Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
File:                     F4E06C32804911EDABB05C09C4F9AE02.roa (raw, json)
Hash identifier:          nBPwqsfslnyICltnljnucMXSEkw/os4EQGvB9UxWXu8=
Subject key identifier:   36:78:23:58:F1:55:B9:EB:22:A1:4A:3E:6E:DB:49:B2:87:7E:3F:7F
Certificate issuer:       /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial:       0B65
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
Signing time:             Wed 04 Mar 2026 19:25:21 +0000
ROA not before:           Wed 04 Mar 2026 19:25:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140224
IP address blocks:        103.148.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
                          rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 19:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2917 (0xb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
        Validity
            Not Before: Mar  4 19:25:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a88721-4aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:48:35:dc:19:58:b8:ab:76:a6:1a:6b:dc:
                    a3:ad:f5:8d:dd:53:10:d6:ba:17:18:1e:7f:93:98:
                    41:ae:60:9f:d7:df:3d:09:75:bb:db:5f:b5:08:cc:
                    7a:82:9c:7f:fb:67:a7:01:4f:84:98:b1:93:aa:3c:
                    4b:08:2f:26:f9:30:8d:09:26:4d:a8:29:3e:f5:35:
                    08:36:54:fa:27:34:0d:fd:cc:d2:b2:7f:d7:48:8d:
                    6a:d7:78:9d:34:bf:67:08:e7:17:0c:59:59:0f:56:
                    1a:06:61:72:7c:37:92:39:32:46:e0:bb:54:d1:b6:
                    96:94:96:f1:09:31:a9:a6:53:10:f2:81:2e:8a:02:
                    50:42:72:6d:6f:45:39:43:a8:2c:86:2d:c6:42:97:
                    21:e3:b3:8b:80:d5:fe:c3:46:03:38:c5:d5:4e:18:
                    9b:0a:b0:44:51:5c:2b:bd:5e:06:1a:1d:be:7d:34:
                    d3:5b:33:4d:6b:73:d4:ea:be:78:45:5f:c8:ed:35:
                    83:c4:5f:f7:6d:6d:c4:59:10:f0:02:2f:0d:8e:9f:
                    9f:e9:22:60:36:3d:96:98:91:42:34:f7:01:20:ef:
                    75:0b:2e:da:ce:55:b9:db:cb:bf:13:c0:8a:87:fe:
                    fe:99:4f:3b:13:97:2a:43:15:08:6e:b4:1e:0b:49:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:78:23:58:F1:55:B9:EB:22:A1:4A:3E:6E:DB:49:B2:87:7E:3F:7F
            X509v3 Authority Key Identifier:
                keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:48:ff:c0:42:7f:5f:91:fb:52:32:6c:b7:c1:b1:d5:dd:0e:
         89:8d:04:1e:35:35:51:ab:4b:a3:69:e5:92:bb:b3:e7:a7:88:
         c4:9e:51:9c:5f:4c:18:43:41:bb:8e:ea:a9:76:e8:cc:87:05:
         ba:db:c2:44:f2:e4:9f:54:14:a5:f4:18:73:8e:cc:33:74:3d:
         71:a7:16:b7:1d:65:f8:d5:21:76:07:8f:54:35:19:b3:3c:cd:
         7a:f0:e9:5f:f6:a2:12:7a:47:92:59:76:e0:b0:9c:70:34:c1:
         14:23:be:04:8e:31:43:44:a0:a2:84:2b:17:be:5e:db:da:c9:
         e3:23:20:f0:8e:ae:50:da:f6:bd:0b:09:ed:c1:c7:c2:04:b8:
         cd:e2:70:2d:2e:72:91:aa:7d:9b:cb:31:08:35:f0:db:c2:ff:
         6f:4b:1e:a7:0f:7d:19:02:78:5c:54:5c:84:20:97:67:2c:1f:
         88:b2:93:82:8c:70:b9:c0:b0:64:07:5a:0d:73:2a:7e:58:6b:
         c2:03:e8:ee:56:1c:42:58:9c:fe:51:03:ee:09:51:6d:53:1c:
         bd:ab:e6:08:ff:05:bf:76:39:b7:95:0c:0a:a4:59:ea:94:42:
         42:5e:14:5b:34:a8:61:9c:95:0b:d7:be:00:04:cb:88:ec:38:
         4e:1f:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:03:00 2026 by rpki-client