Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/F603D584E99611EDB0837738C4F9AE02.roa
File:                     F603D584E99611EDB0837738C4F9AE02.roa (raw, json)
Hash identifier:          gJPcggB6kgiRTMIp5mVt1YtkK38ACRFuORmeYxVUW9Y=
Subject key identifier:   95:FC:A3:4B:27:70:3E:FF:2D:38:64:26:97:2F:3D:B5:EA:2F:CF:AE
Certificate issuer:       /CN=A91D78FD/serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
Certificate serial:       06F6
Authority key identifier: 8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/F603D584E99611EDB0837738C4F9AE02.roa
Signing time:             Thu 14 May 2026 22:28:28 +0000
ROA not before:           Thu 14 May 2026 22:28:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151206
IP address blocks:        103.150.210.0/23 maxlen: 23
                          103.150.210.0/24 maxlen: 24
                          103.150.211.0/24 maxlen: 24
                          2406:7c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl
                          rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 22:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D78FD, serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
        Validity
            Not Before: May 14 22:28:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a064c8c-cfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:6d:72:1d:cd:d5:df:4d:b5:bb:e0:c3:b1:
                    9c:5a:7e:cb:c3:b9:26:a8:ce:25:9f:1e:58:e0:d2:
                    61:d1:29:89:04:76:f8:ef:76:04:28:bb:bb:bd:3b:
                    0d:05:0a:07:d4:bd:dc:d4:11:ad:0f:5e:98:d2:6d:
                    dc:81:a4:f2:41:8c:7f:69:3e:23:f5:21:a7:29:d4:
                    cd:80:e7:e2:94:da:fb:14:28:c7:1e:e0:39:96:cd:
                    5a:69:74:5f:13:d2:7d:a8:3b:21:c3:a1:37:2c:18:
                    b0:d7:14:82:45:f1:c7:d3:8c:38:a5:2c:2d:67:d8:
                    ec:cb:16:75:3b:ff:b8:99:0d:33:62:7c:b6:b3:42:
                    75:ac:37:9e:eb:d0:8b:c4:97:96:90:50:96:14:a8:
                    84:fb:9d:91:e1:8d:13:72:84:70:95:b9:70:09:54:
                    f4:53:f7:d7:24:56:f9:63:f9:fa:d2:1e:93:44:75:
                    96:a4:e2:5e:5e:8f:87:5c:73:90:7a:d5:0f:17:66:
                    63:69:74:2f:87:9b:a9:c3:d4:c5:42:6f:ca:c9:e6:
                    02:aa:48:23:55:1d:db:fa:ac:72:dc:df:e6:a6:3e:
                    dd:3d:54:b7:68:a8:e0:07:34:22:ca:a1:d1:a2:65:
                    e8:d8:3d:89:ea:21:d3:d5:9f:6d:14:c0:bb:c1:ad:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FC:A3:4B:27:70:3E:FF:2D:38:64:26:97:2F:3D:B5:EA:2F:CF:AE
            X509v3 Authority Key Identifier:
                keyid:8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/F603D584E99611EDB0837738C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.210.0/23
                IPv6:
                  2406:7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:96:35:d1:31:65:a7:c1:fc:4e:e5:ea:48:dc:0c:38:a0:
         33:4b:d4:df:3c:77:5d:d1:93:63:8b:1c:b2:de:f7:2c:3f:de:
         19:fa:57:4b:3e:a2:70:db:c8:7a:8e:e2:7d:69:10:d6:6a:fc:
         f0:5c:c1:32:d2:a0:a4:ed:13:80:dd:ff:45:48:42:89:80:17:
         cb:28:17:0e:e8:2b:d0:c3:94:fe:a3:d1:bf:3e:1c:9b:c3:39:
         51:6f:4f:2d:ea:11:94:65:b7:50:6e:5a:2f:41:bd:7b:88:93:
         07:a6:f0:99:d2:ec:f2:16:e4:bc:c2:49:71:4f:f7:9e:03:1a:
         cf:25:1f:95:17:07:5e:46:68:d8:08:3a:2c:0b:80:de:5d:0c:
         da:9d:da:cf:57:8b:25:8a:4f:2d:e7:9d:5a:3e:e6:0d:f3:40:
         d1:bd:fd:bd:2a:32:1f:f3:f0:3b:96:1a:19:af:69:63:26:89:
         b0:e7:a2:a2:56:c0:25:6f:35:d6:2c:82:99:92:a4:01:16:f7:
         87:cc:fe:e8:be:d6:a1:21:48:48:83:ad:80:60:38:2f:9c:ae:
         1f:22:fc:cf:a0:81:41:78:ec:ed:c7:f5:7a:bb:4c:49:65:99:
         00:e9:27:e0:8c:1f:d9:79:cc:59:3e:ea:71:91:ba:75:58:e6:
         40:6f:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:56 2026 by rpki-client