Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/458D9132027011EB98FEC44BC4F9AE02.roa
File:                     458D9132027011EB98FEC44BC4F9AE02.roa (raw, json)
Hash identifier:          pkAfBicS1xoE+XvgOEnkzo1bk8OIaDY2M85wJQOULGw=
Subject key identifier:   65:C0:83:0C:0D:22:E6:22:53:5C:26:F7:EF:93:6C:E0:E8:FF:91:88
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0AAC
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/458D9132027011EB98FEC44BC4F9AE02.roa
Signing time:             Thu 28 May 2026 20:23:31 +0000
ROA not before:           Thu 28 May 2026 20:23:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        103.150.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2732 (0xaac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: May 28 20:23:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a18a443-8536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:e0:c5:9a:a7:23:01:6e:35:63:c8:48:17:
                    f0:3d:2d:20:64:d4:28:de:9e:1b:f3:0d:d9:ac:ab:
                    2d:e8:b6:c3:6b:19:c2:ff:84:34:58:d8:78:81:5a:
                    b2:88:8a:03:5d:cf:80:a3:4f:63:06:fa:00:1c:ca:
                    4e:a2:17:a8:14:ce:08:58:7b:ed:aa:0f:e4:ab:f9:
                    b9:7b:f9:9f:8f:f0:ea:ac:0d:b7:d2:21:b8:f3:41:
                    ce:a1:91:bf:6f:42:aa:8f:07:02:eb:84:58:f7:3f:
                    8a:a4:fc:61:f2:7b:d2:a8:91:74:5e:c1:e6:36:00:
                    f7:11:bf:42:0b:ef:94:74:26:28:bf:d0:a5:f6:48:
                    c8:17:3c:d1:e6:e0:d7:5b:07:fa:f0:15:97:3b:97:
                    83:23:8e:5d:b7:2a:f2:78:e7:c9:6e:d4:64:c0:11:
                    eb:97:54:7a:84:a9:eb:fd:ee:f6:87:9b:7b:6a:f0:
                    14:4b:b0:61:f6:db:8c:83:cd:66:66:a3:b4:66:d1:
                    62:61:12:4c:89:3f:85:82:a5:0e:7b:49:dd:97:69:
                    5e:5f:70:39:76:2c:13:55:76:87:e3:43:f2:58:b1:
                    ae:1d:23:0c:7e:a6:61:95:63:49:36:44:39:99:e6:
                    38:8d:c3:97:95:a7:96:76:7f:9a:fc:fa:a0:35:80:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C0:83:0C:0D:22:E6:22:53:5C:26:F7:EF:93:6C:E0:E8:FF:91:88
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/458D9132027011EB98FEC44BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:29:32:85:9c:59:11:87:54:61:6a:d5:75:0b:16:2f:c2:18:
         c3:bc:35:67:29:cb:98:ed:73:1f:d8:73:11:79:ca:95:9d:a4:
         36:3c:7e:ba:d6:77:16:a2:ce:ff:68:d1:9b:05:f3:6b:43:68:
         f3:8b:5b:7c:fa:1b:24:d4:a9:8a:69:20:89:22:b2:bb:fd:4a:
         2f:43:b6:9f:ff:52:9f:6c:66:a5:3e:58:07:61:cf:1c:c4:4b:
         92:56:a6:dc:4b:bb:02:89:1c:1f:1d:0d:6e:ad:1b:51:58:bc:
         8a:e2:cd:35:71:4d:52:82:dc:b9:b9:d5:42:2a:67:ee:81:11:
         d2:73:9d:55:f8:3a:c8:3b:e5:0f:ed:7f:54:d2:8f:b2:38:c5:
         df:6d:b2:08:b6:ac:2a:53:08:72:8d:1d:36:75:cc:06:e7:e4:
         d3:51:97:4c:92:a2:cb:48:64:48:12:ff:73:73:82:fc:41:ce:
         81:c0:86:78:52:b6:61:f6:6b:41:0a:6d:d4:83:f3:b0:9c:72:
         db:ff:9d:4a:43:34:9f:2f:ce:0c:fd:e6:15:e7:21:d3:3c:06:
         b6:3f:0e:10:c3:61:dc:61:d5:9c:6f:3b:2e:3b:a1:cb:d2:d1:
         a2:b2:86:48:5b:cc:e9:6c:2b:9d:31:f5:10:76:ff:df:cb:89:
         89:25:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:17 2026 by rpki-client