Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
File:                     6B5765BC499211ED879F2D11C4F9AE02.roa (raw, json)
Hash identifier:          Gij6YaDS1wfHNVRKMaJ5A1SN4efMb1QxYQGgmn19MtM=
Subject key identifier:   30:80:9E:BA:67:62:C5:A3:34:FC:E7:31:92:0B:77:C3:0F:5C:FC:06
Certificate issuer:       /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial:       0AA3
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:48:13 +0000
ROA not before:           Fri 30 May 2025 20:06:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138974
IP address blocks:        103.150.68.0/23 maxlen: 23
                          103.150.68.0/24 maxlen: 24
                          2001:df3:5d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
                          rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2723 (0xaa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
        Validity
            Not Before: May 30 20:06:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4277d-aec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:ea:da:3d:0e:11:89:04:b7:f0:0a:14:5d:
                    ea:34:88:1a:bf:47:51:98:ab:4f:65:0b:60:1b:6f:
                    2d:a8:b2:8e:b1:81:f1:4c:19:a2:64:d2:33:d0:f9:
                    97:60:bd:10:f0:c6:23:a7:60:68:e9:fb:1b:54:73:
                    0a:89:28:38:ad:40:96:2a:db:b7:a9:c5:9c:67:e2:
                    1e:f0:67:48:1d:06:7f:ad:e9:cd:44:39:ec:c7:f5:
                    f6:4a:e3:e9:e7:1d:13:54:64:81:63:5f:a0:74:d3:
                    cb:88:72:45:95:89:9b:10:5e:cb:fd:05:1f:f3:45:
                    fb:f1:54:c7:d7:bd:9e:14:80:4f:f2:bb:70:36:98:
                    a4:ef:4b:8c:95:5c:c7:ce:b2:8a:58:92:db:35:e3:
                    3e:de:cc:4e:0e:82:26:6a:44:81:fc:1d:5e:f6:39:
                    eb:7d:5d:9f:16:50:55:89:da:71:46:6f:3c:a9:51:
                    28:91:09:91:00:1f:7b:ab:df:f4:39:e5:cd:4b:78:
                    d8:05:ff:26:70:49:59:08:09:a2:f0:dd:83:54:80:
                    53:9b:83:02:fb:f9:44:91:73:96:b6:32:15:92:e7:
                    64:b5:1e:7d:c4:e7:80:83:af:72:48:50:d6:0a:1d:
                    95:57:4c:27:71:a3:73:d1:a0:9a:1b:c4:b0:26:67:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:80:9E:BA:67:62:C5:A3:34:FC:E7:31:92:0B:77:C3:0F:5C:FC:06
            X509v3 Authority Key Identifier:
                keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.68.0/23
                IPv6:
                  2001:df3:5d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:7a:87:ae:6e:95:62:b1:7c:cd:35:c9:1c:52:ba:8e:a8:91:
         73:85:3b:0d:61:69:4d:c6:7d:cb:92:c7:1d:79:5c:f3:e7:24:
         ae:ed:76:20:12:0a:d4:57:3d:b7:05:91:db:c1:b9:05:6c:97:
         36:26:81:7e:90:6a:06:a2:d0:27:ed:ba:94:b4:01:79:d7:59:
         c0:4b:b3:79:33:17:67:70:89:ec:61:d6:25:3b:c9:56:23:78:
         bd:a4:04:2e:e3:5d:91:1e:d3:80:91:26:53:4f:8f:7d:69:45:
         2f:61:d1:45:15:b4:ec:91:30:4b:7f:cf:81:94:c5:0c:bc:5f:
         eb:2b:72:82:69:b2:08:a5:59:ba:4e:e9:f0:62:a9:74:29:0e:
         7a:b4:57:22:0e:79:24:b7:71:04:77:f7:24:a1:39:20:15:e7:
         14:9f:d8:d4:65:54:b4:5c:a5:7a:c5:a3:cc:7a:fa:70:e8:6d:
         9e:a6:f9:ae:ca:1e:ff:af:a1:68:1d:b7:2b:f0:95:29:83:0a:
         95:c9:ba:9b:0a:cc:3e:38:e0:e3:b9:c3:3d:bd:ab:33:39:66:
         49:7b:7c:16:72:0b:39:ae:4c:bc:a6:26:ba:56:31:d5:72:81:
         42:10:47:1a:48:9f:d1:bd:d2:49:71:5b:d1:be:01:c8:c8:e1:
         9b:60:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:01 2026 by rpki-client