Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1D4A72B2350811EE96CD9F16C4F9AE02.roa
File:                     1D4A72B2350811EE96CD9F16C4F9AE02.roa (raw, json)
Hash identifier:          mGVNnVziBhRo1V/PDIywj3hrytZfjWlRe3xWrqYZppM=
Subject key identifier:   06:8C:C8:99:85:27:2C:5D:77:70:69:BA:AB:A4:92:6A:C2:0A:4A:15
Certificate issuer:       /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Certificate serial:       07D3
Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1D4A72B2350811EE96CD9F16C4F9AE02.roa
Signing time:             Sun 12 Apr 2026 21:27:06 +0000
ROA not before:           Sun 12 Apr 2026 21:27:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140546
IP address blocks:        103.150.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl
                          rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003 (0x7d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
        Validity
            Not Before: Apr 12 21:27:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69dc0e2a-b738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:80:77:ee:96:40:4e:87:22:7e:c7:4a:c2:
                    45:f0:83:74:fc:30:31:19:e8:28:b5:9b:3c:7d:13:
                    c8:18:4d:14:ce:de:f8:d5:e1:36:0c:ff:f3:88:98:
                    3d:77:89:bd:b0:92:b2:3d:15:5a:1d:80:0d:42:b1:
                    c0:90:0d:6d:40:93:be:66:ee:58:e6:bb:09:ec:36:
                    7d:e0:01:ea:14:d1:73:5c:6f:0d:ed:5b:db:fb:97:
                    ae:3b:2f:29:70:ed:8c:ad:f3:10:eb:62:4e:65:8a:
                    05:52:dc:67:a6:54:86:42:f2:cf:b2:f0:19:9a:bd:
                    34:21:76:64:2c:d5:09:cd:f1:8a:64:a9:b9:82:18:
                    78:d5:e8:4b:83:b1:9e:42:c6:3f:56:c7:43:38:57:
                    f5:d5:2f:c7:cd:a4:a2:3c:35:a9:ff:4f:71:dd:a7:
                    eb:0b:20:ad:83:57:2e:58:99:3c:06:ce:8a:a4:3f:
                    81:08:97:67:1b:58:0c:43:38:d0:61:c4:30:01:2a:
                    a5:9f:87:d6:56:aa:8c:68:5b:49:6a:64:a9:8e:5c:
                    58:fd:3e:f3:50:ca:04:c0:90:ee:b5:f8:8a:69:d7:
                    d3:ec:bf:65:b0:f3:33:49:69:e0:a2:d9:b8:ea:a2:
                    43:80:93:55:2b:25:c9:ef:cb:7c:ff:33:1c:71:3e:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8C:C8:99:85:27:2C:5D:77:70:69:BA:AB:A4:92:6A:C2:0A:4A:15
            X509v3 Authority Key Identifier:
                keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1D4A72B2350811EE96CD9F16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:72:f4:23:d9:3b:8e:b9:9f:64:a5:0f:d7:b9:1d:bd:45:e3:
         e3:14:80:8d:b5:2a:0c:ad:00:ba:ab:e6:88:62:1f:88:c0:24:
         14:c2:1f:d4:62:e2:ab:ea:07:b0:c8:da:27:34:ed:a6:e3:07:
         8e:e8:f1:ab:31:65:e8:5a:ea:52:21:f9:e0:b8:d2:de:90:c8:
         4e:f6:b2:c9:af:eb:8f:61:dd:16:a7:8e:96:01:64:51:2d:35:
         80:d5:4d:bb:c9:5f:fe:1c:3c:7a:e5:d5:90:be:53:64:36:a2:
         13:6b:18:00:80:d1:25:f3:65:2c:04:85:05:c5:5c:a1:0d:c5:
         0a:bb:7a:3f:e9:c6:29:fd:1e:7e:51:81:67:42:1c:42:3d:7b:
         86:83:82:79:60:28:43:23:c7:7a:c7:e2:31:b2:68:ca:b1:64:
         e3:cf:cd:a8:be:dd:ae:bb:34:74:dc:9f:88:45:6f:71:f2:2b:
         59:df:02:f0:72:86:23:8c:99:48:3c:ff:00:96:b3:c1:cd:58:
         84:89:f7:3f:f9:d3:27:46:1a:6e:ee:98:d6:a8:c8:ae:37:35:
         c3:bc:b3:e0:dc:85:a2:2c:3e:26:84:c4:29:ca:5b:36:ab:08:
         61:65:0f:77:4c:ea:24:e2:ce:ca:be:77:93:cf:f2:68:59:8a:
         41:d4:e5:6d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx
RjcxNjVDREMwHhcNMjYwNDEyMjEyNzA2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRjMGUyYS1iNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJyAd+6WQE6HIn7HSsJF8IN0/DAxGegotZs8fRPIGE0Uzt741eE2DP/ziJg9
d4m9sJKyPRVaHYANQrHAkA1tQJO+Zu5Y5rsJ7DZ94AHqFNFzXG8N7Vvb+5euOy8p
cO2MrfMQ62JOZYoFUtxnplSGQvLPsvAZmr00IXZkLNUJzfGKZKm5ghh41ehLg7Ge
QsY/VsdDOFf11S/HzaSiPDWp/09x3afrCyCtg1cuWJk8Bs6KpD+BCJdnG1gMQzjQ
YcQwASqln4fWVqqMaFtJamSpjlxY/T7zUMoEwJDutfiKadfT7L9lsPMzSWngotm4
6qJDgJNVKyXJ78t8/zMccT57PQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAaMyJmF
Jyxdd3BpuqukkmrCCkoVMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB
RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjgwNzcvOTgwQ0E4RkUzQUQ3MTFFQkEyOTIxQTRBQzRGOUFFMDIvMUQ0QTcyQjIz
NTA4MTFFRTk2Q0Q5RjE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5YwMA0GCSqGSIb3DQEBCwUAA4IBAQATcvQj2TuOuZ9kpQ/XuR29
RePjFICNtSoMrQC6q+aIYh+IwCQUwh/UYuKr6gewyNonNO2m4weO6PGrMWXoWupS
IfnguNLekMhO9rLJr+uPYd0Wp46WAWRRLTWA1U27yV/+HDx65dWQvlNkNqITaxgA
gNEl82UsBIUFxVyhDcUKu3o/6cYp/R5+UYFnQhxCPXuGg4J5YChDI8d6x+IxsmjK
sWTjz82ovt2uuzR03J+IRW9x8itZ3wLwcoYjjJlIPP8AlrPBzViEifc/+dMnRhpu
7pjWqMiuNzXDvLPg3IWiLD4mhMQpyls2qwhhZQ93TOok4s7KvneTz/JoWYpB1OVt
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:34 2026 by rpki-client