Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/E8716FD4EA3511EF89116C52C4F9AE02.roa
File:                     E8716FD4EA3511EF89116C52C4F9AE02.roa (raw, json)
Hash identifier:          0FCY4nM/xiPTvsko2lPHjPRBl+NB5R5liczHspFuXXU=
Subject key identifier:   EA:42:0E:22:4F:A0:05:EA:65:4C:6E:3D:8A:A5:E9:57:F9:93:19:66
Certificate issuer:       /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Certificate serial:       D5
Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/E8716FD4EA3511EF89116C52C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 06:43:01 +0000
ROA not before:           Tue 03 Mar 2026 06:43:01 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     12008
IP address blocks:        203.119.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
                          rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 05:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800
        Validity
            Not Before: Mar  3 06:43:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a682f4-f11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1f:97:4b:a6:2c:76:dd:1b:8f:1a:32:f4:1c:
                    3e:56:20:75:7f:aa:be:02:da:4c:de:09:eb:18:1c:
                    14:0a:bd:18:7f:4f:3f:ba:0c:73:d6:cd:ec:7a:85:
                    ea:30:a3:f7:a5:30:35:a5:00:e1:26:b4:97:0e:ef:
                    3f:ab:9c:00:83:22:a4:d8:ba:4c:a9:97:38:d9:11:
                    70:a1:36:d4:da:3e:d8:91:1a:6a:8c:32:3b:53:0e:
                    49:da:39:f9:d1:80:c5:26:77:9e:eb:76:6f:ec:54:
                    a5:3d:9a:6c:f5:ac:aa:c1:ce:a1:5a:85:60:9f:c1:
                    29:32:f8:04:1e:37:e7:c5:8f:f5:a4:f5:a2:7c:90:
                    b3:ff:4d:70:9d:9c:56:08:8f:f7:75:2f:50:47:93:
                    1c:55:af:cf:32:e5:9e:f3:fa:0b:d1:86:91:49:14:
                    ac:34:09:f0:d9:e7:7f:1e:b2:fd:5f:d0:28:9f:30:
                    fa:9a:9e:e0:06:1c:a9:df:88:06:fa:fa:2d:fb:11:
                    6b:85:1b:66:ea:58:cf:07:12:cd:07:00:8b:7d:6f:
                    cb:26:80:40:c8:8d:97:12:2c:be:27:61:aa:65:67:
                    66:30:bb:ab:d3:75:4a:5e:4a:8e:d6:66:2a:bf:03:
                    bb:82:b0:e2:d6:78:8f:20:f7:ee:5b:c0:a3:44:44:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:42:0E:22:4F:A0:05:EA:65:4C:6E:3D:8A:A5:E9:57:F9:93:19:66
            X509v3 Authority Key Identifier:
                keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/E8716FD4EA3511EF89116C52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:70:0c:d3:d8:0d:ab:54:9e:09:26:64:95:90:93:ba:de:46:
         26:e3:dd:26:09:65:69:c2:50:e5:3f:5d:6e:1d:af:2b:0f:13:
         0b:5c:86:47:36:92:a0:ca:70:11:03:4e:d5:ce:b9:97:ac:57:
         c6:d0:b2:5d:1c:33:0b:24:3e:b5:ff:b5:fd:b1:86:4d:21:93:
         78:a1:df:54:f9:31:44:01:1b:aa:12:bf:06:32:b8:9b:65:59:
         d5:a8:86:61:00:3b:fd:fb:3b:75:95:70:62:1f:88:ad:ae:79:
         06:86:1b:05:13:83:13:58:ea:a8:ed:22:3c:04:50:16:c8:bb:
         7b:e6:d8:d0:2f:5e:00:cc:db:bb:b1:c2:90:d6:77:7c:24:ac:
         ec:5c:67:1d:65:74:67:b9:f3:2b:d3:95:72:f5:00:0a:3a:d0:
         40:c6:99:d6:03:f1:cb:a0:50:75:6a:f7:09:34:42:7f:94:1f:
         34:8c:d0:6b:4a:7b:bd:5e:8b:95:a5:29:48:ed:e5:70:16:0b:
         54:18:65:46:a3:0a:02:16:e5:9b:e4:a3:ad:5e:c3:c9:c6:4f:
         53:99:f5:4e:1f:87:6f:02:f5:52:a7:78:3d:f4:7a:4a:52:42:
         b3:27:6a:98:52:87:33:b0:31:6d:58:4c:74:27:6d:a1:db:fd:
         1c:8f:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:57 2026 by rpki-client