Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/77A068EA57D611F1A509C21FCD833773.roa
File:                     77A068EA57D611F1A509C21FCD833773.roa (raw, json)
Hash identifier:          obXRKQp33behMNw0kLg97yChlSrOJ2Iv9yjscfOnr/I=
Subject key identifier:   95:25:1A:32:65:26:34:52:C8:B6:BC:09:00:D2:0F:31:F6:10:1B:C6
Certificate issuer:       /CN=A912A2C1/serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Certificate serial:       02
Authority key identifier: 15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/77A068EA57D611F1A509C21FCD833773.roa
Signing time:             Mon 25 May 2026 01:10:07 +0000
ROA not before:           Mon 25 May 2026 01:10:07 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     63850
IP address blocks:        203.34.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
                          rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A2C1, serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
        Validity
            Not Before: May 25 01:10:07 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a13a16f-25f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:5c:20:e2:83:28:aa:e4:05:1a:f8:6a:70:
                    58:d3:a2:1d:bc:8c:c3:f0:dd:d2:99:bc:9d:04:9a:
                    b8:98:a7:55:df:f6:6c:7f:10:98:eb:7c:3e:59:65:
                    e5:8b:25:4b:70:c5:49:3a:69:3f:8c:13:b2:d7:fc:
                    78:29:31:25:4e:ea:47:a2:ef:5a:a6:6f:ea:ad:85:
                    cd:28:66:c0:c1:e4:8a:33:53:e5:e1:7b:1c:47:c4:
                    a3:29:57:9a:01:a3:52:a2:f1:26:b8:9b:b7:19:2c:
                    7d:8b:14:c2:0a:d1:99:b9:6a:21:68:ae:0b:2b:1e:
                    ef:18:fb:13:51:d3:a7:d4:05:e7:78:3a:e4:4d:c6:
                    2e:2f:b1:61:14:d8:cd:b6:ec:e7:66:b6:ae:48:26:
                    a6:05:11:1d:e8:4a:e4:2a:ea:6a:4e:d1:b3:e6:f5:
                    73:58:9d:17:4f:ba:52:54:00:81:df:94:86:32:1d:
                    b7:0a:e6:e0:d9:ee:59:b2:73:2e:d0:69:e1:9a:cf:
                    e2:04:ba:bd:4e:1e:15:42:b4:61:26:79:84:9b:02:
                    60:fb:57:ae:4c:94:a2:3a:5f:e1:9d:6c:80:77:a3:
                    a8:ea:a0:74:f6:f8:4a:4d:40:83:27:01:14:2f:15:
                    75:57:d2:f8:0e:ab:0c:94:f0:4e:a8:33:17:a8:c8:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:25:1A:32:65:26:34:52:C8:B6:BC:09:00:D2:0F:31:F6:10:1B:C6
            X509v3 Authority Key Identifier:
                keyid:15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/77A068EA57D611F1A509C21FCD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:e3:c8:5b:79:9e:03:ea:ad:b4:b6:55:89:ba:b8:09:dd:
         1b:aa:01:7b:e1:52:f8:a5:d3:17:14:78:e9:34:76:ce:26:fb:
         eb:9b:f0:c4:f8:29:eb:a1:47:01:2b:ca:fe:e7:72:2e:1d:81:
         7d:53:a5:9c:d9:cc:ea:12:f4:27:8c:31:6c:47:fb:78:ba:74:
         60:67:c5:93:fc:eb:12:97:a3:ac:f0:6c:0a:d6:0f:7e:a7:14:
         39:4f:b9:2f:93:30:d0:52:8b:4f:d1:fa:5a:98:37:69:66:34:
         40:2c:c7:2c:8a:97:db:00:b8:82:51:b3:8f:1a:7b:3f:4e:ff:
         d9:0b:55:00:f7:f3:ff:7d:6f:0d:6c:9f:0f:81:60:e7:28:88:
         95:04:b4:5a:d8:d4:97:b3:aa:fc:46:bb:ea:d7:22:a5:19:1b:
         95:4d:c0:e2:ec:a0:96:4a:83:49:0a:fc:29:31:b0:eb:02:70:
         6f:b0:e3:79:c0:b8:cb:b4:c6:7a:31:46:d1:16:c1:4c:2b:58:
         b1:d0:83:c3:4e:ea:fe:09:19:64:a6:53:36:d4:c7:64:b1:f9:
         9d:62:c6:9c:bb:7f:47:a2:2e:62:3c:36:50:93:f4:6c:d4:70:
         cc:e3:44:50:c8:d8:4b:ec:83:66:4e:be:86:42:e7:bb:c4:d8:
         5e:ba:b7:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:37 2026 by rpki-client