Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/5A7E13CA8C2B11EA90152018C4F9AE02.roa
File:                     5A7E13CA8C2B11EA90152018C4F9AE02.roa (raw, json)
Hash identifier:          rUdJq8ubToO+Jf95JCEVcx4+sMHgtZ/vn08eLBUGR54=
Subject key identifier:   18:3C:58:4D:2F:D8:6E:7B:86:DA:86:26:66:5B:C1:84:74:C4:87:36
Certificate issuer:       /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
Certificate serial:       0A7C
Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/5A7E13CA8C2B11EA90152018C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 20:24:57 +0000
ROA not before:           Tue 30 Jun 2026 20:24:57 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140606
IP address blocks:        103.150.234.0/24 maxlen: 24
                          103.150.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2684 (0xa7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74
        Validity
            Not Before: Jun 30 20:24:57 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a442619-e996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:d8:aa:5e:24:b7:60:78:30:63:ed:71:ca:
                    9e:2f:6a:03:b2:37:7b:79:a1:94:d8:af:99:9a:39:
                    52:9c:83:7a:85:b5:2b:13:c4:e8:4d:e7:8c:6b:f2:
                    cd:f5:74:ed:dd:00:0b:38:7a:ac:63:7d:6e:e9:29:
                    5d:7b:d7:1f:1c:8a:f5:9e:1b:ee:9f:53:05:37:47:
                    69:1a:64:73:3c:d2:cb:e0:81:e2:7a:ef:1a:19:0d:
                    0a:3e:13:f5:fa:cc:ef:51:a6:90:bb:15:22:f9:92:
                    57:e2:a7:e7:05:51:87:0e:ca:4c:3c:30:67:9a:7e:
                    71:87:c3:80:d8:f4:01:5e:1f:d5:73:da:f2:36:e4:
                    48:cf:43:03:0a:35:e1:c6:3a:a3:99:ec:7f:bb:a8:
                    a8:e6:5d:b6:e6:56:7d:47:b2:44:8a:ed:20:44:f0:
                    01:e1:46:19:e2:56:77:ea:13:8a:21:a0:e5:2c:11:
                    c9:b0:1d:97:59:cf:45:df:19:17:b2:7a:e3:59:b5:
                    f3:20:99:38:96:cc:0d:f5:2e:72:cb:b6:32:d0:a9:
                    fa:0c:5f:57:64:e1:0f:0f:3f:e2:90:51:c7:26:07:
                    12:09:17:34:3d:1b:b8:8e:1f:46:d4:8e:6c:9d:85:
                    c4:c5:85:3f:36:e4:f9:d3:f2:ed:48:1f:4d:f3:de:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:58:4D:2F:D8:6E:7B:86:DA:86:26:66:5B:C1:84:74:C4:87:36
            X509v3 Authority Key Identifier:
                keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/5A7E13CA8C2B11EA90152018C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:1e:a6:b6:23:99:8a:92:c5:75:92:32:cc:d9:38:90:be:
         da:00:ae:37:0b:98:18:b5:b5:3d:6b:f0:d7:6f:72:a2:9a:76:
         50:3b:77:09:a5:8e:d5:39:1f:08:35:ea:30:f9:2b:c8:f1:bf:
         e7:e3:cd:84:58:e5:ea:83:14:f5:82:48:fd:cb:79:5a:53:6a:
         52:78:71:df:e5:d0:7a:83:47:9b:29:df:d1:91:88:63:41:59:
         88:a2:ca:8c:9c:6b:3b:32:07:91:a3:93:fe:5c:90:4b:ba:76:
         83:eb:7b:1e:14:65:ca:de:ae:68:11:52:ab:0b:79:9e:05:dd:
         1a:f4:a4:35:f3:18:29:ed:6b:59:07:1e:19:8e:41:c6:7f:10:
         39:06:0a:0f:48:c8:2d:c4:ee:13:5e:51:49:9a:e9:0f:fe:a0:
         79:1b:52:bc:0a:21:76:d5:d3:16:cd:c2:fd:5c:12:dd:8a:58:
         1c:5f:21:ed:59:83:88:b3:ac:51:a4:d3:2f:41:00:48:fe:9d:
         2b:49:ca:d7:6e:8d:bd:72:93:08:04:d1:e0:fd:90:5d:3e:3a:
         e0:d4:6e:65:f9:43:3b:01:7c:b4:76:7f:9c:23:60:37:d2:5d:
         6d:47:69:16:e7:29:6c:6c:48:47:cb:ce:83:c7:50:66:f2:8e:
         e6:32:54:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:29:40 2026 by rpki-client