Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/EAF431DAEC3011F0A9E1B992416F56BC.roa
File:                     EAF431DAEC3011F0A9E1B992416F56BC.roa (raw, json)
Hash identifier:          pi5IdFH8BXBZqxet6PyncdKtsmtgqEe3vNhv2Ot0+1Q=
Subject key identifier:   15:9D:7B:C8:63:8F:1F:60:B6:BD:EB:CF:A7:4D:2D:47:62:7D:BB:F1
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       023E
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/EAF431DAEC3011F0A9E1B992416F56BC.roa
Signing time:             Sun 01 Mar 2026 15:07:30 +0000
ROA not before:           Thu 08 Jan 2026 01:25:29 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     214143
IP address blocks:        103.92.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 02:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Jan  8 01:25:29 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a45632-b4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:fd:2d:a7:e2:48:ae:8d:bf:4a:11:1b:10:
                    93:04:2e:52:40:97:5c:f5:8c:9d:a0:56:6a:5c:d0:
                    c1:dc:d8:07:01:93:ad:29:57:67:a5:ed:b7:c7:bf:
                    4b:cf:de:46:84:18:5b:5a:43:3e:a0:2a:8f:0c:7e:
                    b0:d2:2d:aa:1d:5c:74:4a:90:9a:7d:81:66:2a:b1:
                    43:1a:7b:a2:53:18:98:9f:ba:73:06:1f:72:eb:ee:
                    56:58:41:31:d8:ff:58:a5:93:b6:d1:78:67:59:c1:
                    ff:3c:2b:c6:c9:86:5b:d1:3f:46:66:2d:46:a6:54:
                    c6:b8:e0:98:34:97:ca:80:ce:ce:d9:34:28:d8:01:
                    41:a2:12:aa:0d:bc:2d:71:f2:d9:57:93:27:f8:32:
                    aa:2b:eb:92:ae:6b:22:f0:6a:d3:05:4d:d6:2d:5a:
                    e5:7f:b7:a0:da:29:b5:d0:d0:f1:31:cc:1d:b5:48:
                    8f:2c:a5:61:4c:e8:9f:ba:eb:ba:ba:9c:03:9f:e8:
                    e9:da:08:e6:d8:e4:70:4d:dd:94:a3:ef:b7:4f:45:
                    07:b8:2e:10:36:75:d7:17:63:3c:67:70:74:84:db:
                    df:5f:8b:a4:37:d1:b8:2d:e2:02:01:a7:9c:da:fa:
                    e6:a7:cd:f5:70:c9:c9:a8:c5:b3:1e:62:9b:5e:d1:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9D:7B:C8:63:8F:1F:60:B6:BD:EB:CF:A7:4D:2D:47:62:7D:BB:F1
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/EAF431DAEC3011F0A9E1B992416F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:33:ac:69:af:e6:c8:56:59:54:d9:ed:cb:cd:3f:11:ec:25:
         77:6c:eb:b1:fc:13:08:a1:f8:c9:0f:c5:99:c2:4d:c7:19:9f:
         97:54:be:b1:8a:27:a5:a7:7e:c2:06:5e:d4:67:d5:c4:01:5e:
         e5:15:ef:ea:b3:2d:76:85:21:e7:44:32:3e:5b:3a:97:76:3d:
         45:b8:0b:68:8b:15:48:65:7a:ff:f7:12:32:0a:c2:4b:17:09:
         44:d7:16:49:6a:99:7f:15:03:dd:78:b1:0f:c5:d7:14:a6:81:
         42:1b:21:17:62:3c:ca:05:88:24:de:e7:d7:84:e7:f5:17:dd:
         df:eb:c7:e7:a6:3c:87:c1:c7:c8:84:28:51:f3:d3:4e:fc:62:
         b7:23:86:17:23:75:e7:4a:43:c1:a6:22:e1:d6:a1:cf:89:66:
         3f:0c:bb:15:0a:e3:96:1b:4c:4f:9f:e3:06:4a:0f:cf:0b:e1:
         95:f3:4e:b0:96:4e:cc:30:7c:15:45:64:ce:3d:5a:20:d7:1f:
         92:9a:35:af:ce:61:20:01:ba:ac:02:a5:fc:c1:68:40:db:a9:
         cf:11:0e:4a:c6:63:a7:3e:e9:d7:a3:38:08:96:31:e1:ca:24:
         8e:8b:b2:ae:9a:d0:5a:55:3d:9f:a9:be:89:19:8b:07:d5:ff:
         7a:0a:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:47:28 2026 by rpki-client