Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa
File:                     1EC631B2FFB211ECA2EBD652C4F9AE02.roa (raw, json)
Hash identifier:          P3Zv5Q/qfUZAtYialZJ9A3xiMDMJKdLzF9irZxETLqU=
Subject key identifier:   C4:50:9B:9E:D8:97:84:C4:F7:7C:9E:22:BA:AD:16:1B:DD:87:0E:94
Certificate issuer:       /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
Certificate serial:       0A42
Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa
Signing time:             Sun 24 May 2026 20:28:04 +0000
ROA not before:           Sun 24 May 2026 20:28:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147282
IP address blocks:        103.150.50.0/23 maxlen: 23
                          103.150.50.0/24 maxlen: 24
                          103.150.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl
                          rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 19:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626 (0xa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C75, serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
        Validity
            Not Before: May 24 20:28:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a135f54-6924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:64:48:44:80:06:48:35:f3:79:36:cd:31:
                    b9:b2:a4:3e:37:50:ad:7a:0c:95:60:d2:53:57:ae:
                    cc:7e:a0:fe:51:96:51:ab:0e:8d:08:e3:7a:58:c1:
                    bc:0e:9d:6e:40:13:d2:93:a0:8c:a0:41:6d:1d:aa:
                    42:7f:10:b3:cb:c3:a5:e8:e7:cc:6c:21:90:b0:1f:
                    28:93:3e:87:8d:66:09:6b:89:ba:77:85:7b:16:c1:
                    62:77:af:e4:c2:3c:0c:39:dc:04:09:41:28:db:08:
                    5e:80:cc:f4:60:82:05:bb:58:a0:6f:af:41:1d:02:
                    6b:cf:de:6b:9c:ed:bc:ea:2e:6a:c7:28:21:3e:af:
                    36:53:e9:cd:4f:8c:68:a7:5f:95:d5:d3:08:c8:8b:
                    5d:d1:1c:09:b7:db:f5:02:63:33:0f:a5:ed:f1:ec:
                    82:50:cf:a3:5c:6d:4d:91:46:d1:1f:06:e5:24:60:
                    cc:58:19:4f:74:cb:2b:b1:a8:56:0e:25:d4:d3:f2:
                    c9:ab:6e:ef:9e:7d:71:1d:1c:1b:74:3f:11:fe:59:
                    d3:f0:89:7c:1a:92:07:72:19:11:09:eb:67:c3:25:
                    b1:70:a1:a5:32:e9:16:74:bc:2d:f9:d7:ed:1c:bb:
                    0a:e7:56:07:63:0a:47:56:b2:a3:94:36:c0:d3:c9:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:50:9B:9E:D8:97:84:C4:F7:7C:9E:22:BA:AD:16:1B:DD:87:0E:94
            X509v3 Authority Key Identifier:
                keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:b3:74:76:5c:98:fc:b7:3c:00:b4:3e:63:89:b7:29:21:
         5a:33:35:0e:8b:4b:cb:67:4d:9b:e4:cb:ac:d2:1a:aa:c6:91:
         0d:0f:fd:b3:4e:18:5e:8f:d0:3c:ca:3f:6c:92:97:aa:7e:fe:
         e7:8b:c0:90:89:b4:40:af:f4:4b:ec:91:c7:ed:2e:3a:05:7b:
         c8:7f:21:8e:52:60:87:e3:60:d9:e3:38:9f:55:5d:ef:a7:af:
         f9:4c:5a:32:be:9a:f7:69:e3:09:64:16:98:a4:60:db:a3:20:
         60:f7:88:6c:43:1e:b8:d2:5c:d6:4a:b5:2b:e5:6b:fa:34:07:
         9a:60:dd:9a:57:a0:11:7b:36:54:92:90:6f:eb:e5:c4:17:b2:
         60:c7:63:cb:22:ed:f3:d0:7c:18:88:57:e8:ff:b5:eb:96:cf:
         95:7e:af:67:7e:1a:43:cd:69:e4:bd:a3:2c:e5:98:b6:d3:16:
         03:a8:84:19:d7:23:18:74:76:76:c1:a7:b8:57:09:c5:db:c5:
         41:35:ba:c5:eb:76:77:f7:1b:c3:65:d0:87:5b:58:11:80:b9:
         d9:ea:af:23:ca:b9:a3:e9:6d:4f:a9:0c:1e:0b:e3:88:61:db:
         d9:d7:6f:a7:66:87:6a:58:66:c0:04:09:69:0d:d6:d5:cd:8f:
         85:47:78:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:16:41 2026 by rpki-client