Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/275694947E2111EABA287C6DC4F9AE02.roa
File:                     275694947E2111EABA287C6DC4F9AE02.roa (raw, json)
Hash identifier:          pLFtJM8YCayRSQjnW3sFmWo+oKdAsNVRNoN1xNfin+g=
Subject key identifier:   5B:0B:E5:1A:62:F8:0B:4B:35:7C:35:3E:3F:F4:FA:9A:EE:F6:66:36
Certificate issuer:       /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial:       0A6B
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/275694947E2111EABA287C6DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:07:59 +0000
ROA not before:           Sun 08 Jun 2025 20:05:17 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136902
IP address blocks:        103.150.52.0/24 maxlen: 24
                          103.150.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
                          rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2667 (0xa6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
        Validity
            Not Before: Jun  8 20:05:17 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5a7cf-0ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:26:b6:23:0f:9b:ee:0d:ba:07:e5:c6:ae:
                    12:b5:40:d9:be:32:82:b1:de:ed:e2:1d:af:de:33:
                    f1:41:12:38:2c:6c:55:00:82:21:29:55:e8:26:bf:
                    82:af:f8:59:68:ae:d7:2d:5b:7a:b4:9a:2b:59:3c:
                    92:77:2f:a1:54:3a:90:44:a9:55:3c:d9:00:e8:f0:
                    91:8f:8a:ea:59:d4:8c:85:c0:35:d7:34:bb:f6:64:
                    6a:0b:d4:64:87:78:55:74:02:35:58:9a:63:2d:ea:
                    8e:10:7e:a4:aa:e3:49:5d:06:b0:15:99:aa:f3:7f:
                    6f:88:1a:f2:2d:22:57:e2:52:e2:22:3b:54:db:eb:
                    dc:e0:11:6d:5d:87:2e:f3:60:b3:da:49:cd:60:42:
                    f3:70:15:ba:1a:aa:83:d1:3d:04:00:65:d8:1a:06:
                    52:36:f5:e1:0f:5e:50:55:02:26:05:e0:07:f3:3a:
                    31:bf:a7:85:32:42:41:f6:f3:af:a6:81:df:8c:48:
                    b6:48:45:2b:4b:c8:94:b5:aa:36:42:d4:db:b2:a3:
                    08:f6:1b:ba:be:0a:53:06:56:91:2a:1f:40:44:b2:
                    d0:1a:1c:b6:cf:80:83:da:3d:c3:f5:d5:ff:6b:8f:
                    42:72:8d:65:a6:bf:64:79:02:ba:e8:ff:4e:7e:bd:
                    89:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0B:E5:1A:62:F8:0B:4B:35:7C:35:3E:3F:F4:FA:9A:EE:F6:66:36
            X509v3 Authority Key Identifier:
                keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/275694947E2111EABA287C6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:40:29:c3:14:a6:e3:6f:db:00:c0:7f:f1:1d:1c:03:90:21:
         94:56:0b:c0:e8:e1:e7:b7:0b:6e:ce:ed:48:e8:10:3e:ac:d1:
         a4:f9:c5:76:bc:10:a9:b3:e1:ef:74:6f:30:37:80:fb:71:b6:
         c0:19:39:96:b4:f9:3a:20:55:43:42:b2:71:42:ea:43:ce:4e:
         ec:0f:c1:ff:c7:7f:70:88:5e:17:ad:3c:b5:a8:27:0d:8d:96:
         d2:d4:d4:c5:cf:0d:af:9d:90:df:e9:9a:48:9d:e6:00:92:83:
         84:5d:34:66:05:dd:57:93:72:c6:30:1a:ea:3a:06:05:cb:3f:
         4b:84:1c:5e:9a:dd:5b:93:70:86:1c:1a:a9:7e:07:ae:24:f6:
         1a:b6:9a:a5:0c:ff:64:4c:42:3f:59:4a:fa:9d:da:7c:c1:c2:
         19:7f:f4:a9:df:c9:de:e3:26:79:1e:97:47:6d:4f:05:d2:92:
         75:c1:26:9e:bc:e2:3c:2a:a2:cb:0e:4f:6d:3d:47:f2:04:a2:
         6a:73:e8:98:a3:ee:e5:ac:6d:0a:47:d7:cd:ea:01:ca:e4:1d:
         05:d2:2b:f6:30:85:9c:e1:1e:99:d7:95:4d:0c:ae:75:70:b3:
         a0:ef:97:21:91:b2:17:fa:49:0e:c6:ac:ad:2b:56:8a:94:99:
         39:1b:76:30
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC
OERCN0NGMkQwHhcNMjUwNjA4MjAwNTE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTdjZi0wYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh7AmtiMPm+4Nugflxq4StUDZvjKCsd7t4h2v3jPxQRI4LGxVAIIhKVXoJr+C
r/hZaK7XLVt6tJorWTySdy+hVDqQRKlVPNkA6PCRj4rqWdSMhcA11zS79mRqC9Rk
h3hVdAI1WJpjLeqOEH6kquNJXQawFZmq839viBryLSJX4lLiIjtU2+vc4BFtXYcu
82Cz2knNYELzcBW6GqqD0T0EAGXYGgZSNvXhD15QVQImBeAH8zoxv6eFMkJB9vOv
poHfjEi2SEUrS8iUtao2QtTbsqMI9hu6vgpTBlaRKh9ARLLQGhy2z4CD2j3D9dX/
a49Cco1lpr9keQK66P9Ofr2JLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFsL5Rpi
+AtLNXw1Pj/0+pru9mY2MB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF
MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEI5QjgvM0RFOTA2MDI3RTIwMTFFQTg0NkYyMzZEQzRGOUFFMDIvMjc1Njk0OTQ3
RTIxMTFFQUJBMjg3QzZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5Y0MA0GCSqGSIb3DQEBCwUAA4IBAQApQCnDFKbjb9sAwH/xHRwD
kCGUVgvA6OHntwtuzu1I6BA+rNGk+cV2vBCps+HvdG8wN4D7cbbAGTmWtPk6IFVD
QrJxQupDzk7sD8H/x39wiF4XrTy1qCcNjZbS1NTFzw2vnZDf6ZpIneYAkoOEXTRm
Bd1Xk3LGMBrqOgYFyz9LhBxemt1bk3CGHBqpfgeuJPYatpqlDP9kTEI/WUr6ndp8
wcIZf/Sp38ne4yZ5HpdHbU8F0pJ1wSaevOI8KqLLDk9tPUfyBKJqc+iYo+7lrG0K
R9fN6gHK5B0F0iv2MIWc4R6Z15VNDK51cLOg75chkbIX+kkOxqytK1aKlJk5G3Yw
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:10:31 2026 by rpki-client