Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa
File:                     8B75957671A811EB8698AD67C4F9AE02.roa (raw, json)
Hash identifier:          U228KfC2lw3SZ0Fufn6GHyMp3tAKp2GFwZiqfbkH2F0=
Subject key identifier:   D8:5D:D1:B8:27:E7:8A:0D:DC:EB:5A:3A:8C:7B:B1:E8:8A:20:EE:24
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       0761
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa
Signing time:             Thu 14 May 2026 22:27:31 +0000
ROA not before:           Thu 14 May 2026 22:27:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132335
IP address blocks:        103.150.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: May 14 22:27:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a064c53-b079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:4d:db:75:14:c8:a9:ab:a3:e1:b7:09:c1:
                    04:fd:a1:bf:74:1f:33:8a:37:5b:b4:08:5c:06:21:
                    71:ef:d4:c4:57:8d:f1:df:3e:95:cb:df:bc:f9:85:
                    09:74:78:f0:71:b8:ce:d2:e4:46:58:89:aa:a8:ed:
                    67:6b:c4:c0:d3:35:44:dc:87:dd:9a:94:92:60:52:
                    37:9c:a5:20:57:e5:ee:69:99:4a:f8:89:23:9e:5c:
                    56:9c:76:64:8a:31:88:07:9d:cb:e2:8b:5f:79:ec:
                    0b:72:80:bc:23:ad:0b:15:4f:e7:f9:74:da:50:7b:
                    00:9d:43:78:ab:36:91:48:e1:74:3e:c9:03:31:e9:
                    f8:75:4d:d4:3d:37:27:1b:6f:0d:da:90:dc:9b:b4:
                    a8:70:b4:89:e6:a3:96:a3:42:ac:89:13:a7:07:83:
                    2c:34:96:ce:d6:07:e5:91:59:d4:87:96:d2:a7:67:
                    6f:78:ff:8b:ab:fb:10:2c:06:ab:60:e9:72:6d:ba:
                    f2:2b:09:44:fa:a0:73:29:ae:4f:3a:aa:9e:47:63:
                    a1:d9:90:1d:09:40:87:ad:9f:59:3f:d8:cb:c2:e2:
                    08:e2:8e:5b:be:78:fa:c3:2e:a8:18:87:72:a8:eb:
                    2a:31:6c:f0:00:e0:82:1c:21:3f:a3:c4:d7:55:5f:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5D:D1:B8:27:E7:8A:0D:DC:EB:5A:3A:8C:7B:B1:E8:8A:20:EE:24
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:09:a0:95:ae:63:54:05:49:72:2d:cd:c5:6f:9f:30:24:af:
         24:0f:f7:f0:f8:3c:2d:0b:d1:9c:c7:2c:d6:05:41:f0:65:51:
         16:54:30:74:65:51:1a:ee:08:a1:1c:32:12:f0:a9:66:07:c4:
         55:46:86:f6:02:64:53:04:4e:d4:84:3a:43:a6:4f:26:1f:9f:
         63:94:c5:ef:34:df:c1:a1:9d:88:ae:47:43:16:c5:60:64:89:
         d8:de:7a:db:e5:5e:37:3d:a7:2f:6c:57:e3:a4:35:5b:bd:fd:
         6e:f5:1f:13:0b:79:6a:c8:f1:d2:f3:84:90:d2:94:49:a8:95:
         db:b0:fe:f4:76:bb:b4:c5:04:a4:02:97:18:dc:44:1d:b0:05:
         63:ab:a4:8a:ef:7e:fe:3a:58:75:fd:3c:c9:4c:56:97:89:f8:
         57:24:7f:25:aa:ca:fa:aa:63:57:41:7e:78:76:b4:8f:bd:29:
         8c:98:69:79:af:9d:09:06:91:50:67:c7:f0:d6:a6:55:f3:dd:
         f8:45:ae:2c:6e:48:8e:21:81:b5:e8:2f:3f:9f:8b:64:92:0e:
         84:ce:42:b2:63:9e:1e:09:33:c0:c1:62:fd:b7:f9:32:01:54:
         39:d8:1d:0b:d5:cb:46:37:51:72:b8:ad:e9:5a:ab:c8:4f:b0:
         9b:a3:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:40:43 2026 by rpki-client