Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1D4A72B2350811EE96CD9F16C4F9AE02.roa
File:                     1D4A72B2350811EE96CD9F16C4F9AE02.roa (raw, json)
Hash identifier:          QBEHUXv77ugAeZ9NY/NroWNTMKHWQEWHzwVI+zG+N/c=
Subject key identifier:   C7:19:63:1D:D5:04:18:1E:5C:AB:A4:2B:40:F3:61:33:D1:69:EB:42
Certificate issuer:       /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Certificate serial:       07B8
Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1D4A72B2350811EE96CD9F16C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:41:54 +0000
ROA not before:           Mon 24 Mar 2025 22:02:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140546
IP address blocks:        103.150.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl
                          rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
        Validity
            Not Before: Mar 24 22:02:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a409e1-5edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2e:29:fd:57:cf:cd:a7:10:eb:27:83:87:e8:
                    ef:5a:fb:ee:6f:0a:f2:cf:51:73:6d:77:5a:3c:35:
                    44:b6:c7:35:b5:c5:5a:89:60:a3:8c:a0:0a:e3:f7:
                    e7:a2:21:21:71:d9:a8:34:80:ef:20:91:8e:49:bd:
                    96:c4:71:b7:74:b0:b7:da:a0:e1:da:fa:13:c0:f0:
                    00:4b:c9:cb:01:d2:51:73:75:7d:af:2f:27:85:a9:
                    5b:19:b7:19:23:96:0b:8d:65:51:e8:e4:08:0d:77:
                    3b:79:63:2c:50:69:be:34:b7:43:44:7e:ee:f5:aa:
                    21:58:94:2d:a3:44:6c:8d:84:bc:82:a1:db:f6:6f:
                    60:9a:58:98:c9:c1:35:f8:ba:dc:45:fd:53:2c:a6:
                    a2:f0:01:8c:80:37:f9:db:63:26:51:ca:fb:81:80:
                    72:73:3e:bb:f3:df:92:14:0c:a0:9b:b3:31:e3:4e:
                    88:c5:6f:fa:ff:d2:ab:d6:a5:2e:fe:ba:0f:0a:06:
                    f8:09:93:6b:82:58:2c:02:f0:e8:0a:b9:32:a1:ec:
                    fb:5a:c6:d4:f3:47:56:e6:77:13:71:68:84:a0:2a:
                    90:0b:83:bc:37:56:dd:6b:da:4b:a6:f5:9f:b9:e1:
                    14:c1:5d:22:fe:7d:4a:19:80:13:df:3b:51:07:9a:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:19:63:1D:D5:04:18:1E:5C:AB:A4:2B:40:F3:61:33:D1:69:EB:42
            X509v3 Authority Key Identifier:
                keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1D4A72B2350811EE96CD9F16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:45:fe:00:22:d1:a4:b5:72:1e:f5:12:17:cf:30:a2:df:
         b5:ac:02:90:81:49:8f:b8:26:6a:7a:77:a9:4a:3c:bd:1a:2a:
         57:a6:3c:44:7f:4c:a0:c2:77:7f:53:30:c3:ff:5e:ad:58:8a:
         f4:87:9c:7b:e0:f0:34:7f:b0:68:25:3d:3d:91:11:92:87:c1:
         fb:2c:7e:6a:3f:b2:3f:49:96:25:07:b0:ef:cc:08:5a:02:b5:
         4d:07:7f:03:ec:18:01:81:69:e0:46:3f:14:37:17:a3:6c:42:
         71:a1:3b:e6:ff:90:5b:a5:f1:4c:07:c3:01:29:98:d8:21:bc:
         38:a6:72:5a:b0:96:5b:aa:02:b3:8e:7b:1e:86:b9:33:e9:91:
         07:b7:86:7d:f5:04:2e:ba:4a:28:f0:1d:ba:67:ea:6f:3c:f2:
         e9:a6:0c:a9:36:19:97:3a:ec:bf:ec:9e:2f:6b:ec:31:16:fc:
         10:b5:f9:db:e7:b0:40:cc:ff:68:32:ee:c3:07:79:d6:74:e1:
         e0:18:c1:a7:3d:ed:3d:49:2b:a4:df:2a:d6:78:3d:3a:e0:e5:
         60:b1:7e:35:4d:60:8b:ee:96:d2:6e:e3:ea:97:a8:37:1d:16:
         f0:7d:65:c6:08:61:9d:d0:89:b9:e9:a9:8f:ff:4d:25:19:d6:
         87:35:cd:6d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx
RjcxNjVDREMwHhcNMjUwMzI0MjIwMjQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDllMS01ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2i4p/VfPzacQ6yeDh+jvWvvubwryz1FzbXdaPDVEtsc1tcVaiWCjjKAK4/fn
oiEhcdmoNIDvIJGOSb2WxHG3dLC32qDh2voTwPAAS8nLAdJRc3V9ry8nhalbGbcZ
I5YLjWVR6OQIDXc7eWMsUGm+NLdDRH7u9aohWJQto0RsjYS8gqHb9m9gmliYycE1
+LrcRf1TLKai8AGMgDf522MmUcr7gYBycz6789+SFAygm7Mx406IxW/6/9Kr1qUu
/roPCgb4CZNrglgsAvDoCrkyoez7WsbU80dW5ncTcWiEoCqQC4O8N1bda9pLpvWf
ueEUwV0i/n1KGYAT3ztRB5rOfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMcZYx3V
BBgeXKukK0DzYTPRaetCMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB
RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjgwNzcvOTgwQ0E4RkUzQUQ3MTFFQkEyOTIxQTRBQzRGOUFFMDIvMUQ0QTcyQjIz
NTA4MTFFRTk2Q0Q5RjE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5YwMA0GCSqGSIb3DQEBCwUAA4IBAQCA6EX+ACLRpLVyHvUSF88w
ot+1rAKQgUmPuCZqenepSjy9GipXpjxEf0ygwnd/UzDD/16tWIr0h5x74PA0f7Bo
JT09kRGSh8H7LH5qP7I/SZYlB7DvzAhaArVNB38D7BgBgWngRj8UNxejbEJxoTvm
/5BbpfFMB8MBKZjYIbw4pnJasJZbqgKzjnsehrkz6ZEHt4Z99QQuukoo8B26Z+pv
PPLppgypNhmXOuy/7J4va+wxFvwQtfnb57BAzP9oMu7DB3nWdOHgGMGnPe09SSuk
3yrWeD064OVgsX41TWCL7pbSbuPql6g3HRbwfWXGCGGd0Im56amP/00lGdaHNc1t
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:06 2026 by rpki-client