Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/7AD47B2234EE11EE927E9F6AC4F9AE02.roa
File:                     7AD47B2234EE11EE927E9F6AC4F9AE02.roa (raw, json)
Hash identifier:          wYlujTbswSDeeFMSYd73S87Flzl6QKtEy7MCM+sd2XU=
Subject key identifier:   D1:EA:8B:66:E8:29:01:C9:13:CD:E2:C0:8A:36:8F:DB:70:39:1C:48
Certificate issuer:       /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Certificate serial:       07D4
Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/7AD47B2234EE11EE927E9F6AC4F9AE02.roa
Signing time:             Sun 12 Apr 2026 21:27:09 +0000
ROA not before:           Sun 12 Apr 2026 21:27:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151638
IP address blocks:        103.150.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl
                          rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128077, serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
        Validity
            Not Before: Apr 12 21:27:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69dc0e2d-cc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:f6:24:d0:d5:16:15:fd:06:e8:9f:fa:80:
                    82:92:87:f6:5a:bb:dd:62:6f:e1:4f:e2:61:1f:c8:
                    b7:c8:af:9c:6d:b6:0d:66:e0:f6:cd:d4:4f:30:36:
                    bf:76:a7:d0:29:62:f8:7d:47:b9:27:65:d7:68:ca:
                    30:2a:6b:30:99:02:5b:33:61:a5:43:61:25:e3:3f:
                    03:a2:c0:d1:ac:1f:71:d4:4f:a9:2d:f7:af:ba:38:
                    74:33:50:8e:c3:17:a1:94:c2:cd:b7:1e:8d:ac:f1:
                    a8:e3:44:79:e7:77:27:5f:cb:df:17:b6:41:94:3d:
                    04:9f:4b:c8:01:ed:9d:e8:cb:e5:a9:38:c2:01:99:
                    53:16:29:20:b8:86:1a:45:4f:80:7a:cf:22:43:10:
                    e7:e1:03:e0:69:d8:ab:3c:6f:2a:31:0b:7e:25:0a:
                    7d:af:02:0f:1a:b1:90:0e:58:5e:17:cd:b2:14:95:
                    10:b3:42:1c:c4:fc:12:14:30:8f:f8:4c:41:95:1f:
                    b4:49:fd:13:61:06:72:ff:b6:11:9f:a8:95:1d:e6:
                    4b:ba:9a:22:c9:5c:4c:f5:4f:47:9d:5d:fa:5b:77:
                    bd:ac:73:33:93:88:ee:8b:ff:54:73:de:ee:69:28:
                    f9:b3:8b:32:70:71:c5:c0:29:6b:4d:0d:b0:38:28:
                    bf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EA:8B:66:E8:29:01:C9:13:CD:E2:C0:8A:36:8F:DB:70:39:1C:48
            X509v3 Authority Key Identifier:
                keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/7AD47B2234EE11EE927E9F6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:7f:0e:89:89:37:8e:7a:07:6e:35:e7:e8:dc:bd:0f:6d:
         f3:33:ce:e8:3b:92:12:51:ac:cf:fd:7d:00:2f:1c:04:68:18:
         8d:35:72:71:72:34:a9:22:87:a1:8d:bf:19:ab:7a:91:26:84:
         5b:17:dc:eb:36:25:64:08:ef:b4:24:2e:b8:7d:e9:e6:44:98:
         89:d7:aa:ff:43:b4:8b:7f:e2:99:16:e4:bc:80:95:7d:01:d2:
         ef:cb:81:7a:bc:7a:d6:4b:a3:46:f8:3e:8b:27:31:a1:1f:92:
         99:d3:a2:9b:9a:7a:f9:e1:c7:ce:c3:9e:86:5c:55:8c:17:77:
         be:43:06:fd:96:65:d3:69:8b:fb:9f:c3:85:c5:0a:8c:1f:2e:
         ae:d3:2d:17:7a:3d:a9:54:45:6a:22:b7:c2:e6:fd:b4:bb:dc:
         3a:c5:fc:18:17:ca:16:a9:ac:bc:07:8f:83:7b:d9:6d:57:b9:
         7a:58:a7:48:26:95:5f:84:1e:a4:7e:d9:c4:63:b7:8b:98:52:
         22:a2:c4:ae:2f:c7:1c:a0:52:e5:0a:01:9b:8a:40:24:4e:a3:
         a3:32:bf:3d:38:8b:0a:d7:ba:87:81:7c:c1:03:58:98:0e:3e:
         ef:70:01:a3:b0:b5:6a:25:d5:25:ed:2f:bb:0e:e2:91:12:5c:
         f1:69:38:08
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx
RjcxNjVDREMwHhcNMjYwNDEyMjEyNzA5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRjMGUyZC1jYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjY72JNDVFhX9Buif+oCCkof2WrvdYm/hT+JhH8i3yK+cbbYNZuD2zdRPMDa/
dqfQKWL4fUe5J2XXaMowKmswmQJbM2GlQ2El4z8DosDRrB9x1E+pLfevujh0M1CO
wxehlMLNtx6NrPGo40R553cnX8vfF7ZBlD0En0vIAe2d6MvlqTjCAZlTFikguIYa
RU+Aes8iQxDn4QPgadirPG8qMQt+JQp9rwIPGrGQDlheF82yFJUQs0IcxPwSFDCP
+ExBlR+0Sf0TYQZy/7YRn6iVHeZLupoiyVxM9U9HnV36W3e9rHMzk4jui/9Uc97u
aSj5s4sycHHFwClrTQ2wOCi/WwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNHqi2bo
KQHJE83iwIo2j9twORxIMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB
RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjgwNzcvOTgwQ0E4RkUzQUQ3MTFFQkEyOTIxQTRBQzRGOUFFMDIvN0FENDdCMjIz
NEVFMTFFRTkyN0U5RjZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5YxMA0GCSqGSIb3DQEBCwUAA4IBAQAvLX8OiYk3jnoHbjXn6Ny9
D23zM87oO5ISUazP/X0ALxwEaBiNNXJxcjSpIoehjb8Zq3qRJoRbF9zrNiVkCO+0
JC64fenmRJiJ16r/Q7SLf+KZFuS8gJV9AdLvy4F6vHrWS6NG+D6LJzGhH5KZ06Kb
mnr54cfOw56GXFWMF3e+Qwb9lmXTaYv7n8OFxQqMHy6u0y0Xej2pVEVqIrfC5v20
u9w6xfwYF8oWqay8B4+De9ltV7l6WKdIJpVfhB6kftnEY7eLmFIiosSuL8ccoFLl
CgGbikAkTqOjMr89OIsK17qHgXzBA1iYDj7vcAGjsLVqJdUl7S+7DuKRElzxaTgI
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:12 2026 by rpki-client