Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa
File:                     101550F4247A11EB97620E4AC4F9AE02.roa (raw, json)
Hash identifier:          cD1QW81F1Eu6XjPPcGXU2UQBIvqECFJFoBBQ5MxJb7M=
Subject key identifier:   C4:13:DE:2E:A1:05:89:0E:01:79:0E:79:5E:50:7D:3B:B1:FB:E0:5E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5DDC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:15:44 +0000
ROA not before:           Thu 28 Aug 2025 14:53:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135910
IP address blocks:        103.150.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24028 (0x5ddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60c10-b850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:18:26:36:47:f5:e0:9b:0c:72:02:24:c6:
                    0c:79:01:f0:6d:39:c0:b4:23:31:13:ef:be:1b:2e:
                    ae:fe:b0:42:c3:f4:de:b9:8e:96:2b:89:f8:a2:8d:
                    fa:0b:92:e6:88:6c:f0:e3:00:27:a9:31:ea:6c:bd:
                    5d:ed:4d:9a:1c:db:c8:32:7a:e5:7f:ba:8c:c5:a3:
                    d2:38:bc:b6:bc:bd:1a:62:5a:69:79:02:49:2d:cb:
                    81:51:cc:14:74:b9:e1:f3:50:45:a7:09:d0:5d:ac:
                    54:a9:1f:fc:4f:49:3f:62:64:e3:eb:52:bd:86:7a:
                    86:91:aa:dc:40:ce:c3:f8:0a:82:a6:7d:61:e2:3c:
                    a1:5b:a2:53:e5:3a:4d:24:ec:61:2f:23:e2:4d:00:
                    c1:ce:53:20:04:c9:ef:6e:01:8f:c4:1e:82:db:47:
                    7d:d5:37:e1:f0:35:e4:4e:fa:65:71:db:14:04:02:
                    c7:d0:bf:91:ec:36:09:81:3a:5b:08:88:02:f6:a1:
                    03:ba:4f:5b:57:0e:36:9a:14:8b:b2:cd:5c:d7:5e:
                    fd:32:eb:84:bd:25:25:d0:4d:3d:aa:9f:9f:e7:60:
                    98:87:47:e4:fa:1b:5f:25:63:f5:d2:7b:1e:75:68:
                    51:d3:b1:05:f7:f2:48:0c:32:25:11:b3:ad:e4:b7:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:13:DE:2E:A1:05:89:0E:01:79:0E:79:5E:50:7D:3B:B1:FB:E0:5E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f4:68:e9:a9:61:d9:0d:f5:9a:b4:2f:a2:d6:4b:49:1b:6b:
         6a:fc:44:17:4d:3c:b5:06:5b:de:b3:7f:bc:58:dd:b9:a2:55:
         39:c4:af:b7:fa:d3:17:26:6d:14:19:04:7d:d0:d4:f8:0c:a6:
         7d:85:63:a8:46:ef:09:d0:20:4d:c1:8b:47:5c:b5:fe:07:59:
         d3:72:f4:b3:94:9d:c5:dd:20:5d:43:4b:3b:57:9d:27:6f:09:
         ad:60:d0:22:ae:f2:de:a7:3f:52:4c:7b:c5:56:9f:39:d1:e0:
         21:d4:9a:45:bd:c0:25:b0:d6:15:83:e9:ab:3c:c4:87:c0:f2:
         7e:1b:92:74:c3:2a:42:05:6f:50:24:37:ef:b8:7d:de:0d:73:
         0b:a6:7d:77:ec:10:2b:12:6b:af:f1:9a:78:1c:c7:0b:1e:99:
         08:d6:5d:c9:e3:59:24:7c:30:3f:91:4a:12:b0:c6:af:5b:a9:
         ab:bd:6d:37:2c:8d:a5:2d:3a:06:e3:3f:81:1c:e6:ea:29:04:
         e0:1c:68:40:66:09:f0:b0:32:3f:b5:8d:ad:15:39:cb:5b:4f:
         9c:29:71:6d:a4:4e:f4:2e:56:65:e1:d8:69:63:d2:7a:ed:66:
         7f:a9:ae:9f:8e:bc:ce:31:51:d9:d1:fe:5c:3f:60:02:ad:90:
         75:42:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:10 2026 by rpki-client