Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C446B484559C11F0BBD2D127C4F9AE02.roa
File:                     C446B484559C11F0BBD2D127C4F9AE02.roa (raw, json)
Hash identifier:          ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=
Subject key identifier:   AF:E1:12:C2:45:9C:28:E9:FF:3C:33:C4:26:5E:03:D5:FE:43:4F:53
Certificate issuer:       /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial:       0815
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C446B484559C11F0BBD2D127C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:13:06 +0000
ROA not before:           Mon 02 Feb 2026 21:18:45 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140523
IP address blocks:        103.150.18.0/23 maxlen: 23
                          103.150.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
                          rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2069 (0x815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
        Validity
            Not Before: Feb  2 21:18:45 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a481b2-3595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:5f:7f:4e:11:69:b9:91:e5:cd:d1:31:26:
                    82:54:7f:9f:45:af:8e:6d:8f:50:97:4c:58:da:36:
                    cc:c4:d1:fd:88:75:79:e2:b4:c4:89:05:68:ad:f7:
                    fd:ad:dc:51:8d:21:85:3c:8a:8e:d1:11:3b:5d:b0:
                    9a:a2:dc:15:fc:2c:6b:e4:fa:a5:d4:ec:d6:36:0b:
                    b1:e5:36:02:a3:0b:f5:70:61:32:4a:45:1d:c9:c0:
                    e8:bf:5a:5a:9f:7d:c3:1d:40:b2:72:e1:a4:d9:0f:
                    80:1f:93:f2:75:56:36:d4:b2:f2:12:c6:a1:78:20:
                    9a:39:e3:11:60:0f:60:8d:d6:fb:03:52:30:99:d0:
                    ff:ea:ae:fc:eb:18:3f:32:10:ea:74:8e:d8:fc:8f:
                    90:bc:80:cf:47:38:d5:a3:36:6c:22:de:86:13:9e:
                    54:f6:b7:f7:6a:ca:43:6b:db:89:72:c8:b1:27:63:
                    de:dd:09:4b:80:71:d3:7e:93:76:96:a8:1f:21:ad:
                    22:d6:0e:77:2a:f5:29:98:ad:c4:8a:2c:0f:6f:dc:
                    37:c7:c8:eb:2f:43:d6:86:f3:b8:52:93:0d:bb:8a:
                    f0:24:95:cb:b0:57:06:13:42:30:d3:74:75:6c:e5:
                    8d:68:67:64:0c:86:d0:0c:d0:29:33:52:aa:52:cc:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E1:12:C2:45:9C:28:E9:FF:3C:33:C4:26:5E:03:D5:FE:43:4F:53
            X509v3 Authority Key Identifier:
                keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C446B484559C11F0BBD2D127C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:de:ac:19:81:d4:05:11:a1:70:71:f9:81:96:18:d3:3a:01:
         2c:71:eb:ae:5c:9c:d7:d8:99:44:4b:8d:bc:70:3e:f8:5e:15:
         1f:01:91:74:89:86:98:b1:e8:34:c3:a7:39:e3:01:db:0b:9e:
         95:1a:d9:10:64:eb:71:59:ff:8e:c8:06:7a:b2:68:25:e1:52:
         b2:89:67:c4:76:3f:aa:43:a7:8e:ad:b9:67:f8:13:ee:e2:fc:
         cf:3d:f9:71:da:7f:e1:fd:89:b7:c9:b5:9c:8e:5b:5f:30:ad:
         9e:e8:8f:4c:9a:69:13:f7:9e:5f:39:58:bd:e0:8d:b9:fb:23:
         05:aa:08:0a:f3:b9:43:b9:79:4b:61:15:a0:b3:c3:1d:11:f6:
         d1:ac:c7:2d:15:87:6e:db:95:de:9e:a4:ad:9c:31:3a:96:ad:
         b8:54:51:06:96:f8:76:17:92:bf:d6:57:34:0b:81:00:5a:66:
         ec:bc:71:09:2e:14:f4:13:05:75:3c:e7:9c:5c:75:08:05:2d:
         a3:6d:6a:dd:85:a8:52:9f:b2:01:b6:85:6d:ce:44:c0:d9:54:
         d6:c2:e8:84:41:23:6a:ec:22:ee:2c:85:10:ce:71:c3:00:7f:
         6f:99:81:e5:73:f0:ff:7d:25:ca:1b:d3:4b:41:f2:82:b1:54:
         ea:77:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:03 2026 by rpki-client