Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/15920FC8380111F08B5A444DC4F9AE02.roa
File:                     15920FC8380111F08B5A444DC4F9AE02.roa (raw, json)
Hash identifier:          9jTccbkw20pnQ6r9uIL5Ooc+cLFJ1j1M+K6UXDObvHs=
Subject key identifier:   C0:C7:21:BC:88:91:68:09:94:31:67:78:64:9B:02:02:01:EC:C0:7D
Certificate issuer:       /CN=A91E7BD5/serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
Certificate serial:       0324
Authority key identifier: 8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/15920FC8380111F08B5A444DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:03:20 +0000
ROA not before:           Fri 15 Aug 2025 02:08:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38493
IP address blocks:        103.169.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BD5, serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
        Validity
            Not Before: Aug 15 02:08:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a400d8-9a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:91:09:91:6e:cb:75:f4:a9:63:06:d8:72:
                    99:aa:38:f8:59:18:92:3b:f4:37:f1:fd:c8:f6:a4:
                    e3:ab:e2:79:f1:30:25:3d:a8:0e:db:5f:d8:20:f8:
                    54:dd:1f:4a:fc:bb:de:1d:4b:ff:82:a5:5a:37:50:
                    16:22:d9:61:fe:57:45:0f:fc:e4:6b:ca:91:ce:61:
                    78:16:1e:5b:92:4a:85:57:50:03:7a:b3:9a:cb:30:
                    56:4b:55:b7:91:90:9e:83:75:50:4c:8a:b7:2b:fc:
                    4f:f8:a0:81:6a:3d:58:11:8b:44:44:da:24:44:af:
                    7a:07:d7:f2:c4:57:26:87:82:10:42:aa:2b:6f:cb:
                    88:70:0f:be:76:02:e4:7f:2e:e4:7c:41:9b:e8:35:
                    55:5f:13:af:a1:9a:01:0c:38:ea:92:08:58:90:e3:
                    eb:a4:20:fc:2f:87:a3:8a:c3:3b:d1:7e:fb:dc:1e:
                    5e:8b:f8:1d:14:a4:b7:d3:cc:75:bc:57:2a:25:ec:
                    8e:43:d0:1b:4c:8d:93:7c:df:8d:e2:7f:26:bf:20:
                    97:15:1e:46:51:75:e9:3c:80:e3:1e:d2:ac:8f:99:
                    31:e3:ea:8c:4d:b1:6b:b1:91:10:60:32:2e:af:c6:
                    be:70:ce:67:44:38:d2:39:45:5e:60:39:65:85:10:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C7:21:BC:88:91:68:09:94:31:67:78:64:9B:02:02:01:EC:C0:7D
            X509v3 Authority Key Identifier:
                keyid:8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/15920FC8380111F08B5A444DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:41:78:d4:80:9c:91:a2:85:10:e5:39:fc:3a:66:86:50:1b:
         21:97:7a:a0:d1:7c:ce:d9:ed:83:c2:a4:be:13:40:e5:3b:9d:
         d8:09:1d:1d:db:5a:d9:1e:50:5a:2d:37:44:19:af:d7:90:48:
         32:c7:34:7c:32:30:76:f7:dd:87:9d:dd:c2:a5:80:e7:61:8d:
         82:39:4d:83:33:ca:5c:02:8e:73:e2:45:82:5a:61:ba:ba:5c:
         59:28:42:92:49:b9:16:a2:26:76:b1:ee:19:1c:bf:9b:68:2c:
         d2:f7:09:2d:50:b1:81:4a:b1:76:94:e2:42:d1:40:b4:1b:80:
         07:6e:53:1d:18:89:4c:86:73:25:0c:42:80:e2:af:30:da:45:
         6f:98:c0:8d:c3:52:4a:36:de:27:d3:fc:bc:f7:85:6c:ac:08:
         bd:33:33:95:51:e3:8c:37:13:f1:23:5b:92:0d:f9:20:f6:24:
         32:ef:17:d5:e0:b3:62:50:f3:24:cb:a9:11:84:24:fa:94:65:
         17:b9:72:aa:2d:fb:06:91:4f:ec:a7:bb:29:49:e4:01:1b:c3:
         21:14:aa:72:a3:67:8e:0d:a2:35:43:d9:bb:ea:19:80:96:7e:
         c9:68:9b:65:f3:ee:c5:18:66:22:8c:98:a9:66:75:7b:e1:cc:
         ae:35:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:35 2026 by rpki-client