Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7ABD27E4889811EEB99AD46DC4F9AE02.roa
File:                     7ABD27E4889811EEB99AD46DC4F9AE02.roa (raw, json)
Hash identifier:          AwaKj2bJ0MEMMJtVjo28ChJ/Km9jzVAOhn+Y3iz/dAA=
Subject key identifier:   62:A7:75:B3:FF:8A:CE:EB:EE:5D:4A:55:14:1E:F5:1A:41:85:3F:CE
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       08DA
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7ABD27E4889811EEB99AD46DC4F9AE02.roa
Signing time:             Wed 02 Sep 2026 20:41:53 +0000
ROA not before:           Wed 02 Sep 2026 20:41:52 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141166
IP address blocks:        103.155.150.0/23 maxlen: 23
                          103.155.150.0/24 maxlen: 24
                          2001:df4:ce80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Sep  2 20:41:52 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a988a10-8856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:03:f8:10:96:83:a7:5e:19:13:2f:b8:78:
                    ea:f4:6b:d1:a0:df:52:a8:25:75:40:70:b4:60:f2:
                    38:17:a5:6f:dc:49:39:9e:ce:93:dd:a9:1b:a1:50:
                    60:e3:ae:28:e7:0b:66:30:d8:e4:8f:e8:20:be:78:
                    c0:16:16:95:10:73:6c:77:4b:bb:96:3c:62:23:38:
                    2a:3c:88:cc:50:20:1c:bb:1c:2e:02:5b:0d:01:7f:
                    14:3a:5a:12:44:36:09:9f:60:81:6d:fb:af:f4:90:
                    84:94:75:a3:ae:c2:07:24:45:7d:ac:80:2a:66:9b:
                    a4:a3:03:98:74:96:31:e9:75:ab:e2:3c:a1:04:cf:
                    3a:6c:7b:72:32:5a:99:5b:f6:24:74:83:39:dc:b0:
                    dd:77:0c:26:14:2f:9e:51:e0:73:fd:3b:46:c8:86:
                    1c:ff:63:f7:a9:d1:f0:4d:ec:f6:6b:42:4c:d4:ec:
                    b6:5b:72:dd:2f:61:03:79:cf:e8:52:dc:72:16:34:
                    a1:63:5d:58:ea:91:66:2b:31:69:bf:ff:bd:9b:92:
                    b2:57:2e:e9:86:11:ec:6c:8b:4a:60:68:04:f4:3e:
                    b1:c4:22:8e:67:ff:6c:8c:91:f0:32:39:f7:66:a1:
                    52:0d:6e:5e:88:14:29:9b:93:d9:0f:9c:f7:a9:72:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A7:75:B3:FF:8A:CE:EB:EE:5D:4A:55:14:1E:F5:1A:41:85:3F:CE
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7ABD27E4889811EEB99AD46DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.150.0/23
                IPv6:
                  2001:df4:ce80::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:6e:4f:85:43:9d:ee:02:4d:a1:00:d5:bc:a3:63:c4:04:
         8b:0b:cd:de:fd:0b:b4:49:aa:7b:51:a7:92:df:31:86:a6:f6:
         58:40:8f:c3:67:ab:d0:25:8d:62:90:05:f6:52:fa:70:3a:b9:
         58:7c:55:3c:dd:3f:01:d0:a1:66:21:2b:60:c6:d8:1a:07:5c:
         3b:09:54:09:13:4b:71:4c:6e:41:6e:96:b3:0c:72:22:da:cd:
         93:ef:a1:23:d7:fc:89:eb:17:c9:4b:34:c9:b6:0e:86:73:bf:
         d1:1d:25:75:09:76:9e:da:7e:a8:56:62:26:80:42:48:2d:64:
         5f:15:cb:fd:fc:ac:f8:a9:46:91:e0:9e:b4:03:2a:46:c5:d6:
         d2:9c:8c:85:e5:19:0f:36:03:9d:a9:27:e2:57:6b:85:6f:3c:
         49:9b:90:28:65:a9:cd:55:ab:ce:5a:5c:de:57:2f:40:3b:bd:
         fd:0c:e9:f1:5b:3b:c5:ca:53:71:85:30:a8:29:95:eb:ba:fc:
         3c:7c:aa:48:04:22:da:85:4f:29:cf:a3:6c:21:57:8b:4e:43:
         f5:1f:55:54:06:c4:bc:c9:c1:9c:4b:e8:1f:60:c7:ba:00:4a:
         27:de:a9:99:21:0a:6c:67:c6:c7:14:ea:28:5b:a1:ae:4f:60:
         a0:86:8a:17
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2
RkE2MzRDODEwHhcNMjYwOTAyMjA0MTUyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4OGExMC04ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcAD+BCWg6deGRMvuHjq9GvRoN9SqCV1QHC0YPI4F6Vv3Ek5ns6T3akboVBg
464o5wtmMNjkj+ggvnjAFhaVEHNsd0u7ljxiIzgqPIjMUCAcuxwuAlsNAX8UOloS
RDYJn2CBbfuv9JCElHWjrsIHJEV9rIAqZpukowOYdJYx6XWr4jyhBM86bHtyMlqZ
W/YkdIM53LDddwwmFC+eUeBz/TtGyIYc/2P3qdHwTez2a0JM1Oy2W3LdL2EDec/o
UtxyFjShY11Y6pFmKzFpv/+9m5KyVy7phhHsbItKYGgE9D6xxCKOZ/9sjJHwMjn3
ZqFSDW5eiBQpm5PZD5z3qXLvcQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGKndbP/
is7r7l1KVRQe9RpBhT/OMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy
QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEEzRTYvNjQwRDYxOEVGMkM5MTFFQTg2RjEyNzE3QzRGOUFFMDIvN0FCRDI3RTQ4
ODk4MTFFRUI5OUFENDZEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5uWMA8EAgACMAkDBwAgAQ30zoAwDQYJKoZIhvcNAQELBQADggEB
AGmhbk+FQ53uAk2hANW8o2PEBIsLzd79C7RJqntRp5LfMYam9lhAj8Nnq9AljWKQ
BfZS+nA6uVh8VTzdPwHQoWYhK2DG2BoHXDsJVAkTS3FMbkFulrMMciLazZPvoSPX
/InrF8lLNMm2DoZzv9EdJXUJdp7afqhWYiaAQkgtZF8Vy/38rPipRpHgnrQDKkbF
1tKcjIXlGQ82A52pJ+JXa4VvPEmbkChlqc1Vq85aXN5XL0A7vf0M6fFbO8XKU3GF
MKgpleu6/Dx8qkgEItqFTynPo2whV4tOQ/UfVVQGxLzJwZxL6B9gx7oASifeqZkh
CmxnxscU6ihboa5PYKCGihc=
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:17 2026 by rpki-client