Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0DA87EBE304D11ED8FBD3039C4F9AE02.roa
File:                     0DA87EBE304D11ED8FBD3039C4F9AE02.roa (raw, json)
Hash identifier:          BJY58qZc0i+wZLu/fB4hkcMgswizYyLDZ/lfOjogPPk=
Subject key identifier:   37:43:73:80:95:48:33:C2:1A:6A:2A:3E:89:F3:34:7C:81:BF:3A:56
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11AA
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0DA87EBE304D11ED8FBD3039C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:28:38 +0000
ROA not before:           Fri 22 May 2026 20:28:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     979
IP address blocks:        103.150.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4522 (0x11aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:28:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bc76-084c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:c3:12:15:f9:98:e3:6a:ad:74:ca:02:dd:
                    cf:0d:10:01:48:08:8f:a6:02:eb:49:af:74:6d:ea:
                    04:b1:82:94:c6:f3:06:88:53:40:32:62:51:69:1e:
                    16:79:c8:e5:fe:3e:d4:90:38:15:60:ba:cf:ba:eb:
                    83:b5:16:7f:d1:b7:63:05:0a:f3:90:36:9c:8c:72:
                    3d:04:59:bd:65:59:c7:4f:e8:6b:f5:38:30:e3:a6:
                    69:bf:1e:1a:32:78:54:09:3a:72:6f:02:2c:0e:45:
                    df:db:b5:ad:44:28:98:7f:eb:4c:8a:05:7d:31:8c:
                    45:97:a6:08:48:4a:ae:ba:08:2d:d5:78:db:48:fb:
                    00:ea:41:cf:96:c9:d6:00:a8:70:e7:ce:ce:35:11:
                    ce:9d:ad:5d:70:bc:ef:8d:b9:cb:b6:87:ac:95:ec:
                    88:c7:bb:05:cf:de:74:f9:54:15:ed:a3:53:ce:3e:
                    da:15:7d:e1:cc:de:04:39:06:84:50:bc:07:db:e1:
                    fb:58:4c:77:4a:4d:85:52:19:0e:10:4b:8d:16:8c:
                    f0:7b:0f:34:75:38:b8:2f:17:86:4a:ef:06:bc:44:
                    05:c8:9e:38:97:22:ac:68:24:11:0c:16:ea:82:85:
                    9d:22:f6:5c:60:e2:0b:d0:5c:2a:14:96:87:52:21:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:43:73:80:95:48:33:C2:1A:6A:2A:3E:89:F3:34:7C:81:BF:3A:56
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/0DA87EBE304D11ED8FBD3039C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:b2:21:4a:a4:fa:18:ea:4f:e7:eb:59:86:74:f4:f8:b6:ad:
         c9:50:2c:46:21:a7:7b:a0:30:8a:a8:8b:e4:a7:55:d1:fc:89:
         7f:91:d5:ac:49:77:7d:95:28:f6:4e:91:33:6a:9a:0b:8f:9f:
         1a:32:86:46:79:c8:8f:5f:9e:91:4c:99:55:58:4e:8f:95:55:
         31:06:59:e0:40:82:ca:47:b1:95:f8:63:54:4d:9e:3d:fa:61:
         6b:e3:ca:4d:16:68:32:39:b1:61:79:1a:c2:ba:56:24:93:79:
         53:69:b5:b3:a3:f1:1f:26:cf:11:c4:a1:c8:d8:16:55:ad:09:
         a8:31:08:f9:d9:84:6c:5e:4f:bb:4e:b3:3d:c3:9b:05:f4:95:
         eb:86:39:ad:86:40:01:de:24:4e:7b:ea:31:0e:64:e2:66:a9:
         be:7b:31:ed:5e:59:d9:3e:58:07:03:2f:a5:d6:12:d4:b5:f2:
         4e:26:d9:eb:3c:c3:3c:3e:c9:8a:c7:dd:0c:1f:a1:dc:67:46:
         2e:34:d8:fd:10:93:80:c3:89:61:12:bb:da:ca:97:c6:78:b9:
         08:d4:1d:2e:08:c4:7d:c6:f3:66:4e:89:4f:cc:d0:5f:91:c3:
         f5:cc:4b:ed:c0:ce:25:e5:1d:54:e8:f8:46:89:14:2a:fc:cb:
         81:f8:7e:72
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyODM4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmM3Ni0wODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmU3DEhX5mONqrXTKAt3PDRABSAiPpgLrSa90beoEsYKUxvMGiFNAMmJRaR4W
ecjl/j7UkDgVYLrPuuuDtRZ/0bdjBQrzkDacjHI9BFm9ZVnHT+hr9Tgw46Zpvx4a
MnhUCTpybwIsDkXf27WtRCiYf+tMigV9MYxFl6YISEquuggt1XjbSPsA6kHPlsnW
AKhw587ONRHOna1dcLzvjbnLtoesleyIx7sFz950+VQV7aNTzj7aFX3hzN4EOQaE
ULwH2+H7WEx3Sk2FUhkOEEuNFozwew80dTi4LxeGSu8GvEQFyJ44lyKsaCQRDBbq
goWdIvZcYOIL0FwqFJaHUiG3GwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDdDc4CV
SDPCGmoqPonzNHyBvzpWMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMERBODdFQkUz
MDREMTFFRDhGQkQzMDM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5bWMA0GCSqGSIb3DQEBCwUAA4IBAQBQsiFKpPoY6k/n61mGdPT4
tq3JUCxGIad7oDCKqIvkp1XR/Il/kdWsSXd9lSj2TpEzapoLj58aMoZGeciPX56R
TJlVWE6PlVUxBlngQILKR7GV+GNUTZ49+mFr48pNFmgyObFheRrCulYkk3lTabWz
o/EfJs8RxKHI2BZVrQmoMQj52YRsXk+7TrM9w5sF9JXrhjmthkAB3iROe+oxDmTi
Zqm+ezHtXlnZPlgHAy+l1hLUtfJOJtnrPMM8PsmKx90MH6HcZ0YuNNj9EJOAw4lh
ErvaypfGeLkI1B0uCMR9xvNmTolPzNBfkcP1zEvtwM4l5R1U6PhGiRQq/MuB+H5y
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:24 2026 by rpki-client