Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/1F93F36C7B5111F19E0CA2E058A30FBC.roa
File:                     1F93F36C7B5111F19E0CA2E058A30FBC.roa (raw, json)
Hash identifier:          Kr3DzXiT+leiY0m4RBqMqUGNVMGtkwQc91Vxd0uKkpU=
Subject key identifier:   67:A6:91:E4:DC:03:F0:32:EC:A1:04:98:39:AA:AD:69:77:12:AD:98
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0983
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/1F93F36C7B5111F19E0CA2E058A30FBC.roa
Signing time:             Wed 30 Sep 2026 20:40:36 +0000
ROA not before:           Wed 30 Sep 2026 20:40:36 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     146943
IP address blocks:        103.72.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2435 (0x983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Sep 30 20:40:36 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd73c3-881b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:44:73:80:f6:8a:5d:f0:6f:1f:45:60:43:
                    24:f1:5e:69:82:65:ac:77:b2:47:32:ad:f0:6c:8b:
                    24:6c:fa:71:91:2d:45:38:b8:f8:20:3a:5a:6e:ff:
                    25:ea:94:d3:e3:f1:dd:31:e2:c3:8e:c5:e6:47:d6:
                    2e:95:93:31:da:73:aa:a9:c3:2d:d5:09:a4:07:94:
                    0c:c9:73:7e:f3:07:c8:6c:49:79:5c:f6:a0:ef:ce:
                    4c:fb:ec:95:f2:42:94:38:0f:80:e6:7c:95:eb:fa:
                    32:50:72:9b:dc:f8:a5:8a:09:08:39:7b:18:a2:8a:
                    3d:6c:ad:f6:88:83:df:bf:4a:cb:75:75:35:97:5b:
                    b5:bb:72:b8:e5:ed:64:82:29:f3:e3:35:2e:fd:43:
                    11:8e:f2:0d:5a:db:2c:3a:cb:42:5f:28:7b:48:35:
                    eb:64:ef:c1:4d:18:ca:7d:ef:c7:f7:17:f9:56:eb:
                    7f:b6:08:93:71:fa:43:5a:9c:49:9c:91:0c:6f:f0:
                    d6:47:b3:9b:a7:f2:4e:2b:ee:73:90:a7:0a:28:d0:
                    7e:12:d4:0f:57:62:72:9d:5e:a3:a5:1d:89:6f:be:
                    df:bd:93:83:4a:db:5a:98:f6:3a:e9:6b:51:1b:37:
                    e5:d4:95:3d:a7:d9:3f:6f:87:e7:84:5d:5b:b2:03:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A6:91:E4:DC:03:F0:32:EC:A1:04:98:39:AA:AD:69:77:12:AD:98
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/1F93F36C7B5111F19E0CA2E058A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:03:16:8e:f6:b7:fc:96:78:f0:9d:7d:08:80:58:35:fb:bc:
         55:9a:71:0d:d8:72:aa:41:ff:4e:b1:44:d9:f4:64:b2:46:46:
         60:23:db:8e:d7:4d:d7:03:9d:ec:d3:15:74:0c:eb:c9:f8:ce:
         34:21:a6:f0:8d:4a:25:86:1e:24:cb:78:46:71:5d:b3:5f:f5:
         b4:ee:f9:ab:5b:82:b5:59:54:ba:f6:4a:04:d9:ed:62:82:2a:
         0d:b1:3c:a7:6f:83:75:fc:c6:b7:d7:45:6a:68:4d:24:59:37:
         02:43:1d:77:1c:7d:30:9d:bc:bc:ac:a4:c4:7c:42:1b:05:38:
         37:6e:db:c5:86:3e:b6:6a:e1:31:91:b4:f5:1e:89:82:d3:d2:
         51:18:40:5a:38:20:34:28:5a:a1:11:bf:d7:bc:f6:91:3a:a3:
         09:06:84:2a:20:bf:a7:79:e4:e5:87:d8:0b:2c:88:35:96:58:
         d0:24:10:7e:f3:81:8b:41:41:10:12:18:6a:b7:80:97:42:d6:
         17:20:78:ed:85:53:ec:3d:95:55:44:8c:df:29:03:37:37:42:
         4a:3d:a4:e3:b1:4b:8d:8f:d4:1a:7a:ca:f2:4e:1a:28:a1:59:
         33:6c:58:8b:46:e4:70:4e:1f:79:0d:1d:c8:33:b2:9d:54:0f:
         b9:5a:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:22:22 2026 by rpki-client