Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/30BF89A0785C11ECB03F8929C4F9AE02.roa
File:                     30BF89A0785C11ECB03F8929C4F9AE02.roa (raw, json)
Hash identifier:          Rub+wgLJfAVCREUzu5e+VbfeKcxtM8gawvzA81jVszY=
Subject key identifier:   EE:B0:68:26:79:F4:51:20:FE:21:22:4C:DC:2F:BE:48:25:8B:72:68
Certificate issuer:       /CN=A919C5C6/serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9
Certificate serial:       048D
Authority key identifier: 50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/30BF89A0785C11ECB03F8929C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:48:54 +0000
ROA not before:           Tue 02 Dec 2025 23:28:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149060
IP address blocks:        103.177.150.0/23 maxlen: 23
                          103.177.150.0/24 maxlen: 24
                          103.177.151.0/24 maxlen: 24
                          2001:df0:2540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl
                          rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165 (0x48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5C6, serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9
        Validity
            Not Before: Dec  2 23:28:11 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a435b6-afa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:d7:e5:46:b1:76:51:d1:cd:fa:e6:a8:7d:
                    8d:2a:91:02:25:a4:45:af:7e:dd:0f:55:48:99:8a:
                    1b:cf:5e:c4:46:45:db:42:68:17:b3:af:cd:40:63:
                    01:ab:33:05:07:48:bd:c6:2b:11:a9:cb:dc:6b:d0:
                    1d:2a:61:16:46:7a:d5:25:50:09:d7:99:61:ef:ac:
                    2f:8e:90:49:70:a5:ab:40:07:eb:89:66:75:5d:4b:
                    d0:c3:83:6a:bc:57:88:3e:e0:cf:c6:7e:44:64:27:
                    bf:a8:c0:02:81:78:f6:4e:82:d8:32:5f:fd:f1:55:
                    1b:5b:9f:ff:b4:d8:d9:cc:b5:24:b4:a9:ad:ba:10:
                    14:73:57:04:e1:62:74:4e:f9:5a:be:63:af:76:96:
                    72:ca:af:32:68:2e:70:19:2f:c5:34:36:5e:4d:dc:
                    89:ca:b0:1b:15:37:b1:b1:1f:78:4a:c3:c6:73:1e:
                    6f:77:c4:71:fe:06:35:04:30:57:93:0d:aa:c3:98:
                    02:34:5f:d2:c8:b9:97:2f:76:5b:61:4f:63:b2:36:
                    2a:3e:c5:8a:06:96:c7:43:5c:de:66:cc:ed:2b:05:
                    32:8f:35:9f:6c:e9:4c:86:d1:ed:9c:2d:b0:b4:f6:
                    59:f3:6c:03:b7:89:1b:60:41:af:b0:b6:75:9e:3c:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B0:68:26:79:F4:51:20:FE:21:22:4C:DC:2F:BE:48:25:8B:72:68
            X509v3 Authority Key Identifier:
                keyid:50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/30BF89A0785C11ECB03F8929C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.150.0/23
                IPv6:
                  2001:df0:2540::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:76:73:4e:ae:1d:4f:73:51:6d:39:b1:72:65:38:af:6c:39:
         4c:b1:67:ab:da:69:71:da:2c:e2:d0:77:ba:42:4e:12:64:b5:
         cf:94:80:fd:c1:0a:a9:fe:95:c6:4d:94:47:26:25:ae:18:b6:
         8e:89:e5:f2:78:11:97:64:c8:91:3f:2c:8b:c7:cf:a7:4b:11:
         85:a0:f9:13:1a:d3:9e:da:7e:20:f4:4e:65:17:a7:0c:d2:81:
         51:8e:4f:22:c4:5a:0d:12:b1:0b:5f:23:05:bb:0c:a7:39:75:
         f8:79:dc:c0:3f:32:2e:72:60:a0:8e:d9:23:df:64:52:0f:3e:
         12:7b:b5:3f:7d:10:e2:59:fb:0d:4b:fb:f2:a3:4f:b6:fc:f4:
         49:8c:23:ec:c1:dd:a1:00:9b:9d:28:9f:ad:69:34:61:6c:83:
         14:de:81:5f:b2:e0:e9:2d:08:91:84:b6:01:9b:bd:a7:f8:a1:
         79:d8:cc:25:65:58:73:b3:67:2f:e8:c4:15:05:29:f0:72:56:
         4e:2d:dd:09:a4:2d:9d:54:6f:78:a0:14:01:92:a2:e6:46:6b:
         2d:6c:e1:fa:d8:d7:1b:ef:bf:12:40:ec:dd:27:ae:de:5d:10:
         ba:6c:c9:51:f4:a7:45:73:d7:6d:61:68:0e:c3:f6:c6:6d:b0:
         bc:20:0d:4a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM1QzYxMTAvBgNVBAUTKDUwODlFMkRDODEyRDM0REYzRDREQjU4MzU1Q0ZGMTRC
MDdBRURFQjkwHhcNMjUxMjAyMjMyODExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzViNi1hZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnArX5UaxdlHRzfrmqH2NKpECJaRFr37dD1VImYobz17ERkXbQmgXs6/NQGMB
qzMFB0i9xisRqcvca9AdKmEWRnrVJVAJ15lh76wvjpBJcKWrQAfriWZ1XUvQw4Nq
vFeIPuDPxn5EZCe/qMACgXj2ToLYMl/98VUbW5//tNjZzLUktKmtuhAUc1cE4WJ0
TvlavmOvdpZyyq8yaC5wGS/FNDZeTdyJyrAbFTexsR94SsPGcx5vd8Rx/gY1BDBX
kw2qw5gCNF/SyLmXL3ZbYU9jsjYqPsWKBpbHQ1zeZsztKwUyjzWfbOlMhtHtnC2w
tPZZ82wDt4kbYEGvsLZ1njyLjQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO6waCZ5
9FEg/iEiTNwvvkgli3JoMB8GA1UdIwQYMBaAFFCJ4tyBLTTfPU21g1XP8UsHrt65
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVDNi83MzYxNzc3Mjc4
NTgxMUVDOTY5OTMyMEVDNEY5QUUwMi9VSW5pM0lFdE5OODlUYldEVmNfeFN3ZXUz
cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VJbmkzSUV0Tk44OVRiV0RWY194U3dldTNyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM1QzYvNzM2MTc3NzI3ODU4MTFFQzk2OTkzMjBFQzRGOUFFMDIvMzBCRjg5QTA3
ODVDMTFFQ0IwM0Y4OTI5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7GWMA8EAgACMAkDBwAgAQ3wJUAwDQYJKoZIhvcNAQELBQADggEB
AKx2c06uHU9zUW05sXJlOK9sOUyxZ6vaaXHaLOLQd7pCThJktc+UgP3BCqn+lcZN
lEcmJa4Yto6J5fJ4EZdkyJE/LIvHz6dLEYWg+RMa057afiD0TmUXpwzSgVGOTyLE
Wg0SsQtfIwW7DKc5dfh53MA/Mi5yYKCO2SPfZFIPPhJ7tT99EOJZ+w1L+/KjT7b8
9EmMI+zB3aEAm50on61pNGFsgxTegV+y4OktCJGEtgGbvaf4oXnYzCVlWHOzZy/o
xBUFKfByVk4t3QmkLZ1Ub3igFAGSouZGay1s4frY1xvvvxJA7N0nrt5dELpsyVH0
p0Vz121haA7D9sZtsLwgDUo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:41 2026 by rpki-client