7:9c:0a:b8:f6:1c:ac:99:
                    56:7d:9d:26:e9:6c:e5:2f:b8:b3:f7:55:88:78:99:
                    7b:0c:26:17:92:c4:70:15:23:43:97:fa:f9:46:22:
                    38:32:8c:13:73:cb:c3:b5:f9:96:c5:e0:d9:ad:39:
                    ed:66:cb:e3:9c:16:8f:80:98:b5:81:3f:b1:31:f1:
                    b3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6D:E3:D5:67:C1:D6:86:DC:E9:40:32:A7:70:E1:3C:0C:9E:68:A8
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:98:1b:3c:9b:ea:6c:cd:fd:48:75:81:6b:4f:b2:8f:6d:
         94:6a:04:fc:c9:70:9e:50:0b:7a:b9:d5:1f:4e:e2:da:cb:9a:
         1b:f8:c7:1a:5f:1b:1a:f4:8c:f1:ff:95:97:cc:c6:54:80:52:
         03:5b:13:7e:7e:2b:47:b9:a0:b1:91:2a:32:c6:b0:00:3d:44:
         85:37:c0:ea:8c:c2:e2:14:e6:b8:28:4e:ec:58:31:44:6e:0f:
         07:83:1a:a7:d5:4a:d4:09:0c:39:f5:37:69:39:9c:70:99:06:
         ce:d6:dd:7e:1a:62:f5:c3:a1:3f:ce:b7:e0:f2:6e:49:11:2d:
         25:70:68:cb:cd:54:e7:a1:09:02:ab:fa:fb:7f:b7:7c:50:38:
         77:84:4a:2e:45:4f:99:f9:83:e5:7c:47:93:7a:09:b3:38:24:
         bf:92:66:f9:9e:4f:1d:c4:7d:c0:6c:a3:d9:10:2f:51:ee:97:
         75:fe:69:c7:16:fd:e4:85:f1:80:b3:a9:94:7a:77:51:11:8b:
         c2:e5:6e:94:b9:55:4d:87:b4:b5:03:33:e4:5f:fb:82:df:4f:
         53:31:ff:10:db:dc:d5:31:05:87:e3:2a:59:82:fc:40:2b:20:
         d2:9a:e9:43:e5:7b:59:66:58:35:b1:ca:c6:fb:b7:da:43:de:
         47:bf:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:07 2026 by rpki-client