Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa
File:                     8B75957671A811EB8698AD67C4F9AE02.roa (raw, json)
Hash identifier:          7rQsxODOe8S8wCpj2cJIytKVy/MVPp6W4O54/79yfuw=
Subject key identifier:   56:45:7A:84:0A:61:41:98:F3:79:D1:E5:BE:52:D8:A7:FD:91:E5:B2
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       0735
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:30:18 +0000
ROA not before:           Mon 02 Jun 2025 22:31:02 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132335
IP address blocks:        103.150.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 21:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Jun  2 22:31:02 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4315a-9d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:02:a7:38:e6:5d:ae:d7:46:8c:e3:a6:0c:
                    eb:0c:c1:f8:da:56:b2:d8:46:7e:d4:db:d6:82:ce:
                    61:c4:de:9d:19:87:f2:aa:65:e2:14:26:08:75:82:
                    0c:c2:07:72:99:51:79:ec:38:09:52:eb:ca:a3:9b:
                    36:31:c1:49:a0:4b:88:8c:36:49:a8:52:1a:69:05:
                    4a:41:0a:27:75:34:8f:21:0d:8a:27:10:34:d3:1d:
                    fd:1a:07:a2:9b:ce:75:f4:58:0b:9c:f5:7a:cb:52:
                    43:ef:f2:46:a5:8b:fc:39:86:3d:84:5e:08:7c:5c:
                    58:e8:61:4b:f0:e8:93:b0:01:05:f7:44:30:83:49:
                    90:d9:35:8e:c4:64:0f:b4:d9:ed:c3:c9:4f:9f:19:
                    f7:4d:99:be:cc:78:78:8d:22:4e:a4:07:0c:b8:e1:
                    ab:0c:4d:4e:55:af:93:3d:a8:14:97:c4:30:ee:c8:
                    3e:67:7c:49:bc:43:06:9e:8f:ff:7d:d1:62:58:d7:
                    c9:2a:08:85:06:0f:52:3e:e6:ac:7e:15:b2:e0:fb:
                    52:d4:d1:64:ea:a9:d4:69:82:f2:ac:f8:01:64:b3:
                    1a:49:27:c8:de:f2:60:b8:54:01:d0:d2:6d:82:18:
                    a7:99:87:54:8e:23:77:31:2e:ea:ee:b0:d6:7f:54:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:45:7A:84:0A:61:41:98:F3:79:D1:E5:BE:52:D8:A7:FD:91:E5:B2
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:96:04:2b:4f:eb:32:39:5d:9f:07:35:cb:10:49:5a:02:c2:
         af:ba:20:45:1a:44:82:ed:e0:ce:01:c7:51:7d:16:c0:fc:9d:
         f1:66:e5:0f:c5:0a:2f:e7:fc:59:37:4c:99:0c:e8:50:10:7a:
         23:7f:a7:3f:8a:4d:d7:71:2e:bd:bf:e9:66:ef:49:d0:40:17:
         49:68:df:bc:70:f4:ef:34:22:ca:5d:e7:a2:75:96:94:a8:0c:
         b3:80:50:78:db:0b:98:61:73:8b:59:18:24:69:8f:33:be:c6:
         27:91:0f:3d:20:d0:13:7a:7c:15:9a:db:92:f6:c1:a8:92:08:
         53:e6:ea:7b:f6:3d:96:30:5c:19:3c:d6:3a:35:c1:3d:f0:0e:
         e5:44:73:b9:f6:7d:03:24:68:b3:a5:55:71:45:1c:3f:ec:84:
         7d:49:72:79:2d:75:ce:af:e8:c0:fe:f7:66:fd:58:31:7b:75:
         01:c0:89:92:dc:a0:89:7c:f9:cf:44:5e:18:fa:fa:af:22:5e:
         93:44:9d:67:98:d8:10:ee:24:35:7a:54:32:49:75:40:82:b5:
         99:93:9c:f1:b6:63:48:ac:74:51:d1:a8:61:21:52:2e:6f:a1:
         67:ac:2e:f1:f0:ab:00:ec:db:d8:18:c2:51:fc:04:ed:40:7c:
         8d:32:d5:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG
QzdCNjlBMUIwHhcNMjUwNjAyMjIzMTAyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzE1YS05ZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxa4CpzjmXa7XRozjpgzrDMH42lay2EZ+1NvWgs5hxN6dGYfyqmXiFCYIdYIM
wgdymVF57DgJUuvKo5s2McFJoEuIjDZJqFIaaQVKQQondTSPIQ2KJxA00x39Ggei
m8519FgLnPV6y1JD7/JGpYv8OYY9hF4IfFxY6GFL8OiTsAEF90Qwg0mQ2TWOxGQP
tNntw8lPnxn3TZm+zHh4jSJOpAcMuOGrDE1OVa+TPagUl8Qw7sg+Z3xJvEMGno//
fdFiWNfJKgiFBg9SPuasfhWy4PtS1NFk6qnUaYLyrPgBZLMaSSfI3vJguFQB0NJt
ghinmYdUjiN3MS7q7rDWf1Tj6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFZFeoQK
YUGY83nR5b5S2Kf9keWyMB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx
QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjMyNjAvRDc4RDJBQTI3MUE2MTFFQjg3NDUwNDY2QzRGOUFFMDIvOEI3NTk1NzY3
MUE4MTFFQjg2OThBRDY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5YeMA0GCSqGSIb3DQEBCwUAA4IBAQADlgQrT+syOV2fBzXLEEla
AsKvuiBFGkSC7eDOAcdRfRbA/J3xZuUPxQov5/xZN0yZDOhQEHojf6c/ik3XcS69
v+lm70nQQBdJaN+8cPTvNCLKXeeidZaUqAyzgFB42wuYYXOLWRgkaY8zvsYnkQ89
INATenwVmtuS9sGokghT5up79j2WMFwZPNY6NcE98A7lRHO59n0DJGizpVVxRRw/
7IR9SXJ5LXXOr+jA/vdm/Vgxe3UBwImS3KCJfPnPRF4Y+vqvIl6TRJ1nmNgQ7iQ1
elQySXVAgrWZk5zxtmNIrHRR0ahhIVIub6FnrC7x8KsA7NvYGMJR/ATtQHyNMtU8
-----END CERTIFICATE-----
Generated at Wed Mar 4 13:00:19 2026 by rpki-client