Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/800EC4AE756F11EAAA2E0F6CC4F9AE02.roa
File:                     800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (raw, json)
Hash identifier:          blTR7FZGYhqfmkBDBSyb66ptUGt5kPtOu9kj+Uqu480=
Subject key identifier:   92:EF:88:1C:5F:38:6F:0D:37:59:44:06:85:03:27:F7:94:29:AF:5F
Certificate issuer:       /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F
Certificate serial:       0A96
Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/800EC4AE756F11EAAA2E0F6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:29:35 +0000
ROA not before:           Sat 26 Apr 2025 19:59:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140541
IP address blocks:        103.150.26.0/23 maxlen: 23
                          103.150.26.0/24 maxlen: 24
                          103.150.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl
                          rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 19:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2710 (0xa96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F
        Validity
            Not Before: Apr 26 19:59:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a406ff-4bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:c9:4f:74:17:4e:7b:40:58:83:40:8e:0e:
                    ee:75:4d:fa:e1:78:b1:98:79:f2:29:ad:a0:bf:cc:
                    65:91:ea:6a:c1:ab:84:49:4b:99:ab:f3:29:bb:fb:
                    7e:aa:22:cc:e7:62:3b:d5:0c:1c:d5:47:a8:1d:d5:
                    92:b3:f5:41:c6:75:87:7c:01:a3:a9:a0:46:37:8a:
                    48:b3:40:8a:b8:2e:89:ff:15:50:14:29:58:03:ca:
                    52:7b:a7:61:ae:d2:36:4a:75:37:0a:84:6f:43:10:
                    1d:b3:e2:15:55:a1:e9:e7:b0:ba:37:68:be:5b:3b:
                    23:6f:b5:3c:22:88:c4:0d:57:19:6b:25:dd:88:8e:
                    04:0a:65:bd:20:c6:b1:fb:13:d1:c7:5b:51:bc:fc:
                    9c:fd:66:bb:8e:07:c3:ed:9d:46:ad:78:bc:16:92:
                    f6:df:7f:48:c4:6d:5f:76:a6:81:2e:c1:ec:1c:65:
                    3e:41:67:44:77:04:9c:a3:fc:c2:f4:9b:63:fa:25:
                    7d:05:8f:ca:1f:d8:c1:3a:ff:9f:b8:68:32:ee:e9:
                    c4:1a:e2:4a:1f:54:97:da:3c:c6:95:a5:a9:c1:0f:
                    78:20:cb:18:3d:9e:3f:06:0c:77:8c:dc:58:ba:1b:
                    65:8f:7d:d8:2c:87:a1:33:46:80:6c:1b:66:1e:7b:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EF:88:1C:5F:38:6F:0D:37:59:44:06:85:03:27:F7:94:29:AF:5F
            X509v3 Authority Key Identifier:
                keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/800EC4AE756F11EAAA2E0F6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:ef:c4:8c:dd:77:fe:5c:a0:36:a6:28:45:61:de:5e:01:
         fe:f3:d3:0d:b1:11:64:de:54:22:16:b2:74:1a:fc:ac:1e:fc:
         3f:eb:83:3b:d6:0d:08:74:7e:8b:7a:ed:83:11:d7:47:1f:0b:
         12:27:f4:d7:c8:89:43:db:82:55:d3:90:46:c5:d3:23:18:d6:
         1f:1d:bc:41:43:52:f6:23:8a:71:fb:9e:99:de:3b:e7:4c:b4:
         0b:47:59:9e:3b:0a:c9:48:38:7a:9c:56:5b:06:c5:80:78:a0:
         47:5a:3f:80:50:c6:cd:13:4b:ba:83:93:2c:76:17:4c:f8:fe:
         52:dd:e8:f3:0d:2f:52:b1:09:d2:23:d2:d2:64:38:c8:cf:b9:
         ef:92:fa:b1:be:b8:86:5d:ad:36:9a:fd:9a:f4:38:0b:b3:c1:
         8c:01:7b:70:f1:15:2e:da:87:af:ba:ad:1f:7d:0a:34:65:78:
         fb:13:ab:64:83:25:91:24:69:d5:66:2e:18:0c:92:09:7c:f6:
         16:d9:79:b1:61:8f:25:86:3b:18:7f:ff:b1:3f:58:58:e3:5f:
         71:80:2f:78:57:14:ae:75:85:b4:b3:cd:ef:82:29:b2:a3:8e:
         3d:6a:ee:32:61:92:a9:12:95:0a:a0:f3:2f:90:49:6e:1a:c7:
         ef:9c:90:f1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF
RTNBNDUwNUYwHhcNMjUwNDI2MTk1OTEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDZmZi00YmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo1PJT3QXTntAWINAjg7udU364XixmHnyKa2gv8xlkepqwauESUuZq/Mpu/t+
qiLM52I71Qwc1UeoHdWSs/VBxnWHfAGjqaBGN4pIs0CKuC6J/xVQFClYA8pSe6dh
rtI2SnU3CoRvQxAds+IVVaHp57C6N2i+Wzsjb7U8IojEDVcZayXdiI4ECmW9IMax
+xPRx1tRvPyc/Wa7jgfD7Z1GrXi8FpL2339IxG1fdqaBLsHsHGU+QWdEdwSco/zC
9Jtj+iV9BY/KH9jBOv+fuGgy7unEGuJKH1SX2jzGlaWpwQ94IMsYPZ4/Bgx3jNxY
uhtlj33YLIehM0aAbBtmHnsOhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJLviBxf
OG8NN1lEBoUDJ/eUKa9fMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1
NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjAwQjYvOUY5QUY3QTg3NTZFMTFFQTk5MTQyMzZCQzRGOUFFMDIvODAwRUM0QUU3
NTZGMTFFQUFBMkUwRjZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5YaMA0GCSqGSIb3DQEBCwUAA4IBAQARxu/EjN13/lygNqYoRWHe
XgH+89MNsRFk3lQiFrJ0GvysHvw/64M71g0IdH6Leu2DEddHHwsSJ/TXyIlD24JV
05BGxdMjGNYfHbxBQ1L2I4px+56Z3jvnTLQLR1meOwrJSDh6nFZbBsWAeKBHWj+A
UMbNE0u6g5MsdhdM+P5S3ejzDS9SsQnSI9LSZDjIz7nvkvqxvriGXa02mv2a9DgL
s8GMAXtw8RUu2oevuq0ffQo0ZXj7E6tkgyWRJGnVZi4YDJIJfPYW2XmxYY8lhjsY
f/+xP1hY419xgC94VxSudYW0s83vgimyo449au4yYZKpEpUKoPMvkEluGsfvnJDx
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:24 2026 by rpki-client