Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
File:                     A778AAF6A42111EAB3108934C4F9AE02.roa (raw, json)
Hash identifier:          +2e0ypBMf/2EVb6MaYRFXsgQhBqjAZqucCJc3CHmtVE=
Subject key identifier:   C5:40:71:FE:DC:26:A3:3C:97:BF:28:6F:1B:75:67:DE:39:FA:2E:3F
Certificate issuer:       /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial:       09AD
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:32:35 +0000
ROA not before:           Fri 30 May 2025 20:58:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140631
IP address blocks:        103.150.74.0/23 maxlen: 23
                          103.150.74.0/24 maxlen: 24
                          103.150.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
        Validity
            Not Before: May 30 20:58:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a407b3-e72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:1f:c3:6a:01:71:29:50:22:9d:f0:92:7e:
                    6c:6d:68:e8:3f:a7:28:61:a2:1e:c3:7f:99:b6:2e:
                    1e:8c:84:d6:9c:10:41:c6:a9:16:05:d0:72:42:23:
                    f9:a7:7c:b0:f3:93:5f:2b:33:bc:a9:90:fb:06:c9:
                    21:50:a4:44:0b:18:c1:11:a0:dc:cf:26:bc:61:92:
                    95:a4:47:3c:bd:6d:88:87:b9:62:18:d7:ab:3a:05:
                    2d:fd:b9:81:dd:62:c8:24:8d:7b:b2:64:48:96:ed:
                    5d:d5:35:6a:2b:d9:b9:8b:0f:cf:ca:56:51:35:f4:
                    78:06:6c:1b:67:9e:20:e0:78:20:55:aa:7a:9d:07:
                    80:e7:92:05:dc:2d:56:df:91:b0:20:23:42:95:5a:
                    8c:c8:8f:31:ae:7d:4a:0e:9f:e7:23:9e:bd:9d:fc:
                    20:fe:a1:6c:15:99:07:fc:c8:fc:f4:72:84:cf:1a:
                    2e:f3:fc:e1:31:e1:8f:9a:91:a7:cb:f9:ce:81:74:
                    b7:b7:6e:5b:9e:20:69:fc:8e:5b:79:4b:a2:00:12:
                    04:15:ac:b6:ee:db:2a:65:c2:f1:71:81:f9:9c:ce:
                    fe:42:28:5c:a0:8e:ce:a0:b9:6d:00:82:55:fd:65:
                    92:02:0d:75:55:4d:f5:30:06:a7:51:25:79:fe:32:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:40:71:FE:DC:26:A3:3C:97:BF:28:6F:1B:75:67:DE:39:FA:2E:3F
            X509v3 Authority Key Identifier:
                keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/A778AAF6A42111EAB3108934C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:2e:ee:91:47:83:f5:29:cb:fb:70:2b:1e:31:39:aa:be:
         7f:21:ed:d8:2b:6b:26:8d:28:c9:b3:5d:03:bc:72:aa:c9:46:
         25:5d:80:36:09:4b:af:04:9f:86:52:57:52:c2:d1:35:5c:d0:
         c4:ec:5b:45:6d:4f:b4:26:19:f6:4f:a5:d5:b6:7d:94:01:7b:
         09:7f:09:de:c2:f7:ae:2d:93:1f:e9:b7:bd:08:ac:0e:e4:10:
         7c:86:e8:09:ed:91:0d:b4:3c:36:46:8b:8b:66:86:81:2a:b4:
         39:26:c1:93:d3:69:96:78:96:56:d8:5d:64:65:f3:3c:61:7c:
         ee:6b:86:af:fe:40:13:bc:a6:70:63:48:e1:28:da:28:60:20:
         e5:60:5b:86:25:b5:7f:2b:98:00:1f:7b:6d:5c:9b:0d:3c:8b:
         f2:49:a9:06:3d:4f:e9:9a:f5:1f:76:5a:92:b8:c5:57:7d:d6:
         1a:1b:30:32:7c:14:33:4e:44:34:f8:ca:4a:88:31:3e:94:6f:
         72:08:39:53:4f:d7:97:04:13:67:40:43:b7:34:5c:28:93:af:
         92:f1:c2:bd:b1:35:5a:58:6f:b3:94:cd:46:82:75:fa:55:fe:
         99:e2:16:8f:83:ef:3a:77:be:89:bd:63:5d:34:b2:33:cf:3a:
         54:30:16:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4
QzE5QzgyNEIwHhcNMjUwNTMwMjA1ODE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDdiMy1lNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwb0fw2oBcSlQIp3wkn5sbWjoP6coYaIew3+Zti4ejITWnBBBxqkWBdByQiP5
p3yw85NfKzO8qZD7BskhUKRECxjBEaDczya8YZKVpEc8vW2Ih7liGNerOgUt/bmB
3WLIJI17smRIlu1d1TVqK9m5iw/PylZRNfR4BmwbZ54g4HggVap6nQeA55IF3C1W
35GwICNClVqMyI8xrn1KDp/nI569nfwg/qFsFZkH/Mj89HKEzxou8/zhMeGPmpGn
y/nOgXS3t25bniBp/I5beUuiABIEFay27tsqZcLxcYH5nM7+QihcoI7OoLltAIJV
/WWSAg11VU31MAanUSV5/jJr9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMVAcf7c
JqM8l78obxt1Z945+i4/MB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0
MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBGQ0MvRjVDNDI0MDhBNDFGMTFFQUJEQzJGNTMxQzRGOUFFMDIvQTc3OEFBRjZB
NDIxMTFFQUIzMTA4OTM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5ZKMA0GCSqGSIb3DQEBCwUAA4IBAQCSwC7ukUeD9SnL+3ArHjE5
qr5/Ie3YK2smjSjJs10DvHKqyUYlXYA2CUuvBJ+GUldSwtE1XNDE7FtFbU+0Jhn2
T6XVtn2UAXsJfwnewveuLZMf6be9CKwO5BB8hugJ7ZENtDw2RouLZoaBKrQ5JsGT
02mWeJZW2F1kZfM8YXzua4av/kATvKZwY0jhKNooYCDlYFuGJbV/K5gAH3ttXJsN
PIvySakGPU/pmvUfdlqSuMVXfdYaGzAyfBQzTkQ0+MpKiDE+lG9yCDlTT9eXBBNn
QEO3NFwok6+S8cK9sTVaWG+zlM1GgnX6Vf6Z4haPg+86d76JvWNdNLIzzzpUMBb4
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:56 2026 by rpki-client