Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/ED99CAA81DC411EF9E620C48C4F9AE02.roa
File:                     ED99CAA81DC411EF9E620C48C4F9AE02.roa (raw, json)
Hash identifier:          aLRF4zBkBM2y6xKpL1GC5YHsO0D4qoPC3jE5KWFvB9s=
Subject key identifier:   0C:82:18:0A:DB:54:CC:3B:07:D4:C8:C7:09:22:A6:62:E8:9D:19:B7
Certificate issuer:       /CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Certificate serial:       0A8B
Authority key identifier: 14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/ED99CAA81DC411EF9E620C48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:48:33 +0000
ROA not before:           Wed 30 Apr 2025 19:58:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     131471
IP address blocks:        103.150.154.0/24 maxlen: 24
                          103.150.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl
                          rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2F33, serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
        Validity
            Not Before: Apr 30 19:58:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42791-c7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:2e:0d:d9:47:f1:f7:be:43:55:5a:79:04:
                    b3:78:49:45:eb:8c:62:f1:66:43:d8:51:74:d0:c2:
                    43:b6:3c:f1:56:aa:db:36:f3:d5:fa:44:b8:d9:88:
                    3f:e9:b0:ff:a3:e3:41:3b:ba:aa:d6:1d:6e:b9:13:
                    0b:cb:3b:25:83:2d:1c:0b:28:07:29:6c:c7:28:1f:
                    a3:1f:ae:f1:89:b4:f0:38:78:b5:d4:11:ad:dd:0e:
                    24:8d:00:cd:83:40:7b:be:ba:76:ed:59:1a:b9:75:
                    2c:9f:41:6e:10:05:f5:41:05:1f:24:a7:68:a5:56:
                    07:22:e5:d5:6d:70:f3:94:3c:ff:f3:d1:ef:40:9d:
                    53:9d:66:f2:ba:1a:ca:23:3a:a1:61:14:cb:d5:29:
                    14:1c:10:34:48:a5:2e:77:14:e3:8d:07:0f:f5:6b:
                    07:cc:15:86:5d:a6:80:62:53:02:a3:19:00:d9:e8:
                    c9:81:cd:0b:ab:d8:79:5b:5b:22:5d:fe:af:b2:ee:
                    11:d6:6b:45:86:b9:28:14:61:89:cd:f7:09:19:ae:
                    c0:3b:37:40:ea:59:8a:b1:82:d4:ac:56:fb:8f:c6:
                    e2:e7:d3:9c:b8:65:7f:06:f7:5f:46:6f:81:43:67:
                    84:00:98:d9:84:b9:14:05:8d:d4:68:6f:13:a0:f0:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:18:0A:DB:54:CC:3B:07:D4:C8:C7:09:22:A6:62:E8:9D:19:B7
            X509v3 Authority Key Identifier:
                keyid:14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/ED99CAA81DC411EF9E620C48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:18:8d:30:ea:bb:74:10:78:9f:ad:ba:e3:db:bb:a1:ca:f7:
         13:63:f3:f5:42:de:03:50:e4:5f:85:1e:81:13:08:23:71:62:
         56:24:f5:1d:e8:db:eb:43:67:ef:8b:49:8b:d8:10:10:3d:e2:
         52:28:0b:f2:6c:2a:86:6b:7b:44:a5:e6:0a:de:ba:c8:6b:f6:
         ae:fb:27:61:77:35:4b:96:05:80:0a:64:b9:b1:4a:93:ea:05:
         2a:3b:96:07:8a:13:15:5a:c2:e1:1e:7f:00:45:05:c1:5f:a3:
         b3:1c:ff:55:87:b8:e7:b7:b6:76:ad:e3:1c:1c:9f:e4:1e:6d:
         57:e2:4d:49:a0:da:67:8a:59:0d:fe:3c:98:12:f1:f7:16:67:
         f9:bc:b7:8e:45:42:91:92:89:2f:ac:f4:99:cd:fc:a9:03:91:
         57:49:07:15:ad:69:ac:62:be:14:d3:0a:53:dc:5e:ce:47:ad:
         ec:54:f2:c5:5c:d3:4f:b9:29:d0:c0:89:ee:f6:30:13:82:4f:
         5a:bc:29:80:84:02:8c:84:78:7e:a1:92:1b:24:a6:b8:45:b7:
         cb:8c:d2:ab:59:7c:be:a9:40:4a:27:ee:d4:4f:9c:d5:7b:29:
         e4:d5:2e:d0:35:94:d8:99:b1:5e:13:72:f4:c0:0e:48:76:fa:
         85:e8:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:47:07 2026 by rpki-client