Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa
File:                     1577D3D4CEED11EEAD68A169C4F9AE02.roa (raw, json)
Hash identifier:          AQI2bwJCuqKXIuSLIUCmPdyM40gof3FT5HfSxWUNveA=
Subject key identifier:   01:63:66:76:76:B4:26:F6:39:BC:E6:20:32:8D:51:60:58:A3:BB:94
Certificate issuer:       /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial:       01A5
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 04:37:46 +0000
ROA not before:           Thu 09 Apr 2026 04:37:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151630
IP address blocks:        103.149.152.0/24 maxlen: 24
                          103.149.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
                          rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
        Validity
            Not Before: Apr  9 04:37:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d72d1a-2797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f3:d2:d9:5e:59:22:7c:2a:6b:49:f9:9f:cc:
                    7c:bb:16:91:93:82:ca:76:ac:a5:c8:51:85:0e:92:
                    dc:62:9d:0f:7d:88:71:12:91:9d:71:04:1c:db:ca:
                    1e:94:de:9f:f5:5f:ce:6e:9b:90:22:25:0d:6a:28:
                    1a:b1:e9:84:20:15:b2:b3:3f:aa:b2:2d:9c:ed:7a:
                    8c:1d:7f:65:ee:fc:41:fd:b6:45:e5:d7:da:c1:ad:
                    c8:9a:43:fe:19:c1:88:64:c7:ee:54:3c:a2:61:95:
                    4a:04:25:25:a0:fc:07:8e:c1:96:70:32:fa:4d:4f:
                    29:cb:25:29:0c:5b:28:e3:49:a5:10:76:61:a5:bd:
                    90:0b:fd:f8:b8:b7:27:8b:ec:31:16:39:4a:8e:56:
                    98:3f:11:88:cb:19:e5:65:de:99:dd:cf:82:73:ae:
                    46:d9:b9:40:eb:cc:e1:20:fd:02:97:07:c5:d3:c5:
                    21:c3:1a:3f:30:75:4b:ac:8a:54:0f:7a:7b:ad:6d:
                    43:73:79:4c:87:ba:b6:55:10:ca:5f:67:50:bf:14:
                    d8:6c:28:9a:ab:a6:6f:6d:8f:fb:f8:f0:c8:8b:1d:
                    17:16:52:1e:da:5a:d6:81:12:c1:79:36:ee:57:9f:
                    cf:1c:d1:8e:d3:df:aa:6c:a5:ae:ff:16:3e:1b:51:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:66:76:76:B4:26:F6:39:BC:E6:20:32:8D:51:60:58:A3:BB:94
            X509v3 Authority Key Identifier:
                keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:10:f5:f2:fe:f0:85:8e:46:45:56:0f:15:53:3b:0f:97:
         9b:9f:d5:12:65:88:5c:35:23:63:a0:fd:1c:69:25:0d:d7:6c:
         cd:25:53:fc:52:80:ec:b7:62:94:ee:c6:c5:e8:fd:e6:57:67:
         69:87:e8:42:66:14:bd:72:f9:b1:d6:4d:40:30:3d:77:f6:12:
         f6:e0:f5:19:08:1b:af:f9:17:94:08:54:fe:32:54:62:4d:95:
         49:b2:62:5d:fd:d7:e7:c4:a8:8c:db:3c:99:55:43:30:6e:e2:
         fb:aa:f8:00:fc:5d:9f:50:f4:99:d7:7a:5b:55:a0:8e:58:45:
         22:c1:20:cf:b5:d6:d6:e1:91:b7:a6:dd:22:d5:26:52:c9:f7:
         54:02:01:82:2b:02:c0:35:0d:2d:f3:08:13:5e:fc:c4:d2:e7:
         b8:04:c7:71:ae:7c:b0:39:53:16:b5:3b:fa:ec:0e:23:8c:8d:
         a1:c3:81:23:cc:42:62:4e:ed:2c:56:75:09:8f:9e:a3:d9:1f:
         54:2c:a4:e9:4e:de:a0:d2:4b:9b:de:e3:a8:c8:4b:e6:3f:b7:
         20:43:3c:99:39:df:ca:12:f2:47:30:64:de:d8:8b:c0:0e:10:
         bf:7c:fd:ff:df:4a:f3:87:ea:f2:b9:03:82:1c:f3:cf:37:27:
         4e:98:62:0a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4
NzYzRTY3QTIwHhcNMjYwNDA5MDQzNzQ2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ3MmQxYS0yNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+fPS2V5ZInwqa0n5n8x8uxaRk4LKdqylyFGFDpLcYp0PfYhxEpGdcQQc28oe
lN6f9V/ObpuQIiUNaigasemEIBWysz+qsi2c7XqMHX9l7vxB/bZF5dfawa3ImkP+
GcGIZMfuVDyiYZVKBCUloPwHjsGWcDL6TU8pyyUpDFso40mlEHZhpb2QC/34uLcn
i+wxFjlKjlaYPxGIyxnlZd6Z3c+Cc65G2blA68zhIP0ClwfF08Uhwxo/MHVLrIpU
D3p7rW1Dc3lMh7q2VRDKX2dQvxTYbCiaq6ZvbY/7+PDIix0XFlIe2lrWgRLBeTbu
V5/PHNGO09+qbKWu/xY+G1HqDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAFjZnZ2
tCb2ObzmIDKNUWBYo7uUMB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF
RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a
NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEM2NTEvMzM0RjY4QzhDRUVDMTFFRUFFMDMzMDZDQzRGOUFFMDIvMTU3N0QzRDRD
RUVEMTFFRUFENjhBMTY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5WYMA0GCSqGSIb3DQEBCwUAA4IBAQAJuBD18v7whY5GRVYPFVM7
D5ebn9USZYhcNSNjoP0caSUN12zNJVP8UoDst2KU7sbF6P3mV2dph+hCZhS9cvmx
1k1AMD139hL24PUZCBuv+ReUCFT+MlRiTZVJsmJd/dfnxKiM2zyZVUMwbuL7qvgA
/F2fUPSZ13pbVaCOWEUiwSDPtdbW4ZG3pt0i1SZSyfdUAgGCKwLANQ0t8wgTXvzE
0ue4BMdxrnywOVMWtTv67A4jjI2hw4EjzEJiTu0sVnUJj56j2R9ULKTpTt6g0kub
3uOoyEvmP7cgQzyZOd/KEvJHMGTe2IvADhC/fP3/30rzh+ryuQOCHPPPNydOmGIK
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:33:13 2026 by rpki-client