Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/3489F9BE7A5411EB9AC2283DC4F9AE02.roa
File:                     3489F9BE7A5411EB9AC2283DC4F9AE02.roa (raw, json)
Hash identifier:          MuevOQNfj8TCHns61sO9/2Pjb6kAnYxyKNVhH0SJFvI=
Subject key identifier:   99:D6:7C:B7:29:7E:8A:63:65:5F:A7:FE:ED:CB:42:31:DC:61:5B:17
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0A72
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/3489F9BE7A5411EB9AC2283DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:31:28 +0000
ROA not before:           Fri 20 Jun 2025 20:26:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132825
IP address blocks:        103.150.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674 (0xa72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jun 20 20:26:45 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a469e0-a195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:72:aa:2d:8e:b5:5b:66:b4:b0:9f:03:2d:
                    b8:23:5a:c8:e4:b1:25:6c:a1:63:41:18:f6:28:69:
                    d2:93:b1:89:35:bf:ae:61:10:27:6c:75:d1:e0:59:
                    23:b5:7d:7a:87:e6:3c:77:3e:8e:89:78:23:d1:a9:
                    65:4b:5f:43:fa:be:d9:bb:00:53:5e:14:52:ae:1f:
                    e7:bd:32:9f:7c:8d:2b:c9:ac:11:77:39:42:3d:cb:
                    33:3d:46:9a:e3:d1:fb:ee:8f:c6:9f:3f:24:15:25:
                    ff:91:36:3c:ad:2b:ee:e3:16:75:ab:1e:43:eb:2b:
                    e1:89:01:f0:19:55:12:7f:b0:4f:e9:13:ce:fe:1f:
                    11:2c:37:c1:33:0e:30:7e:06:79:d8:5e:65:8e:7d:
                    bc:08:33:68:88:0d:24:64:4a:06:7e:79:d6:d4:63:
                    8f:30:eb:ea:79:c9:5e:26:20:0c:45:bb:33:b4:44:
                    0e:62:57:03:0a:d8:27:c8:04:4e:1e:bc:cd:13:7b:
                    da:e3:da:04:7e:1c:11:ef:2b:05:39:f6:69:bf:c4:
                    bc:b9:3d:71:01:22:56:5f:e2:7b:79:59:e3:0b:c5:
                    c9:78:32:34:39:9e:44:0e:67:9a:85:54:7c:1a:62:
                    05:e7:82:10:37:fe:f5:26:48:6b:93:39:0d:82:10:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D6:7C:B7:29:7E:8A:63:65:5F:A7:FE:ED:CB:42:31:DC:61:5B:17
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/3489F9BE7A5411EB9AC2283DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:cf:58:db:69:17:e4:21:28:24:8f:58:ee:51:6d:a0:72:df:
         73:29:38:44:23:f7:7f:6b:c0:21:45:c4:5f:e3:2c:47:56:fc:
         e7:81:88:d5:a1:71:28:0d:ff:19:8e:a0:0d:a3:f3:f9:16:b2:
         aa:41:d7:53:f0:a6:44:33:c0:58:39:91:2f:6a:c3:93:9d:53:
         36:e1:9c:51:e6:30:c3:e8:ef:91:7f:75:0a:11:bb:61:6c:37:
         76:59:70:bb:2b:c6:2d:25:09:48:ef:c6:90:61:6a:f9:ad:92:
         d6:f1:2b:47:96:65:48:68:d8:8c:2f:5a:59:6b:d0:65:16:63:
         76:cd:f9:1e:89:63:9d:98:07:18:32:67:02:67:27:29:38:c7:
         ae:d8:12:34:b4:21:00:41:bc:fa:a8:fc:d4:85:6f:e4:f3:88:
         72:88:f9:df:65:69:71:0a:5a:8a:33:07:52:db:4d:ea:fc:79:
         4f:90:04:62:19:bb:af:ff:01:71:98:7e:c6:95:39:11:f6:04:
         e8:e1:79:db:3c:9e:da:bd:d4:90:86:c4:dd:fd:78:2b:38:e2:
         2d:89:0a:d3:e8:66:9c:ed:41:22:74:34:db:f6:c4:11:4e:74:
         88:f9:77:58:43:3e:4c:63:93:c8:0a:e5:5c:74:b8:ff:50:9c:
         9f:01:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:19 2026 by rpki-client