Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa
File:                     87448EFE3D1D11F0A469B051C4F9AE02.roa (raw, json)
Hash identifier:          qON8fOpiAFWIBePu84NRB9cwAMAAuYNXb/sy5AFv5E0=
Subject key identifier:   E9:64:B2:E9:56:A1:94:41:4C:2B:21:32:89:9B:66:D0:C0:9A:B9:43
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0986
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 20:40:41 +0000
ROA not before:           Wed 30 Sep 2026 20:40:41 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     44259
IP address blocks:        103.72.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438 (0x986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Sep 30 20:40:41 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd73c9-8d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:41:d2:92:d2:20:ae:45:27:e0:0e:73:43:ef:
                    e0:c3:0f:f7:e8:fd:77:e7:7a:b0:68:36:d6:f7:05:
                    10:a8:ed:ef:57:92:31:9e:0b:5e:ff:7d:ef:4c:d3:
                    41:cd:2c:bd:05:d0:f1:99:a9:3b:72:45:90:53:09:
                    b7:de:3b:76:34:e7:ae:94:3e:03:45:96:b9:55:02:
                    9a:ba:eb:19:87:71:e1:d3:d1:43:e9:fb:3a:e1:78:
                    6f:df:8a:8e:ea:40:63:1f:10:db:35:76:4e:8f:98:
                    b0:c9:d1:74:e7:46:10:d9:57:ce:e4:48:fc:f7:26:
                    da:ce:6c:f5:b2:39:1f:16:e2:c3:6b:61:24:2f:8b:
                    96:d3:45:82:ef:22:7e:9d:23:c8:ce:83:a2:47:10:
                    79:0b:ef:ea:9e:de:8b:e4:47:15:46:bc:5e:74:f9:
                    5c:36:b7:5c:d1:57:dd:f1:3f:89:0f:02:43:5a:07:
                    7c:25:b1:40:7d:97:64:41:cb:3f:41:db:22:78:10:
                    ac:2e:0d:cc:86:c9:32:9a:10:ca:13:61:57:b5:47:
                    f2:36:20:b1:ce:69:98:e8:c0:96:b5:9b:51:a0:97:
                    5c:a0:20:ee:ab:6a:ca:bc:fd:5b:97:49:8b:a3:09:
                    a7:ba:0c:13:18:5f:15:65:58:47:6a:e0:1a:48:7b:
                    0e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:B2:E9:56:A1:94:41:4C:2B:21:32:89:9B:66:D0:C0:9A:B9:43
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:52:2e:fa:5a:ff:d9:ad:9b:2f:35:88:93:9a:19:73:43:fa:
         86:a6:35:de:b3:8c:33:59:cb:86:f0:e5:07:f4:1c:eb:e2:20:
         60:1a:a3:8b:85:90:62:b1:ed:f6:82:09:37:63:a5:80:c3:7f:
         b7:56:19:6b:cd:03:3f:0c:fd:eb:df:82:62:54:43:bf:09:3f:
         32:0c:2d:44:7d:1a:3c:92:18:3f:c8:56:e0:f9:55:56:0b:81:
         ec:1d:e2:91:e8:76:47:42:93:b4:0d:76:1a:58:ef:0f:dd:bf:
         c5:50:62:e9:33:1e:0f:07:51:e5:3a:0f:60:bc:0f:a8:7d:f5:
         af:08:27:4e:46:09:21:3f:52:c2:34:72:c4:a3:7f:8a:69:ca:
         9e:77:34:bf:50:84:88:eb:25:08:bb:23:4c:bc:b4:4c:0e:13:
         a7:28:48:e9:f1:e3:06:68:d9:1e:63:0c:ca:d6:57:d4:75:81:
         9d:b1:18:38:c9:a0:67:1c:a1:0d:82:72:e9:2e:ac:a9:e5:95:
         6f:52:b4:3d:9c:fb:0a:56:3d:55:04:ea:20:40:ae:ee:dc:09:
         f9:cc:de:37:52:92:45:5e:c3:b1:8b:7c:f3:e9:8c:24:16:d9:
         ab:c4:bf:32:1c:e9:69:ee:94:89:14:4e:35:65:6a:5e:f1:6f:
         71:5b:65:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:22:39 2026 by rpki-client