Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/D1E5207E623E11EEB730FC4FC4F9AE02.roa
File:                     D1E5207E623E11EEB730FC4FC4F9AE02.roa (raw, json)
Hash identifier:          YKB5eXYXJ+b4d9GmkKE4qqb7+srssCNwDwAdrBix020=
Subject key identifier:   63:43:11:20:92:4B:E6:E3:34:F6:42:E6:9F:0F:F5:CB:7F:8A:02:92
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0AAF
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/D1E5207E623E11EEB730FC4FC4F9AE02.roa
Signing time:             Thu 28 May 2026 20:23:36 +0000
ROA not before:           Thu 28 May 2026 20:23:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149042
IP address blocks:        103.150.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2735 (0xaaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: May 28 20:23:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a18a448-b23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:04:b2:23:23:23:1d:75:69:94:0c:7e:a6:
                    6a:89:87:74:04:f5:ba:96:df:a3:e8:46:93:33:4a:
                    86:d4:46:8a:44:04:16:dc:b5:d5:38:3d:9b:a3:17:
                    d3:95:bf:31:6f:b2:bd:36:71:44:13:51:af:64:d2:
                    f7:d8:7c:b1:4b:9f:93:c5:da:e0:dc:61:c5:2a:7b:
                    44:4f:87:6d:22:57:9d:03:7e:98:2c:ae:16:4d:2f:
                    6c:a9:81:e0:19:62:52:b6:d3:6a:ca:7d:0d:79:a9:
                    53:13:ab:d5:f9:5b:e0:0a:35:bf:92:7d:c5:df:2a:
                    6d:f2:e3:7e:4c:52:6b:db:b6:f3:f9:ce:d3:21:d9:
                    ff:ec:b2:d5:5a:4f:b2:9d:0b:66:0e:bf:4c:1e:5b:
                    85:27:a4:16:f8:c5:9a:ce:95:dd:cb:2e:9d:e0:2a:
                    f3:70:68:c4:e8:0d:aa:2a:73:bf:9b:e1:ed:8a:58:
                    3a:18:e1:ef:85:31:95:bb:24:91:18:62:fa:6f:37:
                    fb:2d:f1:87:0f:44:d0:41:cf:5e:30:97:6b:d8:37:
                    01:6a:8b:9f:e0:6b:7b:bf:1f:59:df:bb:9d:94:43:
                    a6:ea:b7:90:91:dd:e2:f0:5a:1c:60:c9:3f:e4:68:
                    e6:e0:69:94:8b:a5:1a:43:1e:25:25:5e:18:ec:d4:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:43:11:20:92:4B:E6:E3:34:F6:42:E6:9F:0F:F5:CB:7F:8A:02:92
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/D1E5207E623E11EEB730FC4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:a6:0f:25:9d:72:77:c8:71:c3:ad:e6:da:b7:ed:3f:b6:
         b0:7d:57:42:fb:47:16:7d:a6:34:26:9c:d2:cb:e9:0f:52:ac:
         d9:ee:22:89:eb:47:24:a2:e5:06:1d:6d:df:45:52:8d:d6:7b:
         5e:35:5e:a2:90:4d:31:c7:27:96:0c:0b:34:c2:be:1a:e6:a8:
         fa:f7:cf:7f:2e:12:ec:30:f8:b8:f1:7f:e1:5b:99:53:1a:94:
         8f:8b:46:b5:4f:4b:94:60:b3:f0:91:5a:04:93:f6:48:e0:63:
         6a:60:fc:02:79:2e:5d:e5:ab:b1:31:25:ce:ce:8e:f4:be:e6:
         48:ab:d6:ea:31:bc:cc:76:17:f3:39:7e:73:6e:24:07:d9:0d:
         3a:78:e4:64:22:32:04:e6:eb:c1:fc:74:0a:41:3b:27:b9:80:
         94:ce:ec:fb:71:76:77:1d:2d:93:f9:fa:11:41:e3:bf:34:d2:
         9e:37:28:bc:19:0d:61:08:4c:c2:76:63:13:5f:42:47:9d:f1:
         6b:44:3d:ae:5a:46:44:33:e8:89:08:1b:2f:0a:ba:33:69:d5:
         81:6c:6e:fb:31:d7:9d:55:62:e0:0f:ff:00:e8:42:76:9d:02:
         95:d5:7b:6a:b8:88:19:42:8b:3c:07:cc:49:d2:2f:a5:88:a4:
         bf:8e:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:20 2026 by rpki-client