Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/A3AA461082BE11EB93A19A35C4F9AE02.roa
File:                     A3AA461082BE11EB93A19A35C4F9AE02.roa (raw, json)
Hash identifier:          FcPeshOBgwbO9rUWdVUpY9LSkh0o6hAVezvw+Vbo09o=
Subject key identifier:   32:54:CB:80:E4:73:E5:20:97:23:F6:C0:32:A2:75:6C:78:C5:10:B0
Certificate issuer:       /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Certificate serial:       06F3
Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/A3AA461082BE11EB93A19A35C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:44:33 +0000
ROA not before:           Thu 26 Jun 2025 22:11:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138013
IP address blocks:        103.150.77.0/24 maxlen: 24
                          103.151.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl
                          rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
        Validity
            Not Before: Jun 26 22:11:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a40a81-2360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3f:c0:e6:0b:7f:2a:6e:c6:ca:f9:b0:5e:d0:
                    85:32:46:23:96:cd:d8:80:89:c2:97:23:a5:dd:ac:
                    cc:0e:d0:b8:6a:88:d9:31:05:9e:79:fb:99:a6:35:
                    95:48:a2:87:a9:35:fc:34:96:40:1d:be:fb:9d:8e:
                    58:06:46:c3:4c:ef:1a:b1:f9:94:03:4c:35:20:f5:
                    ea:3b:74:23:03:ed:3f:a0:8e:06:7b:3c:a3:b8:38:
                    6b:77:96:a9:05:16:7d:a6:52:a9:ef:16:cc:85:0f:
                    64:88:eb:27:99:a2:9e:04:6b:7c:a5:76:4d:c3:d7:
                    53:d6:69:88:ec:f5:51:b7:c2:08:95:d0:9d:92:28:
                    15:74:ff:e2:33:2c:22:0f:9a:56:88:97:51:75:cb:
                    af:9e:08:55:ef:00:3c:8a:3d:a3:83:8b:c5:fc:b7:
                    24:2c:01:74:b5:d4:35:e2:0d:2d:3b:66:84:c5:92:
                    1c:f1:d3:53:56:cd:6a:69:e7:e3:6d:77:8a:0d:06:
                    c5:4c:0a:84:48:c1:90:d8:8a:1d:d3:36:d9:28:be:
                    98:fc:a0:d9:30:62:95:ad:b6:2e:30:84:a7:09:d6:
                    9f:b4:54:fb:48:9a:93:b1:be:d2:3f:a5:44:f4:c7:
                    e2:32:a0:30:52:ec:36:30:d9:6d:d6:70:6e:b1:2d:
                    48:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:54:CB:80:E4:73:E5:20:97:23:F6:C0:32:A2:75:6C:78:C5:10:B0
            X509v3 Authority Key Identifier:
                keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/A3AA461082BE11EB93A19A35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.77.0/24
                  103.151.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:b6:c1:52:e6:24:9d:bd:43:e9:b8:bc:13:cf:84:f6:11:ab:
         5c:fd:76:4a:b7:e1:a8:2e:dd:26:56:6c:75:b8:c3:57:8e:44:
         f7:0f:90:38:36:5a:61:ed:1a:a0:97:17:b1:17:fe:29:b2:c8:
         0f:1d:c1:22:4c:86:13:36:ec:ff:b0:7d:c6:5e:0b:59:c0:e8:
         d1:b6:0d:ec:a5:3e:0a:30:28:b8:4d:05:9c:32:fa:68:d2:f6:
         bf:63:fc:f0:c1:aa:04:92:75:b9:a5:aa:fe:6c:fb:6e:0a:65:
         72:b3:e5:55:30:17:96:17:37:38:8f:dd:f7:c3:da:68:1d:ce:
         7c:da:6d:e2:2e:88:58:f9:da:2c:e2:2c:ee:4c:a6:c6:7c:b9:
         80:19:6e:2c:33:72:fd:8e:8f:36:3d:71:96:74:4d:15:94:24:
         ae:b5:b1:e4:43:0a:f8:6e:45:b8:e9:91:6f:f5:ee:a7:b3:d9:
         93:7b:09:10:da:ca:93:d2:ef:88:db:6f:01:8a:74:ae:72:0d:
         c7:c6:c9:d6:37:9d:6c:6d:b1:8e:39:f2:0d:dd:13:2b:4e:71:
         b7:a3:77:2b:c7:80:0d:e8:e4:7a:cd:c3:d3:56:93:c8:da:26:
         49:6d:38:37:ec:55:4b:47:c0:42:f1:95:2a:e5:06:3a:e5:c6:
         c9:eb:d5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:37 2026 by rpki-client