Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa
File:                     E7EBC9003EE411ED905A3415C4F9AE02.roa (raw, json)
Hash identifier:          v5V577VCnrqD7Nr38ijVh15qoCu6a/0P2DzKbfz479A=
Subject key identifier:   15:1D:E6:3E:43:14:B6:3A:3D:87:17:25:AB:88:DC:F2:4B:CA:B6:DE
Certificate issuer:       /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial:       0915
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 21:40:04 +0000
ROA not before:           Wed 30 Sep 2026 21:40:04 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     3491
IP address blocks:        103.155.8.0/23 maxlen: 24
                          2406:60c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
                          rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 20:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325 (0x915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
        Validity
            Not Before: Sep 30 21:40:04 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd81b4-80aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:61:90:7d:c2:48:13:8f:f3:f3:45:83:25:
                    33:a9:67:0b:0c:78:19:f6:a3:71:7a:34:b2:5e:62:
                    51:eb:2f:27:f0:7f:43:d4:40:81:53:00:24:3c:ad:
                    43:2d:a6:e1:46:43:2b:47:3d:c3:25:f7:5b:15:33:
                    fd:96:4e:8a:d7:41:da:da:52:68:74:36:79:db:f1:
                    41:35:4a:6b:3b:fe:12:c0:b8:5b:37:43:b0:00:0e:
                    12:b3:52:50:26:eb:7b:c5:1b:2f:24:52:d9:df:c6:
                    68:ad:ce:08:17:e9:31:42:8b:87:7d:92:93:8a:03:
                    dd:a9:94:ac:bc:45:28:ea:d2:f3:09:3e:f5:77:8f:
                    89:1a:e9:05:7d:bd:a1:6b:26:5e:5f:bc:8e:75:7c:
                    63:7a:00:bb:6f:6b:c6:db:5e:b9:f1:64:86:db:c0:
                    7c:a0:21:da:ee:f9:15:f1:e9:71:fe:bd:0c:31:f6:
                    90:dd:de:d5:fd:5a:cf:d0:23:8d:cd:c6:3d:6f:24:
                    67:42:ce:26:72:0f:0b:03:cf:e8:82:99:f0:a3:94:
                    71:2e:52:68:3d:d9:18:d5:a3:09:56:df:0f:b8:0e:
                    5c:31:b2:0f:f7:3e:40:3b:51:22:d0:9c:f8:73:0d:
                    90:2f:4d:3d:2b:f9:65:df:38:bb:4e:45:a9:77:15:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1D:E6:3E:43:14:B6:3A:3D:87:17:25:AB:88:DC:F2:4B:CA:B6:DE
            X509v3 Authority Key Identifier:
                keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.8.0/23
                IPv6:
                  2406:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:38:a8:51:6d:31:72:98:c2:8e:d2:f8:88:ad:42:20:14:5d:
         b2:07:a8:69:33:92:37:99:e1:be:f2:4f:82:5f:76:c7:96:c9:
         92:1f:fb:9b:f9:91:45:bc:6e:ba:e6:5f:8b:df:94:b6:be:70:
         7b:0a:24:6e:d8:ba:3a:8d:3c:22:9f:7e:3b:e0:f9:2e:e5:1b:
         3c:07:da:ea:3f:b1:85:56:d1:ec:f2:9b:e4:b1:92:28:e8:15:
         04:01:86:35:e6:ae:be:41:53:5b:ce:9d:91:19:6c:6f:3d:30:
         7b:0a:1e:49:92:c6:c3:1a:94:b3:90:94:94:8b:11:c2:e1:0d:
         52:ce:a9:26:75:90:98:8b:52:b9:84:98:ba:37:54:ff:ce:7a:
         34:be:04:7b:3f:74:f8:0b:37:4e:cb:c0:7c:70:ff:7d:43:14:
         06:5c:f2:63:2b:f4:a6:3d:fd:16:73:4a:19:30:14:3e:1c:3b:
         7b:41:03:6c:6e:fc:c9:cb:05:38:92:08:ed:f2:f3:33:8c:5a:
         26:b5:31:1d:0a:2f:63:d9:b1:dc:e4:0e:81:16:e0:66:ef:00:
         5f:9b:88:a5:71:9d:19:c0:be:32:3e:5b:e3:11:d0:73:a7:57:
         c0:a1:53:ac:7e:73:06:ab:57:0c:92:37:4d:6a:54:52:fd:b5:
         56:a3:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:45 2026 by rpki-client