Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/650CB2EE081C11EFA47C4687C4F9AE02.roa
File:                     650CB2EE081C11EFA47C4687C4F9AE02.roa (raw, json)
Hash identifier:          dhqZez1CmQoNnl7tme2Gyw601Mw62gYrcOQDDpPCTCg=
Subject key identifier:   C6:84:19:1D:A6:42:2F:5D:5F:13:FC:3F:1B:5F:64:8F:00:CB:CB:15
Certificate issuer:       /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial:       024A
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/650CB2EE081C11EFA47C4687C4F9AE02.roa
Signing time:             Mon 13 Apr 2026 02:34:40 +0000
ROA not before:           Mon 13 Apr 2026 02:34:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151054
IP address blocks:        103.121.184.0/24 maxlen: 24
                          103.121.185.0/24 maxlen: 24
                          2001:df3:bf40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
                          rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
        Validity
            Not Before: Apr 13 02:34:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69dc5640-ef72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:f0:d8:86:ac:d2:81:9a:00:a0:39:06:84:
                    7e:6f:3d:5a:d7:f1:7d:d5:30:11:e5:bd:d0:a0:9e:
                    3f:eb:b3:74:aa:72:8e:f7:72:ed:67:0c:2b:34:b5:
                    59:23:81:c7:e0:08:44:93:fd:79:fc:e9:7e:df:ec:
                    77:11:3f:50:e0:54:9a:d5:5b:b2:2b:f8:05:30:d9:
                    ea:05:b4:d3:52:a3:d4:70:28:97:79:21:f5:ba:f7:
                    d6:bb:04:67:ab:b4:3e:21:64:07:15:70:38:0b:ff:
                    c8:7e:04:7c:eb:9a:71:47:44:b0:84:af:b6:f6:b2:
                    5a:ec:55:f6:50:6d:30:48:b5:db:2a:8c:48:37:ba:
                    7f:52:9a:92:db:12:b2:e4:03:bc:40:6f:20:d3:27:
                    79:db:f6:c6:71:ab:5e:d5:28:34:6d:55:38:6f:55:
                    fc:e9:f3:95:fa:44:59:c6:43:53:94:b4:5f:02:cf:
                    61:ce:c5:84:c0:a3:31:50:43:6e:65:a4:34:94:4a:
                    8f:8a:df:4d:17:87:bd:2e:70:c9:0a:fe:77:66:c5:
                    ee:0c:6f:88:67:7a:87:b5:85:c7:56:50:86:66:00:
                    58:31:c7:f6:2b:5e:c7:bc:9d:9d:66:0c:d0:6c:cd:
                    21:78:de:3a:70:4e:ba:c7:a2:81:c1:65:cf:cb:82:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:84:19:1D:A6:42:2F:5D:5F:13:FC:3F:1B:5F:64:8F:00:CB:CB:15
            X509v3 Authority Key Identifier:
                keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/650CB2EE081C11EFA47C4687C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.184.0/23
                IPv6:
                  2001:df3:bf40::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:7e:b7:90:e4:df:9f:a4:26:8f:0e:99:ec:ce:3e:31:73:
         80:ae:a5:1d:63:cc:7f:04:43:47:bc:05:9f:1c:af:fc:b4:a6:
         10:83:0b:42:2c:23:e6:e9:92:c8:86:74:5d:b6:38:ea:c7:31:
         54:44:b9:66:4b:3d:84:58:45:89:e2:f6:51:cc:4b:75:22:c6:
         23:38:36:c2:76:d8:72:48:d9:e2:aa:79:24:d2:f4:2d:b8:83:
         eb:44:2f:3c:2b:10:11:13:75:0a:d4:ae:d8:45:b2:f0:8c:14:
         e1:41:89:d1:37:d4:9a:34:a8:95:cd:f3:15:69:e8:7d:4f:2f:
         00:ec:e8:ea:9e:e3:37:d3:2e:e4:7a:e3:f5:5c:09:b0:74:98:
         d9:f5:96:6e:21:e8:6f:8f:44:ca:70:a4:9d:c2:d6:80:b2:ed:
         f8:cd:1f:66:f5:33:c0:51:c4:1f:dd:6f:f1:52:66:a9:5f:a4:
         03:5e:0c:cf:1a:0c:11:ed:e1:46:71:9b:8b:3c:2e:b5:67:c4:
         86:e9:c4:25:26:91:e8:65:f0:fc:27:32:50:9e:1c:0a:70:69:
         b5:4f:8f:2f:8b:69:c1:eb:3e:81:b4:a7:a0:95:53:10:f5:08:
         79:86:8b:6a:98:04:87:8e:8d:ca:46:1c:37:5b:1c:46:08:68:
         54:79:06:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:30 2026 by rpki-client