Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/150C1686283511EDABF49D69C4F9AE02.roa
File:                     150C1686283511EDABF49D69C4F9AE02.roa (raw, json)
Hash identifier:          LLGJ17Nou/4s6iU/phgh61bl/Dsvbl9fuqtoB8+Y6Fw=
Subject key identifier:   C6:19:36:56:53:1C:83:5E:BB:61:3D:57:39:38:D1:F8:CB:08:9A:3F
Certificate issuer:       /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
Certificate serial:       02C9
Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/150C1686283511EDABF49D69C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:08:03 +0000
ROA not before:           Wed 13 Aug 2025 02:39:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150182
IP address blocks:        103.209.108.0/23 maxlen: 23
                          103.209.108.0/24 maxlen: 24
                          103.209.109.0/24 maxlen: 24
                          2001:df1:31c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl
                          rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
        Validity
            Not Before: Aug 13 02:39:11 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a401f3-cf4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:16:b0:ce:be:a1:04:51:4c:36:bf:5d:52:
                    b6:3e:50:43:9d:51:72:d3:96:04:d6:86:71:35:29:
                    46:e9:46:52:f1:e7:52:18:83:ce:f7:15:35:bf:0d:
                    0b:05:18:18:3e:46:7a:6e:d8:01:43:d8:4c:62:32:
                    ef:90:ce:8d:63:af:21:fb:2d:f3:7b:9b:f6:25:fc:
                    ef:ab:0a:6e:ea:8a:61:7a:fc:26:5e:c1:1a:e0:8a:
                    90:d4:4f:42:5b:cd:59:f9:29:9a:27:a0:6a:45:4d:
                    4f:03:df:27:81:e9:4d:b0:e4:f0:34:12:6a:8d:57:
                    f7:ad:a4:21:90:9c:3b:b8:8c:a0:5d:fb:2c:51:de:
                    75:04:a9:27:f0:ca:52:6c:a5:0e:80:40:5a:81:57:
                    2c:92:9d:92:23:31:05:3a:0e:85:d4:59:e2:53:f7:
                    a7:8a:d2:c8:2d:6e:ab:c5:92:72:b2:55:9f:35:4a:
                    21:72:81:54:bc:a2:b2:bf:98:3f:2c:5e:91:7e:03:
                    cf:ff:43:56:93:5e:a9:95:e5:0f:5c:9f:62:b9:fe:
                    01:7a:03:cc:2c:0b:ca:4b:7b:c2:dc:35:49:c3:98:
                    af:cc:23:32:2b:17:80:e3:0b:06:ef:2f:ac:d0:17:
                    81:a0:6e:3e:0a:d4:fb:94:15:20:56:33:55:d4:a5:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:36:56:53:1C:83:5E:BB:61:3D:57:39:38:D1:F8:CB:08:9A:3F
            X509v3 Authority Key Identifier:
                keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/150C1686283511EDABF49D69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.108.0/23
                IPv6:
                  2001:df1:31c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:77:00:60:46:f3:ec:bb:cd:0b:be:da:52:9c:d0:66:b0:d5:
         30:ce:ad:a7:a2:ef:01:b1:ce:7f:e9:cb:d5:cf:10:a0:ae:55:
         27:f4:fc:68:85:d8:1f:1e:e1:60:4e:56:fa:57:2d:a6:0a:74:
         28:c7:a8:bb:82:3c:6c:fa:27:72:2f:7b:a1:60:13:43:0d:89:
         35:af:93:56:b5:88:6f:90:aa:30:ea:f1:2f:d9:dd:4e:6e:f0:
         39:26:dd:71:82:af:9e:81:45:3f:31:ea:b4:4d:68:be:fe:30:
         29:fb:8b:a3:3a:99:2c:d4:6b:50:32:e2:54:a9:98:b8:b3:97:
         94:fa:16:50:df:2d:2d:af:91:f7:51:e1:3a:22:a3:ba:c8:7f:
         e7:4e:10:2e:d4:f2:3c:87:ab:5d:82:5b:ef:03:ee:d1:09:2f:
         70:6d:4b:63:02:2f:e4:25:9f:ce:3e:bc:f6:22:98:ec:a9:26:
         cb:5b:e0:f4:47:ed:fb:72:87:27:0c:69:df:41:08:9b:41:db:
         c9:b1:cb:7b:89:7c:2e:6d:15:c2:56:fa:51:12:f9:ec:54:e2:
         34:eb:13:85:20:14:b9:1c:4b:8e:82:fb:df:5c:b1:82:c8:b2:
         63:f6:3f:4f:2e:87:50:97:be:72:46:84:40:ce:b3:90:0a:bb:
         39:af:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:04 2026 by rpki-client