Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
File:                     10C5553891FB11EFB901C22CC4F9AE02.roa (raw, json)
Hash identifier:          e/pnIZBe3R75HuZvmDrMJEHNzuG4obrGoxBDWffCaZ4=
Subject key identifier:   45:38:E8:E5:5D:33:C4:8C:C8:A2:F4:DA:4B:B2:79:A2:D5:90:E1:78
Certificate issuer:       /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial:       013D
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
Signing time:             Sat 23 May 2026 06:37:58 +0000
ROA not before:           Sat 23 May 2026 06:37:58 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     24440
IP address blocks:        103.150.105.0/24 maxlen: 24
                          202.70.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
        Validity
            Not Before: May 23 06:37:58 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a114b46-1ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:ee:eb:51:64:01:03:6b:44:10:0c:01:6c:
                    a5:d5:88:82:ec:15:bc:91:42:15:ad:c5:48:6e:8a:
                    49:a5:ab:51:71:b3:d2:3d:ca:91:15:bb:43:95:e2:
                    67:90:ee:53:9c:07:61:49:65:ff:31:5f:ee:83:42:
                    ba:c2:0c:e6:be:9a:0d:40:c9:bb:33:29:ab:38:57:
                    7c:f5:bc:5c:67:00:34:72:a5:ff:5f:20:00:96:3b:
                    97:46:e9:90:71:a5:60:83:c5:04:3d:b7:c8:2b:1d:
                    f2:cb:73:be:4f:9b:5d:06:92:69:a7:35:1d:4f:8b:
                    b4:99:a6:4c:99:a1:53:24:e0:fe:f5:43:25:81:1b:
                    54:bc:46:09:d5:8b:28:69:a5:ff:b4:70:4e:13:16:
                    d7:10:d8:b9:ab:85:6d:db:60:93:e7:a1:47:7d:61:
                    24:f3:9a:eb:09:ca:ec:6c:8f:a2:5d:a8:23:76:94:
                    8c:85:a5:f0:39:0e:ac:1b:d6:ab:76:48:0b:c9:c9:
                    bd:d1:d7:fc:45:4b:d0:55:b0:bc:35:ac:e5:c5:49:
                    a4:ac:70:df:12:46:a7:c2:2a:ba:41:cb:51:c3:9e:
                    cf:37:b1:22:c3:02:23:1b:98:8e:da:12:20:3b:74:
                    15:ff:7d:d9:82:35:c2:8b:8b:b4:ce:be:df:37:98:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:E8:E5:5D:33:C4:8C:C8:A2:F4:DA:4B:B2:79:A2:D5:90:E1:78
            X509v3 Authority Key Identifier:
                keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.105.0/24
                  202.70.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:49:22:5a:67:f7:82:9b:94:c9:6e:f2:3f:a7:b0:32:ec:cb:
         4b:ae:21:9b:48:50:a9:cd:24:95:1b:b4:ca:70:83:dc:81:a2:
         ae:3f:ba:f5:10:02:9e:43:9c:75:89:94:8b:15:ed:0a:d8:fe:
         78:f1:f2:58:b1:4c:31:41:67:66:9e:8a:16:af:d0:c7:6c:f5:
         f0:87:b1:8f:61:68:1d:84:bb:6c:d1:4b:7b:8a:b3:d9:87:77:
         78:78:bf:f8:90:ae:59:32:04:b9:3b:97:2b:2b:61:80:4e:65:
         d2:d6:02:d7:f5:fc:d3:6e:2d:81:93:88:16:5f:78:e4:6d:9c:
         77:d5:27:13:91:69:ea:7f:a5:56:f5:c0:67:5b:62:4e:ab:95:
         58:b1:e3:a4:39:5b:b2:ff:a8:64:99:84:52:16:21:8c:73:6a:
         75:40:51:09:a6:20:a0:d2:50:21:73:29:53:81:5b:3b:7f:c0:
         c7:98:23:b0:e3:8e:19:c2:22:4a:1e:ea:a1:df:c2:e2:3f:72:
         ce:0c:f2:12:4f:83:1b:9f:6e:9d:77:d8:5d:3f:de:36:da:39:
         69:a8:01:9c:c3:9c:53:2b:63:2b:6d:3d:a2:d4:52:47:fe:f0:
         9c:68:e4:88:bf:95:9e:2d:67:da:28:0a:c3:31:7d:f0:42:69:
         05:53:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:46:03 2026 by rpki-client