Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/042F9468894511F0A3D3DD77C4F9AE02.roa
File:                     042F9468894511F0A3D3DD77C4F9AE02.roa (raw, json)
Hash identifier:          2JPCll7W+SCnecua0Js+edUBLztE3p9xbTnJOr0uxtc=
Subject key identifier:   56:0F:BD:6F:47:BD:DC:4A:47:56:4C:D2:6B:02:3D:66:AF:33:3C:5D
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       0362
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/042F9468894511F0A3D3DD77C4F9AE02.roa
Signing time:             Mon 05 Oct 2026 01:49:16 +0000
ROA not before:           Mon 05 Oct 2026 01:49:16 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     153371
IP address blocks:        103.1.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 00:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Oct  5 01:49:16 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac3021b-04f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:19:6a:b9:a4:60:cb:09:24:7f:ac:05:80:
                    be:e2:8d:be:ac:8b:75:63:6a:6a:fe:a7:83:c5:64:
                    88:64:03:81:6f:cf:13:e2:af:c5:bc:b5:ed:30:42:
                    82:d8:f5:32:0f:9a:2a:35:05:08:b9:e8:f3:8a:cf:
                    c7:51:50:7f:fa:fa:62:39:b5:bd:1e:5d:90:7e:5c:
                    f1:56:d5:48:99:69:9d:c1:59:0a:23:a8:86:ed:65:
                    78:59:3c:bd:61:48:c4:a4:3c:eb:10:12:11:1d:39:
                    f6:1f:ff:61:2a:6f:1d:f3:20:4e:c1:49:64:c8:29:
                    6c:fe:43:7b:5c:17:4f:1c:00:a0:e9:03:66:00:f7:
                    66:88:49:8e:1f:f6:3d:2c:21:d8:e9:07:b0:92:49:
                    02:b9:91:53:0a:24:2a:a4:c8:f8:2c:ce:1f:c2:35:
                    22:b3:cc:96:9b:d0:c5:5a:30:66:5d:3c:ff:2b:41:
                    07:df:11:a6:bd:90:60:62:b6:bb:64:a9:16:f2:62:
                    6f:c2:3a:fa:6e:77:63:fb:74:48:69:5a:3e:ff:de:
                    b6:bf:0d:97:c1:b6:c2:31:ee:a2:6d:c8:56:34:73:
                    d7:e8:3d:af:75:85:3d:70:bd:d6:2d:03:97:11:34:
                    23:bb:15:90:50:77:04:fa:1a:79:fe:93:20:33:a0:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:BD:6F:47:BD:DC:4A:47:56:4C:D2:6B:02:3D:66:AF:33:3C:5D
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/042F9468894511F0A3D3DD77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:26:c6:7c:2c:95:ae:75:ad:ad:a8:3a:28:66:9b:d8:8e:c5:
         69:f6:16:fb:16:6c:dd:57:d7:33:7b:b4:f1:bd:26:79:ee:b5:
         d2:65:f7:cc:38:c0:77:64:4c:cd:11:15:97:d4:70:b4:fb:99:
         f4:f8:60:d7:a7:af:e6:2e:30:00:72:c2:c9:f7:32:bc:f9:d4:
         e0:fa:fd:82:8e:6b:49:29:99:58:63:42:f6:45:6f:bc:be:d2:
         32:f8:39:27:7b:09:29:a1:9e:ef:d5:91:c5:85:b4:3b:2e:6e:
         31:ed:12:e5:f6:7a:07:5e:08:0b:43:ee:95:a6:b6:a6:ba:e8:
         77:81:28:99:e8:54:69:4d:37:b0:9c:e6:35:6c:ef:c3:eb:c1:
         08:ae:28:2c:c5:a5:f4:3e:a2:d9:32:29:d6:83:31:c5:65:c1:
         c8:6e:38:20:fc:f8:ec:d7:2e:13:08:88:18:c4:fb:43:10:a6:
         4c:75:f9:78:94:66:e6:59:b7:f4:31:71:bd:bf:d7:4e:5d:e7:
         d7:08:ad:6d:4b:5b:8a:29:07:c5:59:6d:65:33:b5:da:15:55:
         85:11:66:0f:a2:04:82:03:1a:2a:67:a1:b6:3f:a3:b7:23:eb:
         0d:fc:ec:80:e0:60:7c:c4:a8:31:af:9a:04:d0:9a:06:b4:06:
         2f:06:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:34:28 2026 by rpki-client