Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
File:                     6B5765BC499211ED879F2D11C4F9AE02.roa (raw, json)
Hash identifier:          /vzrtqQCcQVSvHagWxuB+gMULE9rVx3mbboeBNca//A=
Subject key identifier:   9B:C2:35:9E:7F:6E:E2:86:E8:2F:03:2F:D9:BF:BD:C4:F0:C2:32:E3
Certificate issuer:       /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial:       0AC7
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 20:25:11 +0000
ROA not before:           Thu 30 Apr 2026 20:25:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138974
IP address blocks:        103.150.68.0/23 maxlen: 23
                          103.150.68.0/24 maxlen: 24
                          2001:df3:5d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
                          rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2759 (0xac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
        Validity
            Not Before: Apr 30 20:25:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3baa6-0254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0c:84:ed:92:ac:46:d2:55:5d:7e:55:22:09:
                    3a:e5:24:1a:55:73:e2:9b:d8:c0:99:3f:74:83:6f:
                    e9:10:67:ae:90:c3:66:b4:62:4e:5b:c7:44:da:08:
                    d8:9b:6b:77:9c:d1:b2:2b:17:8d:f0:e4:88:59:66:
                    17:b3:2e:2e:87:ee:07:f0:be:10:f5:eb:35:6e:46:
                    64:1d:2f:9d:48:a1:64:ee:59:25:21:59:0a:a4:26:
                    45:36:13:1e:65:0e:bf:b3:0c:57:fd:e2:05:7f:34:
                    7c:de:bf:e1:56:6a:ea:64:f3:16:80:6c:09:95:36:
                    1b:c2:42:b9:eb:02:dd:2d:0d:c3:0c:d8:26:50:0d:
                    7d:44:ea:58:df:7a:ee:59:c6:2b:b8:93:bd:fe:f9:
                    a1:de:ce:7d:c8:16:a3:17:14:2c:ab:52:71:fc:e7:
                    a9:4c:29:99:5f:59:29:e3:8d:49:24:02:4d:c3:44:
                    5e:d2:9e:98:0c:8f:ed:c0:a8:9f:19:a1:aa:2f:0e:
                    3a:ef:b5:67:41:9f:06:79:fd:ce:e7:6a:60:a9:50:
                    48:89:ff:07:4b:6a:43:91:59:02:3e:59:18:58:37:
                    a8:df:cd:c6:eb:94:17:d8:8f:6d:37:95:8d:ad:b9:
                    fe:53:b4:0d:37:72:d5:81:81:56:2d:14:d9:ea:d2:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:35:9E:7F:6E:E2:86:E8:2F:03:2F:D9:BF:BD:C4:F0:C2:32:E3
            X509v3 Authority Key Identifier:
                keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.68.0/23
                IPv6:
                  2001:df3:5d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:45:2d:10:9c:8f:fa:00:a7:23:3c:cc:2c:49:64:2b:8c:b3:
         32:df:5f:a4:71:be:6d:a1:f3:d5:26:16:fe:e9:94:0e:ae:e9:
         02:b6:51:bd:e4:8e:20:34:1c:96:1e:16:4c:2a:fa:86:20:16:
         55:68:26:b0:ea:f6:9a:e0:90:c1:f4:ff:37:6f:b4:93:47:c9:
         08:01:02:51:6a:c3:eb:5c:29:b2:ed:25:4a:97:de:af:66:e8:
         9e:9b:ef:a6:4f:6a:d7:48:90:40:cf:fe:f4:36:2b:59:e2:e1:
         da:9f:b9:ce:9a:3b:9e:3a:09:6c:e7:df:8d:f8:b1:b3:b6:d2:
         01:1d:8b:86:38:ec:4f:a0:c6:7c:94:29:41:63:b4:21:82:14:
         87:74:c2:1c:b7:dc:67:47:5d:35:6a:6c:aa:4e:89:a9:fe:26:
         e4:4a:24:7d:5e:d3:bb:51:ae:9d:75:a8:65:dc:a6:fd:85:0b:
         fe:2c:b3:e4:36:1a:3a:93:50:5a:70:b4:4b:30:b7:20:e1:18:
         df:20:cb:d9:f7:c2:09:bc:c5:a1:98:31:a0:a1:33:a4:68:e5:
         96:44:b3:f3:0b:c7:23:a0:63:fc:55:a7:75:f6:39:43:73:28:
         4d:13:e4:c9:aa:70:c9:aa:28:96:a6:ef:f8:af:d2:71:0b:a8:
         a8:e6:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:23 2026 by rpki-client