Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/3C15F928579311F0B296C030C4F9AE02.roa
File:                     3C15F928579311F0B296C030C4F9AE02.roa (raw, json)
Hash identifier:          PcxApA6oFAaKQrQP/VJxBmFi70SG6p/mmGbv5cjRlVw=
Subject key identifier:   54:7B:36:8F:15:A7:2C:45:3B:40:78:79:8F:41:7B:48:BA:11:A7:44
Certificate issuer:       /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Certificate serial:       E5
Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/3C15F928579311F0B296C030C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 08:56:15 +0000
ROA not before:           Wed 05 Aug 2026 08:56:15 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45411
IP address blocks:        103.153.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 06:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
        Validity
            Not Before: Aug  5 08:56:15 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a72faae-a2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:58:a8:73:94:5c:19:fe:03:7e:f9:14:39:
                    9e:15:20:08:f3:45:2f:24:2c:8f:15:db:24:9c:09:
                    b3:d2:ae:3f:ad:8e:23:f1:c0:45:18:38:70:d5:1a:
                    58:0c:88:7a:14:89:88:18:07:2f:ab:eb:d4:69:5d:
                    4d:cb:46:eb:0c:12:2d:c0:4c:74:70:31:92:54:cf:
                    7c:4d:b6:c8:7e:99:1a:ff:a3:c2:17:e0:3d:7a:d8:
                    15:8d:7e:42:9b:bc:db:63:ac:9d:fb:9d:cf:ee:8b:
                    7d:d7:d4:5a:69:28:0c:25:05:a4:f6:f1:e3:a9:b0:
                    05:9c:e5:0e:60:9c:47:3c:9b:15:cc:77:1c:2e:98:
                    80:c0:37:e0:33:af:10:61:1c:59:c6:39:fa:4c:30:
                    d5:12:d4:26:fa:eb:90:1d:ec:32:9f:a6:31:30:c2:
                    80:25:57:29:a4:94:1c:05:1d:08:86:11:dd:c8:dc:
                    5f:7b:5c:59:fb:54:dd:06:be:c7:b7:41:94:be:b4:
                    09:b0:3b:b1:5f:2c:7d:b5:d9:50:7a:47:b6:9b:c3:
                    0e:6c:2f:cb:99:24:d7:bd:5a:e7:3b:4e:f0:88:59:
                    59:2a:01:79:d8:73:fa:13:f1:c1:ae:55:63:ed:b5:
                    45:69:24:ca:b7:51:d5:db:63:4b:cb:5c:fd:d7:87:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7B:36:8F:15:A7:2C:45:3B:40:78:79:8F:41:7B:48:BA:11:A7:44
            X509v3 Authority Key Identifier:
                keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/3C15F928579311F0B296C030C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:01:d4:5c:c7:1b:15:46:da:76:2e:1d:29:63:17:a3:0d:
         f6:1b:5f:a6:dc:8c:2f:56:cc:31:4e:b6:42:17:f5:18:40:50:
         42:d6:90:7e:98:0b:2f:f6:8c:cf:eb:20:9a:a0:6d:e4:d9:c1:
         3b:f8:52:04:5d:29:b6:ab:40:03:16:01:42:b5:84:f5:83:d6:
         8a:57:df:94:d0:00:1c:4f:8c:80:6e:4c:f9:df:7d:87:98:ef:
         da:c8:45:6e:b0:4f:11:88:8b:73:0f:a7:f2:5f:e3:af:6c:32:
         0b:27:a2:27:26:a9:30:99:fd:04:bd:26:71:dd:d5:b8:0f:98:
         09:a3:3f:a4:f6:66:36:ad:33:01:03:b3:f6:80:58:00:c9:b4:
         ad:c2:98:ee:fd:b7:6a:9d:f7:1d:0b:4f:d7:fe:93:7b:66:ef:
         cc:8b:1b:77:5f:15:19:2f:ab:3f:90:cb:63:9d:ec:b3:75:97:
         3f:c2:b9:7d:af:85:c3:b0:ca:3a:ed:ac:97:07:d0:52:cb:56:
         5b:88:d5:b2:05:7a:00:b3:f1:85:2c:90:57:1d:51:33:1c:0b:
         4d:9f:f6:07:88:53:29:d7:e1:ae:f4:44:8d:41:ab:bc:b3:ef:
         f6:2c:f3:c6:4c:57:a0:70:01:cc:7d:87:92:c9:dd:2c:2e:11:
         df:c7:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 15:43:12 2026 by rpki-client