Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/E15BCDE69AAD11ECB4212E2AC4F9AE02.roa
File:                     E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (raw, json)
Hash identifier:          aeo+0u6kj/HbCCELyJjH0LNdDHk/8Y8ZluKCvUXbjJQ=
Subject key identifier:   AF:95:1A:B5:45:16:AF:5F:D3:D5:37:3A:A8:A7:0C:D0:B0:FD:D3:57
Certificate issuer:       /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial:       0443
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/E15BCDE69AAD11ECB4212E2AC4F9AE02.roa
Signing time:             Wed 01 Apr 2026 00:32:18 +0000
ROA not before:           Wed 01 Apr 2026 00:32:18 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     139922
IP address blocks:        103.181.226.0/23 maxlen: 24
                          2001:df0:8140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
                          rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
        Validity
            Not Before: Apr  1 00:32:18 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cc6792-23e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:59:35:91:b1:a4:19:fb:26:16:63:3a:f0:
                    27:75:c5:c2:80:78:59:54:26:43:11:9d:b7:25:ca:
                    8d:2c:6f:16:fa:c7:ab:cd:9c:05:49:00:68:d4:7c:
                    ef:05:8f:f3:17:c2:79:07:fa:f2:2c:5d:2e:85:29:
                    bf:b2:f5:47:c2:df:13:89:01:71:19:4c:d6:51:c6:
                    41:c9:87:47:9d:18:1d:f3:32:ae:9e:d9:8d:51:f5:
                    de:15:de:c4:89:5e:9f:3d:f2:de:e8:90:e8:d2:97:
                    b7:cf:5b:27:a1:3b:3f:40:69:33:af:34:10:16:1e:
                    a2:9a:d3:04:ad:72:af:b6:72:d1:71:0c:85:3a:1d:
                    ea:69:b9:36:5c:5a:ec:97:ff:8f:0e:67:1d:41:61:
                    20:88:39:29:c9:c8:df:ae:7f:8a:e7:93:fb:1d:7f:
                    62:a7:e8:60:33:8e:40:d7:1c:83:7f:c7:40:aa:e0:
                    14:db:98:af:a1:3f:72:fa:3a:e6:04:d6:28:a9:92:
                    95:39:f0:25:01:ce:f1:23:e8:40:c2:8f:db:70:30:
                    34:9f:fc:a9:0f:cb:b2:b6:8c:58:cf:27:3f:52:8a:
                    2c:17:95:13:69:aa:a3:47:5d:90:49:38:c3:63:c5:
                    81:1d:60:47:40:fa:a1:c4:62:35:4b:10:05:51:41:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:95:1A:B5:45:16:AF:5F:D3:D5:37:3A:A8:A7:0C:D0:B0:FD:D3:57
            X509v3 Authority Key Identifier:
                keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/E15BCDE69AAD11ECB4212E2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.226.0/23
                IPv6:
                  2001:df0:8140::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:61:65:9e:bd:3d:dd:5f:af:f0:f2:14:22:39:38:e2:e2:a3:
         6f:63:da:8c:e6:d3:cd:02:4c:b3:3e:c6:29:a9:3e:f9:7a:1e:
         58:7a:aa:32:5c:15:a5:c4:42:64:ef:93:06:ba:c7:14:f5:5c:
         4a:6f:75:48:44:d1:73:ea:be:1d:31:2d:9f:d3:22:d6:1b:e0:
         f7:92:d6:cc:a5:50:71:f8:78:d2:7f:0f:67:0c:74:d0:a0:31:
         bd:f2:ee:e4:58:02:83:f2:6d:1d:b3:21:1c:ba:06:48:2b:a3:
         ec:de:b6:22:9a:cd:f9:1c:d7:50:9e:8a:a6:d4:02:5a:c3:96:
         0b:7c:f2:24:09:99:f9:3a:84:8e:3d:4c:7e:58:54:76:2a:72:
         a3:47:b4:81:0b:13:ab:74:a8:68:a2:8d:7e:a4:4a:22:d9:b9:
         58:92:39:b8:9e:e7:24:60:91:39:6f:a2:4c:47:a4:26:86:b8:
         8e:f8:dd:36:6a:2d:97:56:cb:ed:13:95:da:3e:fe:72:52:1b:
         b8:20:42:7a:3f:7a:86:a5:4e:7c:7e:8e:ee:a0:07:df:42:10:
         6e:d0:4f:5d:a9:db:f1:60:c6:b4:2b:9a:d0:ab:56:17:2f:8c:
         d7:46:13:eb:bd:bb:50:08:68:db:1e:dc:04:dc:02:9d:23:e6:
         6c:0a:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:27:19 2026 by rpki-client