Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/07E789A228F011ED94BE9345C4F9AE02.roa
File:                     07E789A228F011ED94BE9345C4F9AE02.roa (raw, json)
Hash identifier:          CbHRrvHv8dbYGjdQTgvO0PK88m+Og/MzrMsaVu8qKS4=
Subject key identifier:   A2:79:21:4E:8C:1D:EF:B1:C5:24:A5:3D:77:D4:43:2D:86:91:13:1B
Certificate issuer:       /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Certificate serial:       0326
Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/07E789A228F011ED94BE9345C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 01:50:36 +0000
ROA not before:           Thu 03 Sep 2026 01:50:36 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     150291
IP address blocks:        103.156.148.0/23 maxlen: 23
                          103.156.148.0/24 maxlen: 24
                          103.156.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
                          rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
        Validity
            Not Before: Sep  3 01:50:36 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a98d26c-877e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:1b:4d:5e:59:d6:21:cd:f9:91:db:76:4f:
                    4d:4e:e3:f9:65:a7:f2:be:1a:cf:61:89:a2:0c:27:
                    f9:4b:77:f6:24:e4:8f:54:3a:aa:44:84:aa:b2:ea:
                    9c:dc:56:04:2b:67:d7:c1:96:04:fe:67:3a:69:80:
                    66:c6:3e:ea:d6:1a:dd:a0:79:8a:9a:6f:78:d7:c0:
                    cf:98:fd:f2:c6:ff:34:47:4e:39:5b:04:5a:3b:9d:
                    29:33:9b:58:83:67:9a:12:9d:0c:e0:da:f9:2f:a6:
                    9b:63:74:96:cb:ca:b0:72:1b:a5:b1:a1:a1:de:5e:
                    02:fd:32:00:af:c1:42:f7:54:73:e6:5b:f4:49:0a:
                    0b:6d:9c:05:fb:05:71:7e:79:ed:d3:1b:a6:2f:97:
                    ce:a8:bb:67:fa:9b:6d:06:50:93:50:e4:6a:3b:a6:
                    df:c4:fb:65:d6:11:3a:f5:0c:80:9b:d5:ef:77:ed:
                    1a:fd:ce:f9:bc:ee:a0:8c:e2:d3:61:bf:5f:fa:52:
                    d8:c8:30:4f:20:9e:30:94:13:0b:dd:98:7d:ca:7b:
                    94:a0:17:af:5d:5c:c9:1e:33:c1:d0:ec:83:82:ef:
                    5c:48:a4:cb:f3:30:91:46:21:35:93:86:7c:32:7f:
                    18:1b:fb:f1:2d:1b:83:f8:ae:06:e3:b4:3b:d5:2f:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:79:21:4E:8C:1D:EF:B1:C5:24:A5:3D:77:D4:43:2D:86:91:13:1B
            X509v3 Authority Key Identifier:
                keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/07E789A228F011ED94BE9345C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:63:fc:92:33:47:31:c6:83:aa:6c:d0:fb:18:a6:00:e2:
         06:1a:6f:e6:4c:5a:9c:18:ed:67:b2:9a:36:67:d3:a6:76:0c:
         9a:64:17:28:39:9a:39:19:b4:57:dc:7d:d9:15:72:0a:99:7e:
         4b:c0:24:f1:49:05:e6:74:02:9a:da:de:15:bd:f3:73:23:fb:
         78:db:a0:4d:f4:81:22:90:c6:d6:7f:75:0a:92:73:0e:82:e5:
         06:9b:2a:1d:20:0f:ba:2d:40:b4:8b:7f:40:f0:d1:d5:de:b8:
         82:9e:a9:3a:69:9f:c3:83:f4:94:3f:15:fe:01:c0:9c:6e:fd:
         66:fc:68:68:2c:48:06:9b:27:1c:84:46:8f:1a:ca:e6:ab:84:
         18:5e:98:c3:f6:ab:f1:9f:62:24:e5:f8:92:56:08:cb:f9:4a:
         bc:5b:3d:5d:2d:00:e1:74:7f:67:d2:cb:07:2a:2e:0f:db:f7:
         e6:9a:24:be:63:a3:03:89:4f:5f:ac:0e:47:32:fc:f3:3f:75:
         8e:4d:ea:e4:26:57:9f:d5:78:61:7b:e9:cb:da:d0:08:d1:f6:
         29:2a:96:5a:a6:a5:be:c8:0e:d7:18:1a:02:08:2d:e5:21:8d:
         2c:4d:2f:1d:7c:34:67:a8:02:be:76:55:5a:a8:5d:b5:de:f7:
         35:84:57:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:11:41 2026 by rpki-client