Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa
File:                     03476D523FB011F097B5F864C4F9AE02.roa (raw, json)
Hash identifier:          QyN/K5ddABSKpld0fDzbTZufoDAlTMcHtvLl/DeGwQM=
Subject key identifier:   B1:38:4C:29:40:7A:DA:32:3D:2F:72:B1:E8:F4:F7:C8:C0:02:D8:38
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0985
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 20:40:39 +0000
ROA not before:           Wed 30 Sep 2026 20:40:39 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     153933
IP address blocks:        103.72.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2437 (0x985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Sep 30 20:40:39 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd73c7-a33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:1a:2b:96:d2:1f:4b:06:14:48:82:0d:dc:
                    d0:6a:7f:a2:48:ca:d7:3f:82:e2:ff:2c:10:b5:84:
                    bf:3a:ab:82:c1:ea:27:ca:fa:dd:a3:f0:29:3c:0d:
                    26:43:37:b5:92:30:41:63:a7:e6:cc:c9:0e:d9:a2:
                    70:72:bb:48:2f:d2:d0:b4:37:26:84:df:13:da:a1:
                    81:14:eb:3d:4e:8e:0d:7a:4a:f9:b1:73:79:73:5a:
                    da:d0:ef:5d:b5:6d:9f:a9:b1:6b:d5:eb:44:3a:bb:
                    d7:c5:ef:c1:ab:78:89:68:e4:f0:d9:e3:12:f6:73:
                    16:e9:d5:3a:0f:da:75:c3:0d:a4:81:c8:2e:f1:d0:
                    37:c4:61:47:d1:80:28:06:ed:b0:bc:43:28:0e:0d:
                    17:7e:12:90:ef:70:0c:d5:e5:38:31:fc:17:4a:e8:
                    46:3f:ad:20:d7:c4:aa:5d:46:a9:59:52:5f:c3:cb:
                    11:c4:a4:36:cb:38:85:5a:68:f9:9f:00:71:c0:0d:
                    96:d3:db:b0:c0:2b:e1:25:f4:ab:88:06:3c:47:1e:
                    f6:54:42:a8:88:f8:23:83:b6:0f:62:4f:8c:b2:df:
                    36:fc:b3:e1:c5:7c:81:ae:98:6b:de:2d:b9:43:c3:
                    79:0b:f3:d6:8c:e7:8c:6e:9d:0c:ed:f7:f4:0c:c4:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:38:4C:29:40:7A:DA:32:3D:2F:72:B1:E8:F4:F7:C8:C0:02:D8:38
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:20:7c:69:3c:e9:b1:c0:e2:0e:09:29:67:0c:f6:8f:e9:10:
         39:a1:2a:5c:66:d0:3d:3d:fd:cf:25:5b:00:47:4b:05:53:fe:
         65:3a:6e:07:69:ad:41:29:e3:fa:29:85:c5:2d:3d:68:fc:f4:
         d4:64:15:01:fd:dd:fe:ce:f0:e4:d2:b1:d2:79:f2:d7:a4:db:
         0f:0e:09:ce:f3:4d:49:8f:80:91:7b:eb:b0:03:7a:44:9a:1c:
         e5:e3:78:c7:49:97:86:7a:46:f4:ac:a1:cf:91:e9:ce:c4:90:
         a9:1d:1b:cb:0f:ff:b5:34:a6:a5:89:b8:2b:39:b4:74:a6:16:
         95:a9:a3:72:25:4e:d8:5b:54:3e:c6:8c:03:32:a4:2b:19:4c:
         1f:65:2c:fd:50:87:e2:87:fe:20:b7:a4:80:22:d8:b6:8a:f4:
         a5:d5:6f:e5:d1:5a:36:e5:2d:bb:9b:d1:0f:7e:4e:13:52:aa:
         1a:ab:b6:0a:1e:f9:b2:bd:be:2f:b1:c6:25:49:bb:2a:2f:53:
         79:e9:b6:a7:4d:19:a9:c5:44:3b:6b:a7:ee:3b:71:49:71:bf:
         43:2d:b1:17:74:ca:33:69:20:b0:4f:83:86:da:52:66:0f:aa:
         06:f9:ca:51:c9:4c:29:6d:63:f2:a1:3a:08:b6:6d:41:5f:3e:
         bb:e2:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:22:35 2026 by rpki-client