Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/2015E6B2C66F11EAA0B1B019C4F9AE02.roa
File:                     2015E6B2C66F11EAA0B1B019C4F9AE02.roa (raw, json)
Hash identifier:          /9OAZib6ORGUsj/nBJu2BYzp5KOlwzvHRnmf3XojSfQ=
Subject key identifier:   38:28:61:AE:D6:03:C2:AB:A4:C3:1C:26:2F:58:0B:29:CD:10:F0:7F
Certificate issuer:       /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial:       0918
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/2015E6B2C66F11EAA0B1B019C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:53:01 +0000
ROA not before:           Fri 30 May 2025 20:59:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.150.161.0/24 maxlen: 24
                          103.161.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
                          rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
        Validity
            Not Before: May 30 20:59:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4289d-3b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:1d:21:04:72:16:e7:18:55:94:1a:45:ac:
                    ef:1e:55:48:3c:24:b5:18:b3:7f:c4:41:ba:22:53:
                    26:dc:82:3c:78:40:45:d3:03:56:ae:ff:df:b0:13:
                    56:3b:50:9d:a9:fa:f4:ee:00:65:fd:77:de:e2:1e:
                    75:35:9c:33:e6:68:8d:c8:88:48:30:2e:88:c5:52:
                    ae:e4:75:05:58:bf:ef:16:3b:b8:2d:eb:e4:5a:c3:
                    1f:f6:23:27:c7:0c:da:5f:72:5c:a0:d9:93:39:b5:
                    9d:c1:d6:fd:97:d1:26:dd:9c:5c:f3:f4:0d:8b:50:
                    eb:43:89:84:35:a8:cd:ff:1a:02:e4:1d:ab:68:66:
                    5c:6c:91:81:b8:6f:03:94:a5:ac:47:05:ce:96:6c:
                    44:d5:82:02:68:75:c1:22:0e:e0:43:eb:3b:59:d4:
                    d6:0b:1b:1d:af:8d:5f:99:68:b7:b6:92:b9:34:99:
                    75:6f:e4:e0:bf:61:20:7b:f7:c2:8a:c3:92:87:8d:
                    d4:d8:7d:ee:15:5b:bf:b1:6c:98:54:55:50:86:a8:
                    91:43:01:36:17:9e:6f:41:3b:b9:46:51:15:95:7d:
                    41:fa:f5:d3:7b:e3:d3:76:e2:0b:63:f4:50:4b:71:
                    3c:65:d2:00:ba:ee:b8:55:f5:ef:4e:fd:3f:97:ed:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:61:AE:D6:03:C2:AB:A4:C3:1C:26:2F:58:0B:29:CD:10:F0:7F
            X509v3 Authority Key Identifier:
                keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/2015E6B2C66F11EAA0B1B019C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.161.0/24
                  103.161.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:03:ab:b8:58:36:a1:91:89:be:e5:fc:15:94:9e:49:78:a1:
         78:bf:83:f1:7d:b4:30:65:ab:de:ce:14:6f:d7:af:28:75:f1:
         cb:fa:02:cd:61:79:29:82:26:fa:e3:3e:a2:83:94:08:98:40:
         da:c0:dd:41:b7:c8:78:c0:86:f8:0c:51:bd:ec:03:d7:6d:79:
         0d:8f:2b:ec:73:5c:86:db:07:c3:d8:88:aa:35:4c:ba:eb:96:
         8e:44:e9:ae:8e:a1:9f:1f:6c:c3:b6:72:26:df:68:23:5c:a1:
         34:88:68:f9:54:63:c9:b3:64:e5:9a:0a:54:73:e6:8e:74:59:
         b5:95:00:f8:9b:45:02:f8:11:39:88:c9:ca:de:31:5d:1d:cd:
         fb:64:5a:77:71:57:83:c2:a6:ce:04:65:b8:7b:34:1e:6a:29:
         28:72:47:81:15:61:80:67:8c:61:35:42:f5:4f:98:69:85:45:
         32:de:5c:f9:c2:34:2a:75:02:56:41:a9:de:7b:72:5b:23:0d:
         68:2a:d9:ac:9a:ea:c4:ea:f3:40:29:de:ef:e7:8a:a1:b9:5a:
         5b:c0:a0:bf:c9:09:11:62:1d:ca:d2:83:6e:46:e7:73:f7:24:
         7e:d6:6d:33:96:b6:2a:13:65:7e:33:41:41:52:b7:ec:95:02:
         e9:d9:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:52 2026 by rpki-client