Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/9AA539E6A82411EA996D5F41C4F9AE02.roa
File:                     9AA539E6A82411EA996D5F41C4F9AE02.roa (raw, json)
Hash identifier:          Ym9v48/N9FgIEUzCm6Ez2GZBz/gUxKfUxMymr1ze1Bg=
Subject key identifier:   F3:39:70:2B:6B:43:BC:A2:03:5C:FA:C7:DE:55:E8:28:50:12:63:F7
Certificate issuer:       /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
Certificate serial:       09C6
Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/9AA539E6A82411EA996D5F41C4F9AE02.roa
Signing time:             Sun 31 May 2026 21:23:49 +0000
ROA not before:           Sun 31 May 2026 21:23:49 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140552
IP address blocks:        103.150.78.0/23 maxlen: 23
                          103.150.78.0/24 maxlen: 24
                          103.150.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl
                          rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2502 (0x9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298
        Validity
            Not Before: May 31 21:23:49 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1ca6e5-c36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:61:dc:11:d7:d5:9e:c9:9e:e3:35:92:af:
                    42:ee:d4:1f:95:06:26:e8:d0:64:b9:63:38:6a:a1:
                    57:b8:e7:63:40:fb:2d:b5:5f:c1:85:4f:cc:7a:92:
                    5a:96:99:f9:52:03:47:ab:ed:c4:4e:d0:43:c1:f8:
                    64:4d:ad:10:55:26:18:be:67:15:21:ac:76:70:e7:
                    7e:2d:04:9e:94:6e:37:c9:99:46:40:82:89:5a:75:
                    7c:bf:36:34:68:85:29:0f:c1:4d:fd:c1:30:ef:b2:
                    14:90:1d:77:a9:18:c3:e0:89:e5:83:89:7b:7c:22:
                    91:4b:78:6e:33:68:1d:99:0e:0a:1d:0a:50:0d:56:
                    e5:0a:d4:49:23:36:6d:41:5a:42:16:8c:ac:12:d5:
                    f1:e5:61:4f:6f:7d:fa:d8:6d:3d:9e:de:8b:6b:42:
                    a3:47:e4:b5:ed:eb:b2:d4:fd:6f:f0:2e:43:93:05:
                    70:0a:5a:4b:5e:aa:75:d7:9b:7e:8b:fa:69:e7:91:
                    de:c5:37:ac:ea:2d:4d:a6:ac:54:f9:0c:3c:1b:95:
                    9c:f8:80:cf:ac:97:a9:e1:d3:c6:bf:e6:47:e6:36:
                    8a:16:14:2d:38:35:53:89:8b:b5:fe:f3:54:3a:6e:
                    79:76:93:57:9f:05:7e:32:06:14:66:75:ab:ad:40:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:39:70:2B:6B:43:BC:A2:03:5C:FA:C7:DE:55:E8:28:50:12:63:F7
            X509v3 Authority Key Identifier:
                keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/9AA539E6A82411EA996D5F41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:e3:7e:f6:ee:0d:29:c4:0e:ad:b9:bd:89:ed:76:80:d7:27:
         4f:b9:13:a5:a1:34:eb:cb:1d:ea:2b:6e:b0:93:29:bd:45:6c:
         6a:42:7e:fc:99:f6:2e:f5:ad:d9:74:22:58:46:29:3a:76:af:
         71:c0:17:ea:99:02:3d:d5:e9:a4:30:6b:aa:f5:48:26:c5:d1:
         b4:9f:bc:9d:cb:c8:a8:8b:a6:7a:52:39:5f:87:88:25:1e:05:
         90:a9:78:aa:39:8b:ca:b4:2c:28:cf:58:b7:8a:1d:ec:b6:ee:
         87:ee:19:ed:9a:e3:30:62:3e:3d:39:e2:b6:54:05:8a:b3:a6:
         8b:f6:5e:e5:e6:a3:eb:bd:35:df:bf:de:2f:e0:96:e1:97:8d:
         e1:02:65:ec:70:1f:30:8a:80:fc:10:14:4f:77:df:43:78:be:
         6a:18:c8:13:a1:12:88:8b:23:4d:7f:42:62:51:c2:31:61:93:
         b9:d4:7e:48:17:c5:62:61:5c:1e:54:7c:e1:64:ba:50:d7:69:
         ec:3a:40:2e:b8:1b:38:f8:a6:8f:b4:76:d5:3d:1f:11:65:eb:
         46:ea:aa:0c:4e:4b:46:dc:50:ea:17:80:c8:a6:11:73:48:f7:
         c7:9a:72:83:fd:68:09:9d:f4:9b:2f:6b:01:eb:02:bb:7e:20:
         2f:e1:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:25 2026 by rpki-client