Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa
File:                     5C1CF19EA9C011EABAAB4624C4F9AE02.roa (raw, json)
Hash identifier:          U+pjz+gHKxK+CuW7qo7BMs3J3XoJAneOPNb7LhCFDWE=
Subject key identifier:   26:D7:5A:51:85:3A:B5:EA:57:67:29:B0:DD:73:45:91:A1:2B:4C:66
Certificate issuer:       /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Certificate serial:       0A95
Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:48:03 +0000
ROA not before:           Mon 12 May 2025 20:25:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.150.46.0/24 maxlen: 24
                          103.150.47.0/24 maxlen: 24
                          2001:df3:5580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
                          rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2709 (0xa95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
        Validity
            Not Before: May 12 20:25:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42773-c844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:cb:36:03:4f:5f:66:e2:85:0b:1d:dd:71:
                    1b:96:59:14:b9:39:d2:9c:75:1f:c9:05:14:89:65:
                    24:dd:48:b3:e2:d1:dc:a7:1c:c0:8a:f9:9d:12:22:
                    16:b0:a2:85:da:26:ac:8e:46:d4:61:4d:a8:5f:31:
                    45:a1:0b:cc:04:86:4a:87:63:45:4a:2a:fe:47:0f:
                    f4:82:ee:3b:63:f3:83:fd:c4:28:39:71:db:22:aa:
                    8b:ea:95:34:a7:3f:80:64:b7:a3:2d:84:25:28:3f:
                    04:68:3a:be:3e:41:b4:43:1a:d3:55:2a:96:16:45:
                    c7:34:14:a9:42:2a:ea:92:50:6d:7f:32:55:c5:eb:
                    06:31:20:99:07:01:55:82:f3:74:94:9f:2e:2c:1b:
                    ca:d4:8c:d2:5c:7a:88:e3:86:7b:a3:6f:dd:ba:41:
                    40:94:79:3d:81:0a:33:f7:e5:34:7c:a1:25:46:60:
                    20:86:2b:00:a8:e4:ed:7f:1c:9c:51:ae:00:e1:15:
                    94:ee:af:7a:4b:18:01:62:b2:0f:52:21:83:23:bd:
                    b6:8d:16:03:13:89:40:1a:14:5e:7d:19:00:39:c5:
                    24:32:23:13:ad:86:62:0b:49:a3:96:03:90:51:67:
                    6a:11:3e:e8:9f:9f:2c:6c:aa:42:af:b3:66:f6:3a:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D7:5A:51:85:3A:B5:EA:57:67:29:B0:DD:73:45:91:A1:2B:4C:66
            X509v3 Authority Key Identifier:
                keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.46.0/23
                IPv6:
                  2001:df3:5580::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:31:69:b1:aa:e1:de:49:33:97:bb:aa:13:58:c3:e5:b1:eb:
         ac:34:ce:a0:fe:af:f4:b2:e5:b5:03:c2:db:dd:ab:5b:8e:fe:
         e8:4e:bb:41:e1:72:59:13:af:8a:b6:f2:9c:d2:d4:29:4e:a7:
         e3:35:cf:cb:b8:bf:93:ba:92:3a:e2:7c:72:9a:5d:10:8e:cd:
         1b:9f:b2:b7:26:93:49:c1:0c:ac:bc:15:ad:86:07:61:51:66:
         9c:0a:a6:c9:ae:a3:c4:39:63:f3:d5:c1:0a:ee:a0:4e:0f:b9:
         f5:f5:2e:1d:21:51:5c:23:65:50:1d:3b:cd:11:66:3f:71:a2:
         e8:c8:19:af:e4:34:59:74:77:b4:1d:65:56:f1:c8:38:b3:f5:
         e4:72:0a:6f:3c:81:4b:8e:6f:9c:6a:06:e0:a4:6e:39:02:09:
         6b:7c:92:ce:95:c1:7c:3c:fc:49:74:0f:ee:ca:db:7a:e2:b1:
         4e:e6:81:6a:d6:1b:2b:b3:8d:9a:36:d3:8b:4f:08:fc:fb:0d:
         a7:f3:28:42:e2:ad:2d:c1:f8:a6:71:72:70:70:7f:9c:32:ad:
         4f:c8:83:ff:37:32:4f:1b:4c:94:ac:30:96:dd:90:f6:4b:a0:
         2b:f7:b8:44:99:cd:58:e9:19:c2:49:e2:de:bf:6d:ef:89:32:
         38:77:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:08 2026 by rpki-client