Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa
File:                     5C1CF19EA9C011EABAAB4624C4F9AE02.roa (raw, json)
Hash identifier:          N76m8mGbInfNEkPUCeKxXQd1avqi2DdrtdtXBvmx1bI=
Subject key identifier:   05:1A:CD:F6:94:CB:A7:E9:5D:C6:C6:28:22:1A:60:8D:95:8A:96:CD
Certificate issuer:       /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Certificate serial:       0ABB
Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa
Signing time:             Mon 04 May 2026 20:23:57 +0000
ROA not before:           Mon 04 May 2026 20:23:57 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        103.150.46.0/24 maxlen: 24
                          103.150.47.0/24 maxlen: 24
                          2001:df3:5580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
                          rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
        Validity
            Not Before: May  4 20:23:57 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f9005d-fe77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:bf:a4:4c:a2:11:81:73:63:a9:83:8e:13:
                    6e:f6:78:58:a2:61:f5:0b:a8:75:1d:85:00:ca:ee:
                    52:0b:16:d2:d2:32:08:71:c6:aa:c6:53:21:6a:57:
                    02:f9:df:de:64:ea:e8:53:33:35:54:3e:1a:8c:07:
                    3c:ba:08:b6:9f:c5:fb:12:b0:43:23:67:62:45:f7:
                    50:fc:e6:1f:8f:f0:42:c6:33:c9:11:c0:b5:69:39:
                    bf:be:ce:64:e7:e8:8b:93:b8:69:f9:c0:b6:20:06:
                    21:8f:9d:bd:9d:5d:a1:20:fe:d1:14:31:84:7a:59:
                    58:7e:6b:87:d7:bc:7b:bc:d1:b7:9d:1b:29:e2:7a:
                    08:02:29:a2:83:d2:00:ce:28:7d:16:67:5c:65:49:
                    6c:ce:d5:31:3e:62:c9:28:26:bc:dd:e7:30:a0:92:
                    6f:fd:df:b9:fd:89:c2:00:9f:7f:14:0b:e9:82:fc:
                    e8:58:04:b7:08:54:94:62:33:66:61:31:6c:f5:82:
                    18:9c:c0:02:c9:fc:29:a9:11:3e:ce:e0:28:2e:05:
                    d6:78:04:e5:c7:59:7b:21:e2:70:a3:90:f6:35:53:
                    3f:a2:44:66:8f:85:66:f4:a4:fb:79:a7:a4:a7:d6:
                    3c:f8:f1:e5:d3:48:6c:af:a7:29:b7:2b:85:16:2b:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:CD:F6:94:CB:A7:E9:5D:C6:C6:28:22:1A:60:8D:95:8A:96:CD
            X509v3 Authority Key Identifier:
                keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.46.0/23
                IPv6:
                  2001:df3:5580::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:ee:4a:37:90:b7:67:a8:b2:27:01:e4:48:2c:9a:a0:5a:8a:
         dd:7e:e8:87:ac:15:88:a3:eb:0f:b6:f3:16:2a:a4:90:59:f7:
         36:6d:9f:93:15:fa:6f:ce:5d:3d:db:a9:d8:e6:ad:38:7f:97:
         ac:51:6c:e8:6c:1c:71:9a:65:ec:eb:eb:3f:00:34:e4:a8:4e:
         2d:43:b6:c3:e8:21:ff:38:d7:9f:93:d0:9e:d3:45:60:bc:49:
         61:36:e2:52:a4:4d:84:95:45:de:ca:67:7c:28:76:89:67:31:
         4f:25:95:e7:f0:d5:ab:69:4e:d6:0e:f1:72:d6:15:42:27:63:
         54:f3:c0:27:d8:c7:2c:30:1a:7f:90:c6:aa:d6:52:e5:c7:88:
         be:b1:05:6e:eb:2d:8f:00:20:de:8e:d6:47:0e:37:6c:43:26:
         7b:f5:1f:f2:8b:55:45:37:02:a1:7e:0c:2d:60:d4:9d:19:af:
         1d:77:89:46:8b:d3:d0:77:1d:cb:20:4d:84:51:7e:ec:60:26:
         a1:56:4b:f4:52:e2:04:c8:2b:a7:6c:07:75:aa:06:be:2d:c2:
         6d:c7:af:73:56:bc:af:51:31:33:e2:4b:de:88:f1:ec:99:e3:
         9d:8b:5d:94:50:91:80:a4:49:71:83:db:16:2c:d1:54:cb:cc:
         f9:ab:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:33 2026 by rpki-client