Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa
File:                     9746A47821DD11EBBEEF997DC4F9AE02.roa (raw, json)
Hash identifier:          8BXU7nHvXE41jK2FCyo1pdczrBG2miz5FBL5ikw+rJo=
Subject key identifier:   27:48:6A:E0:6D:E7:70:73:20:66:FC:17:D4:CB:BF:64:1D:25:1D:2C
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0A78
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:31:34 +0000
ROA not before:           Fri 20 Jun 2025 20:26:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.150.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680 (0xa78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jun 20 20:26:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a469e6-242e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:8f:e1:a3:f6:eb:d4:8c:11:a2:d9:44:bc:
                    3c:a6:b1:66:4e:8d:dd:34:5e:90:19:42:20:71:71:
                    5c:54:4d:27:af:c6:b4:33:90:19:1b:5e:c3:95:c8:
                    b7:91:26:ac:b0:e5:00:eb:34:52:45:17:79:b1:ad:
                    12:c2:db:ea:a1:87:bc:e5:86:58:b8:50:3c:b7:a8:
                    d4:01:28:25:51:c2:33:a3:2a:65:b6:53:65:15:f8:
                    30:77:54:14:ea:f8:cf:98:39:c3:7a:1d:62:26:a7:
                    f2:1d:87:4e:23:a0:e5:1e:1c:c5:c2:ed:42:9d:39:
                    ee:23:bf:99:96:b0:bb:d2:8a:68:2d:7e:d1:c8:cb:
                    37:63:21:f9:c0:77:da:63:0b:17:4f:33:b8:75:de:
                    e0:99:8d:b7:bd:4f:5b:0f:c6:dc:6b:b1:8e:25:17:
                    f6:e4:ad:fc:de:d3:a6:79:28:f0:0a:82:88:11:89:
                    2f:e0:4c:6c:a2:0d:72:53:ad:fd:27:6a:46:a8:8d:
                    94:5e:1f:7d:7d:18:72:4e:58:01:4d:2c:81:d7:71:
                    77:26:63:db:e3:93:05:9a:39:e6:ae:60:b1:07:f2:
                    87:4a:22:e7:8b:c3:dd:c9:f3:46:49:2c:a6:26:1d:
                    31:ce:a5:f9:80:db:48:e3:1a:c5:36:c5:f2:9f:02:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:48:6A:E0:6D:E7:70:73:20:66:FC:17:D4:CB:BF:64:1D:25:1D:2C
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/9746A47821DD11EBBEEF997DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:00:b3:2a:56:62:62:47:ec:36:27:2f:a7:e8:b8:87:a1:e9:
         ea:5d:e6:80:87:fb:c2:1e:95:a0:96:cd:d7:98:07:5a:d3:6d:
         dc:7f:c5:9f:a8:30:98:f0:6c:63:56:0f:30:a2:b3:57:53:d9:
         e2:48:83:70:82:26:ab:a9:9c:0a:b0:e3:c0:86:64:f2:bf:fd:
         d9:c8:44:cc:37:bf:1e:d7:36:4a:54:1b:13:1c:97:a6:94:8c:
         9f:04:f9:ea:69:9e:89:d9:30:96:53:a4:02:af:dc:c8:e2:f5:
         17:9d:49:0d:f0:05:97:34:1c:5b:ae:6c:36:7e:46:c4:95:8a:
         da:e3:38:d1:25:7d:71:7e:fc:b6:62:ad:08:6a:b9:94:4d:00:
         89:86:94:2c:e2:64:95:b0:59:6d:fb:2d:34:2d:ef:10:5b:d9:
         f1:9c:ed:d1:a6:43:32:2b:8e:dd:64:36:5f:7d:db:7c:30:5b:
         03:a4:da:f9:db:30:88:9b:33:cf:e7:14:45:e4:a3:b9:85:f4:
         ce:93:6f:88:4a:be:52:e1:b4:4d:63:3c:8d:f5:ad:d6:9d:a5:
         bb:5f:eb:74:05:10:a3:7c:fb:cc:4f:ed:a3:8a:9a:f9:e6:d1:
         2d:64:7e:82:8c:3a:e5:da:82:fd:f3:ff:ca:c1:77:55:08:a3:
         ba:1a:d4:8a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4
NUNDQ0Y5NkIwHhcNMjUwNjIwMjAyNjUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjllNi0yNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArr+P4aP269SMEaLZRLw8prFmTo3dNF6QGUIgcXFcVE0nr8a0M5AZG17Dlci3
kSassOUA6zRSRRd5sa0SwtvqoYe85YZYuFA8t6jUASglUcIzoypltlNlFfgwd1QU
6vjPmDnDeh1iJqfyHYdOI6DlHhzFwu1CnTnuI7+ZlrC70opoLX7RyMs3YyH5wHfa
YwsXTzO4dd7gmY23vU9bD8bca7GOJRf25K383tOmeSjwCoKIEYkv4Exsog1yU639
J2pGqI2UXh99fRhyTlgBTSyB13F3JmPb45MFmjnmrmCxB/KHSiLni8PdyfNGSSym
Jh0xzqX5gNtI4xrFNsXynwJT5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCdIauBt
53BzIGb8F9TLv2QdJR0sMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0
NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQxRDIvRjcyMjNGQjQ4NDU0MTFFQThENkUzNTBFQzRGOUFFMDIvOTc0NkE0Nzgy
MUREMTFFQkJFRUY5OTdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5a1MA0GCSqGSIb3DQEBCwUAA4IBAQCFALMqVmJiR+w2Jy+n6LiH
oenqXeaAh/vCHpWgls3XmAda023cf8WfqDCY8GxjVg8worNXU9niSINwgiarqZwK
sOPAhmTyv/3ZyETMN78e1zZKVBsTHJemlIyfBPnqaZ6J2TCWU6QCr9zI4vUXnUkN
8AWXNBxbrmw2fkbElYra4zjRJX1xfvy2Yq0IarmUTQCJhpQs4mSVsFlt+y00Le8Q
W9nxnO3RpkMyK47dZDZffdt8MFsDpNr52zCImzPP5xRF5KO5hfTOk2+ISr5S4bRN
YzyN9a3WnaW7X+t0BRCjfPvMT+2jipr55tEtZH6CjDrl2oL98//KwXdVCKO6GtSK
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:09 2026 by rpki-client