Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/680D797023E611EF8165F17BC4F9AE02.roa
File:                     680D797023E611EF8165F17BC4F9AE02.roa (raw, json)
Hash identifier:          aW25kEfOm3Y6z0dJwR8QkAiS+sy9HyUcqVGhB3onEl8=
Subject key identifier:   D0:3C:C2:8E:A6:D1:C8:1E:1E:C2:55:02:4A:AD:B2:1D:FE:A6:18:A1
Certificate issuer:       /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial:       015A
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/680D797023E611EF8165F17BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:09:39 +0000
ROA not before:           Mon 05 May 2025 05:12:12 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137443
IP address blocks:        103.23.148.0/23 maxlen: 23
                          103.23.148.0/24 maxlen: 24
                          103.23.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
                          rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 04:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
        Validity
            Not Before: May  5 05:12:12 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a43a92-549f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:19:5e:9a:9f:a8:21:6b:fb:48:96:42:ac:
                    77:df:1b:e2:93:09:73:7c:2b:c1:0f:23:4f:0c:9c:
                    23:eb:1c:16:c7:dd:2b:7a:48:bc:cb:19:0a:5f:0d:
                    9e:9b:99:9b:b0:fa:1c:cc:74:fc:c8:8c:ad:2c:28:
                    fe:d2:12:27:b9:61:c4:6b:64:97:9f:2b:b7:c4:47:
                    54:9c:c9:d0:3a:7f:8c:cb:0c:37:47:11:88:7c:e0:
                    72:2a:06:98:ad:0e:0e:b1:f8:3d:80:40:6c:48:12:
                    f2:a3:7d:db:75:2c:bf:03:a8:a5:84:bc:89:0b:f5:
                    7c:ce:79:75:ef:b4:df:f7:52:57:de:83:c9:ae:03:
                    8e:80:25:82:e3:91:ec:97:8a:a5:3f:8c:69:2e:06:
                    c5:f9:8a:9b:e8:e0:8c:e3:7a:e4:16:e5:a8:da:25:
                    19:e0:3e:e6:e9:49:ae:44:d5:cf:c8:1c:86:0d:27:
                    7e:7f:0e:92:ff:bc:7e:38:5c:92:b9:2f:25:68:fb:
                    de:57:28:4d:0e:fe:44:7c:98:bd:c4:10:e2:7c:21:
                    38:59:bc:01:5b:fb:69:11:98:1f:76:7f:fa:6f:3e:
                    80:ad:c2:12:fb:5a:23:1f:59:76:3f:c3:f5:22:43:
                    6d:53:49:ab:52:ff:93:37:01:5a:64:45:d2:ce:02:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3C:C2:8E:A6:D1:C8:1E:1E:C2:55:02:4A:AD:B2:1D:FE:A6:18:A1
            X509v3 Authority Key Identifier:
                keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/680D797023E611EF8165F17BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:88:8e:c8:61:e0:79:ca:6e:c9:52:7c:ae:a6:53:a1:0f:16:
         5c:32:d8:bd:98:59:6b:1e:70:0e:a5:6f:fb:32:7d:39:33:f3:
         a9:98:38:64:c8:5b:ec:b7:1e:9c:5d:79:ce:1e:12:cd:b8:f4:
         a9:90:0a:ac:c7:a3:5c:f0:ba:4a:be:41:88:b9:80:8a:04:e2:
         45:2b:d0:87:25:d2:c1:af:69:7e:62:61:ad:c8:8d:fd:f2:e0:
         ee:76:3a:db:f7:f2:22:52:c2:4f:76:de:a4:49:be:f5:dc:47:
         c4:99:bf:99:92:11:92:35:e9:10:a2:97:8a:15:05:45:d5:62:
         ac:39:25:47:f7:15:01:8d:6a:e7:5f:fe:3a:64:f9:4b:dc:46:
         5b:dc:94:9b:fa:3d:33:da:f6:b8:88:5f:09:d7:50:3f:cb:ff:
         e4:9a:26:2b:83:ba:f0:8a:52:56:1b:40:0f:10:4e:73:8a:16:
         46:33:3f:03:9f:24:bf:21:df:3c:8e:af:86:1b:82:22:75:e4:
         a6:55:68:e1:20:16:22:f7:51:ca:75:84:5a:31:0a:30:e9:e6:
         c9:5f:49:9e:7e:44:45:80:03:42:f3:aa:85:fa:a4:63:72:69:
         15:50:17:01:4f:e8:0f:77:1d:9e:0e:46:ff:d2:1e:c5:05:96:
         e0:fc:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 18:07:20 2026 by rpki-client