Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F7B8727E41CA11EC9262BD80C4F9AE02.roa
File:                     F7B8727E41CA11EC9262BD80C4F9AE02.roa (raw, json)
Hash identifier:          4BaT2JTA9bjMqnRuq+BaRHn7mTeNRu7GRwmCLX+HA9c=
Subject key identifier:   D5:D9:84:16:17:F1:77:06:D1:55:97:D4:15:71:F4:71:CB:6A:53:51
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0BA8
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F7B8727E41CA11EC9262BD80C4F9AE02.roa
Signing time:             Wed 12 Aug 2026 19:38:48 +0000
ROA not before:           Wed 12 Aug 2026 19:38:48 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134578
IP address blocks:        103.98.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984 (0xba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 19:38:48 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ccbc8-e882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:38:95:a8:f3:a0:d5:0b:f1:22:84:6e:dc:
                    33:1f:94:54:51:33:c6:7e:78:c0:e0:d1:5d:e0:80:
                    e8:2e:e8:4e:70:4e:4c:51:e6:6d:c2:82:ac:24:3c:
                    08:27:fa:35:69:a8:53:ca:d1:f4:5d:24:f8:cb:2a:
                    b8:f0:78:03:fd:db:b6:76:79:b6:a2:e8:21:ec:b3:
                    13:7d:3f:96:21:3e:4a:97:49:ba:aa:6e:0c:a5:e6:
                    f6:f0:fe:46:43:4a:57:04:ca:19:5c:b2:43:4a:d9:
                    5b:ba:d3:52:3f:35:ed:14:a3:68:70:bd:c6:82:04:
                    36:9e:08:31:5e:03:b5:3e:d0:7e:26:07:35:8c:f1:
                    25:d0:ac:7a:b0:5d:fb:7f:89:3b:f0:96:7a:dd:f7:
                    08:57:6e:65:6b:6b:30:cb:e5:96:82:f1:1a:71:5a:
                    91:63:ab:9d:56:d4:c9:84:2d:28:dd:1c:e5:4e:bd:
                    73:78:02:66:a1:2f:84:ff:f7:96:05:23:b8:34:6d:
                    68:31:54:f6:52:d1:89:8b:b9:5d:37:21:4e:28:1b:
                    87:f0:c2:4b:0b:b9:cf:cd:06:a5:18:3b:dd:34:51:
                    98:a5:1c:4a:b9:fd:1b:92:87:93:0a:dd:75:8f:b4:
                    6b:32:50:c0:4a:26:a3:db:14:18:5f:5a:a4:89:a0:
                    62:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:84:16:17:F1:77:06:D1:55:97:D4:15:71:F4:71:CB:6A:53:51
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F7B8727E41CA11EC9262BD80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d9:33:27:3f:e3:f2:06:29:80:9b:f0:1f:fa:e3:c4:b5:89:
         97:9b:30:ce:c1:36:75:d9:38:f2:8c:b9:d3:de:7b:71:13:3b:
         9b:07:bc:7b:7a:22:06:5a:86:15:79:5b:e3:dc:b2:f8:06:f5:
         22:b9:20:6d:cb:47:08:bf:a6:e9:c7:9b:e7:8f:30:21:cf:c5:
         09:cc:b3:ec:40:9c:dc:ca:f0:fd:de:97:8c:cf:d3:3e:c3:2b:
         a3:af:dd:c1:ee:ff:a4:20:a6:78:f1:f3:3d:28:36:d5:97:ea:
         98:e8:e6:d3:ae:49:77:22:db:db:11:84:fb:10:9d:5a:bd:ad:
         fe:62:73:60:02:48:aa:ed:cd:a9:52:b6:a3:9a:13:9c:c4:46:
         68:ce:79:f4:35:31:3b:46:78:23:0a:65:76:10:aa:53:e6:72:
         13:7c:51:41:e8:68:5f:bc:02:67:51:ae:a8:f4:d6:f6:8a:1e:
         91:23:69:07:09:2c:0c:bc:5f:94:fa:07:3f:7c:37:97:8b:2f:
         cb:98:81:c3:bb:4a:e4:8f:72:cf:b2:a7:98:27:8a:e3:6e:63:
         a6:b1:fe:ef:08:0e:6a:ad:b8:f7:fb:dc:b5:3a:10:97:dc:1d:
         c0:e1:c2:12:8a:6c:6b:fa:bf:79:2f:08:de:8f:c6:78:e6:c2:
         09:fa:2c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:55 2026 by rpki-client