Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa
File:                     15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa (raw, json)
Hash identifier:          lW0V6WYErMqZpOUyrSaUuEYDrwDoolUj9qHLNFcmwRY=
Subject key identifier:   2A:9D:F5:69:97:27:21:75:E0:D5:27:2D:B6:E8:DD:E8:57:D4:B7:3C
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       08D4
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa
Signing time:             Thu 06 Aug 2026 20:40:58 +0000
ROA not before:           Thu 06 Aug 2026 20:40:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        103.26.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
        Validity
            Not Before: Aug  6 20:40:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74f15a-734c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:8e:58:57:af:c4:58:a6:9b:3f:d7:c1:e8:
                    8a:36:94:d8:54:a9:51:52:58:50:2c:c8:d6:d7:ab:
                    0d:ae:93:69:29:25:da:76:00:81:6f:3e:67:2b:56:
                    8f:c4:02:81:a4:f5:e3:fb:5a:c7:0b:10:ea:11:7d:
                    cf:89:d3:5b:ba:68:4a:ce:9e:d8:b2:f7:a2:d4:6a:
                    b0:54:ae:99:3b:7b:ff:d5:8b:13:04:ed:1c:47:01:
                    39:00:f2:38:a3:78:d1:97:b9:4b:af:d2:5d:c0:b6:
                    57:8a:7b:e3:05:63:95:98:75:e2:0a:c3:88:30:b8:
                    28:58:34:aa:14:8c:e6:d3:6d:23:92:d4:2a:3e:7c:
                    ae:fb:02:e8:20:24:58:f8:28:3e:00:b5:1c:23:9d:
                    19:4f:45:81:1f:37:31:7a:73:cf:a9:f6:4e:fd:f5:
                    f8:71:8f:af:04:7d:8d:59:0b:83:1a:75:35:26:4a:
                    06:5c:da:4c:f4:fb:dc:e2:b4:29:ff:b9:d6:25:9b:
                    f0:28:4a:e4:b7:c4:78:88:e1:dd:01:0d:23:d4:be:
                    c2:bf:9f:c2:b6:9e:1a:ac:68:51:8e:d6:7b:32:a4:
                    f5:61:53:7a:1c:00:64:88:60:b9:93:e7:30:a9:f6:
                    6d:a2:e1:22:cf:f4:b0:c7:bb:36:6a:3f:a0:70:67:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9D:F5:69:97:27:21:75:E0:D5:27:2D:B6:E8:DD:E8:57:D4:B7:3C
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:bd:f4:ee:ba:fa:d6:3c:a8:d9:f0:e1:64:91:58:31:5f:5f:
         c5:b9:8b:4d:b3:40:44:a3:72:18:b2:05:d6:35:9b:11:fb:ee:
         3e:98:58:dd:18:d1:0e:c5:fd:fe:5a:e4:1e:17:7a:bc:ac:b9:
         66:93:8f:4e:df:93:a6:aa:90:45:ec:30:14:5d:7c:c4:ec:0a:
         de:09:43:45:ed:0a:a5:44:b2:49:6d:fc:44:b4:66:d5:54:a5:
         93:ad:2d:0d:71:3e:ac:75:d6:49:4b:86:d3:f4:eb:6d:af:7c:
         8f:9e:f3:ff:57:be:14:57:ec:d9:da:13:53:0d:cc:22:8c:70:
         ed:c2:6a:fd:6a:9e:9d:09:0c:5f:92:bb:8f:c6:80:b6:4c:15:
         0a:7b:1b:ca:6b:96:0d:bc:ba:85:22:43:f2:2d:ae:15:28:fe:
         a9:78:8f:24:67:2d:80:24:fe:bc:e8:e3:bb:b5:52:fc:11:bd:
         ee:72:6f:0a:54:ff:35:2d:c2:40:32:99:52:46:5d:a7:ef:d1:
         41:50:8f:47:c1:13:82:4f:2f:58:79:9e:f2:bc:12:67:de:7e:
         01:af:03:eb:e2:4d:36:82:2a:b8:db:88:fa:7e:c5:25:ba:14:
         01:39:6e:0d:ab:4f:f5:55:89:88:a6:8b:de:01:8c:75:3e:1f:
         b3:1e:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:46:43 2026 by rpki-client