Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/B0EBD14E80D111EFABEC5878C4F9AE02.roa
File:                     B0EBD14E80D111EFABEC5878C4F9AE02.roa (raw, json)
Hash identifier:          VAMP4UPc2LZu/AmX+3Dqslf308G408q+dugeI62XX0A=
Subject key identifier:   F8:ED:E6:75:53:E0:BF:DA:17:B8:F5:4C:F9:3B:C0:27:8C:D2:BE:AB
Certificate issuer:       /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
Certificate serial:       02D0
Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/B0EBD14E80D111EFABEC5878C4F9AE02.roa
Signing time:             Fri 27 Mar 2026 01:35:02 +0000
ROA not before:           Fri 27 Mar 2026 01:35:02 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141725
IP address blocks:        103.182.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl
                          rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171524, serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
        Validity
            Not Before: Mar 27 01:35:02 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c5dec6-33cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:20:87:27:c0:7d:9f:72:44:1d:c6:24:e3:
                    74:ee:70:e9:f2:08:36:e3:9d:b3:5c:4f:ed:f8:ba:
                    93:e9:96:85:8f:a8:03:6d:75:d4:3e:00:ef:c3:f4:
                    ad:a5:9f:60:5c:98:e1:b9:89:33:3c:43:d7:1c:f5:
                    63:17:89:99:a8:9f:e9:dd:ed:fe:2c:8b:87:e1:bc:
                    76:d9:d7:c9:f9:35:9b:7a:f7:52:ba:18:a5:d0:b3:
                    49:6a:e5:67:de:69:5e:9a:fb:c5:77:f3:09:8a:ce:
                    3a:d4:f6:7f:36:41:83:8b:49:d1:2b:4f:0a:51:c8:
                    be:01:48:f5:92:d6:9b:b4:21:1c:d7:61:f3:ab:10:
                    db:52:f1:7f:0e:c0:e4:db:ee:92:96:a7:7d:46:d6:
                    57:52:f3:b9:8f:5c:9c:49:82:20:f4:63:36:c7:5d:
                    e3:76:37:dd:ec:78:78:37:2f:09:82:2b:6d:31:f6:
                    1e:96:38:0d:70:e5:36:82:76:44:5e:bb:72:51:d4:
                    52:d7:75:8d:21:55:3f:8d:73:06:3e:82:4d:cb:7a:
                    07:fe:ff:17:34:ad:3b:84:94:6f:97:6b:36:df:2b:
                    38:df:2f:7f:96:38:bc:db:3d:dc:0f:5c:fb:6e:f5:
                    f8:b0:07:a1:02:bc:ee:70:67:54:c0:26:39:a2:e0:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:ED:E6:75:53:E0:BF:DA:17:B8:F5:4C:F9:3B:C0:27:8C:D2:BE:AB
            X509v3 Authority Key Identifier:
                keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/B0EBD14E80D111EFABEC5878C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:7c:47:f8:0a:ee:ec:e8:a1:eb:30:df:f9:9b:be:0c:88:34:
         c4:7a:ad:24:b0:e3:3d:8b:95:5a:5c:b6:6f:f3:df:c2:29:e7:
         38:2f:13:c1:fc:bc:e2:4a:31:c2:42:25:bb:81:26:de:c7:11:
         1b:de:5f:d3:a0:aa:2a:3c:b5:56:24:b3:60:e6:04:ee:55:0d:
         3e:a9:ac:df:9b:49:21:07:67:93:a5:ea:bd:ff:36:e4:08:bf:
         da:49:49:64:6b:5c:64:96:81:0c:a2:64:b9:12:38:62:9b:da:
         b2:d7:6f:86:57:66:4a:bc:87:f0:ae:b5:c2:ab:f4:6c:d8:11:
         c3:56:67:fc:bf:66:fb:c9:26:8c:3e:0d:ba:a0:5d:19:0b:93:
         51:e2:d2:44:2a:97:3b:0c:c8:c3:a7:b1:20:22:f0:09:97:58:
         52:45:68:c7:3f:59:ac:7c:1a:bd:42:ec:20:f2:3c:22:06:cb:
         e3:31:48:22:92:dc:fd:fc:f5:04:9b:49:aa:77:61:bb:f4:21:
         e3:99:72:81:4d:7b:26:83:8b:10:ca:39:ee:1e:a4:a6:58:53:
         c2:38:d0:5b:ce:6c:3d:71:5e:33:c8:16:77:ae:6e:c5:53:64:
         58:90:8c:b1:8a:dc:0c:83:ef:f2:c1:5f:c4:c1:69:e2:93:69:
         2c:45:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:50 2026 by rpki-client