Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/50DA994A29D411F1916B319D97833773.roa
File:                     50DA994A29D411F1916B319D97833773.roa (raw, json)
Hash identifier:          zD0ufAiml2itPOf8FjLNOlzmYyQ99ftWQuzKy+90VzM=
Subject key identifier:   61:96:65:77:0F:43:D0:D5:95:35:BD:4D:CD:8C:A2:1B:5F:EF:50:EB
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       0142
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/50DA994A29D411F1916B319D97833773.roa
Signing time:             Tue 28 Jul 2026 19:39:51 +0000
ROA not before:           Tue 28 Jul 2026 19:39:51 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     135357
IP address blocks:        206.161.216.0/24 maxlen: 24
                          206.161.217.0/24 maxlen: 24
                          206.161.218.0/24 maxlen: 24
                          207.226.136.0/24 maxlen: 24
                          207.226.137.0/24 maxlen: 24
                          207.226.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Jul 28 19:39:51 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a690587-18c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:4f:cd:08:45:f0:4c:58:78:17:6a:58:bd:
                    77:e9:9a:27:9f:95:0b:eb:5d:11:14:5b:22:77:6d:
                    19:6c:d4:b8:ae:a2:e8:3e:d8:f2:21:d5:20:92:ef:
                    43:c0:1d:c0:82:aa:cc:d7:7d:0f:1d:8d:46:e9:49:
                    f2:c8:84:e8:2d:e7:f6:dc:12:36:d8:d9:bb:82:37:
                    66:6c:f7:1e:3e:a0:8d:df:5b:63:78:4a:76:8f:ae:
                    eb:73:3c:50:95:e0:58:dc:88:cc:d6:8c:3f:f1:ab:
                    a9:f9:cc:a3:ad:d0:ba:4a:c1:0b:72:6a:3e:05:8e:
                    90:71:a0:ea:f6:38:cb:02:f7:15:ac:43:c4:14:45:
                    a2:a1:d4:a2:c3:80:e1:60:d3:43:90:bf:51:f9:88:
                    94:25:3b:f0:38:bb:62:98:cd:95:36:de:53:32:0e:
                    07:82:36:a8:e8:47:82:71:35:08:bb:7f:0d:4d:7d:
                    25:72:a7:fc:1f:ca:f7:22:8f:67:e0:ee:52:ad:7a:
                    09:5c:fe:0e:fe:7e:a7:c8:b7:56:9b:4c:9c:50:0d:
                    83:61:8d:dc:80:33:fd:4c:a9:d6:5c:66:fe:e6:20:
                    38:21:ac:6e:7c:e9:28:a5:9c:84:7e:9a:01:f5:ee:
                    b6:7c:5b:40:6e:88:88:59:cb:ee:c5:03:87:cf:26:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:96:65:77:0F:43:D0:D5:95:35:BD:4D:CD:8C:A2:1B:5F:EF:50:EB
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/50DA994A29D411F1916B319D97833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.216.0-206.161.218.255
                  207.226.136.0-207.226.138.255

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:72:6b:46:cb:1a:1b:8f:d1:d9:c3:ce:97:c4:14:c7:9f:
         c2:6a:bd:70:bf:a7:c9:76:85:27:ec:85:53:cb:96:8a:21:72:
         43:c1:e3:f8:ae:5e:6d:26:93:3b:fa:d4:2e:c1:8e:95:5f:ec:
         ec:84:88:27:6d:b9:b0:57:42:26:85:72:dc:1e:2a:4e:11:e9:
         db:30:db:1c:2c:ce:1c:91:0e:59:54:1e:32:27:3f:37:20:cb:
         be:78:6f:b2:e8:de:a5:1f:6d:da:cf:8d:65:27:9c:df:72:78:
         a9:fa:18:2c:86:b7:32:28:f2:5a:1c:86:e4:73:04:60:07:c3:
         bd:2b:7e:ad:2b:98:98:9b:88:23:3a:39:91:46:cd:24:ec:d6:
         8f:57:fb:06:74:d2:f7:36:93:56:96:0f:49:c0:13:ff:1b:9a:
         dd:75:d9:73:c6:56:2d:44:b9:d0:9f:fa:29:d4:fe:b6:19:b5:
         1e:fe:83:c3:12:31:19:18:1d:07:69:25:71:3e:26:43:d9:2e:
         87:4e:de:b5:1b:d6:93:0f:57:56:c8:f4:b9:16:33:33:bd:df:
         16:f6:4f:cd:18:8f:45:7d:09:d6:04:fc:83:58:16:ae:02:0c:
         13:50:a4:07:d8:7e:86:37:e6:a3:c4:21:1a:d4:00:b3:d3:46:
         0c:46:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:46:31 2026 by rpki-client