Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa
File:                     FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (raw, json)
Hash identifier:          Uy8YmJ9/0307reN6fscOu8cBgEjqG+0E71aSKTBttE0=
Subject key identifier:   D1:C1:E4:E6:F5:57:94:2C:C6:DE:41:DB:82:61:C0:04:02:A2:D6:F0
Certificate issuer:       /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial:       010F
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:12:28 +0000
ROA not before:           Sat 17 May 2025 06:39:04 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9541
IP address blocks:        103.150.105.0/24 maxlen: 24
                          202.70.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 05:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
        Validity
            Not Before: May 17 06:39:04 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58cbc-2240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:8f:fa:6e:58:ee:77:3d:c1:89:b9:ec:56:
                    22:c5:3b:f6:ac:91:44:95:db:0a:bd:0b:fb:ab:1a:
                    b8:59:05:22:0d:35:73:cf:15:1a:26:71:ab:f1:b1:
                    6d:41:6e:6b:5c:91:12:95:7f:c7:ea:50:25:65:31:
                    b6:88:f3:ee:27:76:52:c8:5f:56:94:4c:6d:33:8a:
                    0a:b2:78:c6:a8:9f:45:a1:22:f0:ec:79:43:32:15:
                    3d:27:8c:7e:7e:69:1f:cf:08:d0:4a:67:ae:fd:11:
                    4d:5d:ae:fd:95:62:e1:76:be:f9:2c:94:98:a0:16:
                    b9:bf:99:7d:66:8c:35:39:81:8b:cd:1e:4f:83:d0:
                    0f:66:3e:c1:75:30:79:21:8f:53:71:1f:cf:44:2c:
                    07:f0:00:b8:73:0f:b9:bb:05:9c:1e:1c:86:b2:af:
                    9e:93:2c:60:4a:76:ac:89:b0:35:bb:53:d1:68:d9:
                    00:40:48:ff:c2:5d:d8:ea:2a:46:7c:1a:4c:19:c6:
                    09:6c:a6:3a:cc:c0:cb:c9:f7:c0:b9:54:13:54:8e:
                    cf:aa:98:ac:57:e9:d7:a5:74:74:f9:53:98:f5:c6:
                    a0:a1:2e:29:fb:63:c2:71:12:70:c0:fb:ed:61:35:
                    3f:0b:e0:0f:05:8f:88:e6:dd:a0:02:bc:e4:f6:9f:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C1:E4:E6:F5:57:94:2C:C6:DE:41:DB:82:61:C0:04:02:A2:D6:F0
            X509v3 Authority Key Identifier:
                keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.105.0/24
                  202.70.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:a0:75:dd:dc:5a:33:05:01:cd:2b:06:34:ea:df:0c:bd:7f:
         5b:09:72:66:82:3d:cd:46:84:f4:30:d5:fb:3e:5e:54:b8:c2:
         5a:95:a4:d8:c2:d6:ca:cb:d2:73:9d:88:ef:5d:cf:27:78:23:
         da:cd:a1:16:30:19:78:df:63:f5:c2:e0:0f:93:1f:57:f1:19:
         1d:2a:a4:c7:37:ba:69:6e:4b:f3:61:92:1f:c8:d3:fc:02:1d:
         b6:a3:1b:43:23:ab:17:f9:56:13:15:7a:dd:a2:66:68:7f:78:
         71:77:c2:ed:e0:10:1d:4b:59:ac:c0:ba:5a:a2:d0:ac:ed:50:
         2a:d4:94:aa:8b:cd:76:7d:c0:2a:1e:55:73:06:f5:cb:97:d5:
         6c:22:9b:1c:92:91:29:74:f0:e9:d8:bd:5d:c7:bc:0c:48:0c:
         6f:b0:45:78:f2:9c:da:55:a0:d4:f6:0a:22:0d:9b:87:11:c9:
         bf:de:a1:cc:4f:56:88:bd:e7:b8:10:c2:ea:63:35:07:1d:85:
         27:a2:b4:69:18:52:c8:5b:11:7e:27:63:3c:85:6c:a3:94:aa:
         89:8f:44:33:c3:ac:51:4d:31:84:eb:7d:45:10:e5:05:3c:8c:
         85:b8:c8:1a:87:71:7a:a4:ab:b3:f9:b7:36:1d:12:c9:b2:f9:
         d6:51:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:21:58 2026 by rpki-client