Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa
File:                     15875DC27B5E11EFAB71253BC4F9AE02.roa (raw, json)
Hash identifier:          5QPe8ncIbmOtpv/0UagKDEsBkTPo/vp1GJpaE7hkl9I=
Subject key identifier:   90:56:2E:01:9E:07:12:81:65:7F:EE:29:F4:36:46:A4:72:65:FB:12
Certificate issuer:       /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
Certificate serial:       017E
Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa
Signing time:             Wed 09 Sep 2026 02:09:07 +0000
ROA not before:           Wed 09 Sep 2026 02:09:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     26380
IP address blocks:        14.102.177.0/24 maxlen: 24
                          45.115.128.0/23 maxlen: 24
                          45.115.130.0/23 maxlen: 24
                          103.55.148.0/23 maxlen: 24
                          103.55.150.0/23 maxlen: 24
                          180.92.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl
                          rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 04:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
        Validity
            Not Before: Sep  9 02:09:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6aa0bfc3-f68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:fc:15:12:36:b0:6a:92:a5:0e:ec:be:1a:
                    11:24:28:2e:50:7b:45:f5:4a:20:28:0b:4a:f9:89:
                    2e:e6:13:c1:af:e3:37:1b:6e:e6:2d:22:6c:c0:b0:
                    6f:e9:63:34:94:d0:1d:2c:87:cc:b4:dd:7c:80:82:
                    65:6b:55:13:06:0e:eb:36:63:4c:76:90:af:f0:fd:
                    54:a9:54:ad:ad:79:1e:e7:49:86:da:55:0f:b3:0e:
                    02:1b:4a:f8:cb:fd:04:42:43:1d:22:65:17:8f:52:
                    20:ff:f5:67:19:5e:ed:7b:56:ea:98:c8:a1:ed:4b:
                    93:67:b9:ae:7f:5f:58:e8:ae:45:04:06:9a:78:53:
                    30:88:48:47:19:cd:26:ff:e8:34:c3:0b:19:bc:6a:
                    0a:02:a1:fb:7b:63:02:a2:f0:2c:63:64:24:a1:d8:
                    54:df:e7:28:8a:3e:18:b8:4b:13:9d:a3:e2:fb:29:
                    9f:84:7e:38:8e:20:89:f3:61:f5:22:c9:57:46:ca:
                    68:03:31:f4:96:08:c7:83:8c:af:07:99:0b:0f:9a:
                    b4:10:2c:f5:bc:68:5f:2a:32:55:e4:4e:55:b8:6b:
                    51:7b:6d:3e:a1:3c:80:dd:a8:df:ec:07:00:99:d2:
                    f7:e6:7a:f2:8a:45:00:ca:10:ae:26:0f:ae:2f:eb:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:56:2E:01:9E:07:12:81:65:7F:EE:29:F4:36:46:A4:72:65:FB:12
            X509v3 Authority Key Identifier:
                keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.177.0/24
                  45.115.128.0/22
                  103.55.148.0/22
                  180.92.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:b2:bf:a6:c4:e8:fb:be:65:9d:90:45:54:cd:b9:b9:ab:78:
         20:25:f3:f4:22:df:08:f8:82:04:6a:0d:a7:89:dd:85:ef:08:
         ce:c7:48:b6:d5:ae:18:3a:2a:c4:39:b7:f8:c9:34:01:06:40:
         87:3b:93:d9:3d:81:a8:2f:03:50:00:b7:fc:9b:20:1e:2c:95:
         47:b5:9d:d6:dc:bb:c6:13:39:f9:b1:4d:6b:56:07:0d:7d:45:
         bb:25:99:8e:13:54:a8:bc:8e:56:21:93:ec:ff:ad:e2:8d:ca:
         91:69:4b:34:83:68:c5:c0:1d:68:c2:94:0a:e1:31:ce:9d:1f:
         c1:7a:f6:b6:8d:a3:69:ed:f0:f5:27:c2:4c:0f:c0:11:b0:8e:
         40:53:4d:b9:bb:f8:b5:43:47:82:5b:0d:0b:03:ae:78:61:be:
         cc:16:1c:f0:0e:ee:02:5d:aa:6b:cd:88:72:28:3f:4a:c5:1e:
         a8:f6:cb:d1:b3:69:07:c5:51:c2:07:0e:d0:1f:6b:16:6e:b0:
         a1:db:12:5e:dc:55:47:60:ec:79:84:4e:a4:56:f8:a9:82:16:
         54:56:4d:31:4a:ca:3e:f9:10:95:f1:28:c7:bd:ec:10:63:59:
         21:3f:86:7f:c8:dc:6a:ab:18:36:d7:5b:8f:a5:0c:18:1b:e7:
         5f:fd:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:11:13 2026 by rpki-client