Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa
File:                     F77C1438964111EDAAB8E74AC4F9AE02.roa (raw, json)
Hash identifier:          iNoqSRT8zGT4sQQ17Q3E6C4knP5LZOO3EPDDr7aFmYo=
Subject key identifier:   D9:60:1B:16:20:9E:C9:0C:6B:9B:5E:39:7C:D1:C3:D1:84:74:01:0A
Certificate issuer:       /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
Certificate serial:       0282
Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa
Signing time:             Sun 31 May 2026 02:32:31 +0000
ROA not before:           Sun 31 May 2026 02:32:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149777
IP address blocks:        103.186.50.0/23 maxlen: 23
                          103.186.50.0/24 maxlen: 24
                          103.186.51.0/24 maxlen: 24
                          2400:6e20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
        Validity
            Not Before: May 31 02:32:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1b9dbf-d336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:64:9d:6f:d2:c1:d2:d8:a8:cb:af:01:a1:
                    39:f4:bf:56:57:93:01:51:c8:09:24:01:0c:94:f0:
                    07:ed:9e:a2:2a:22:0a:ad:2e:4d:a2:3e:b0:a8:06:
                    d3:5f:f6:e6:d3:41:16:22:69:ea:9e:2b:ad:f0:f4:
                    0c:f7:e9:9f:01:93:a6:6f:95:77:f1:f3:3c:8e:de:
                    f5:f5:e6:12:12:3e:eb:2a:d7:96:38:5a:b9:ba:c9:
                    ca:f5:56:51:49:04:15:e2:ef:fd:ad:e8:58:97:2a:
                    cb:45:30:27:83:7e:7e:96:17:0f:d3:f7:cf:9b:7c:
                    c2:7e:b7:d5:62:38:d2:89:17:77:9d:04:cc:dc:5e:
                    af:4c:4b:68:4c:3b:54:8f:15:30:a6:67:30:9c:87:
                    03:f6:8b:9e:74:22:e1:7c:98:e2:21:6c:41:87:bc:
                    d1:4d:01:0e:e9:ee:cc:1f:1e:67:60:98:a9:e7:e2:
                    cf:06:74:e3:c7:88:99:a8:8a:3b:62:b5:14:25:4e:
                    14:5b:ce:6b:56:c4:f9:15:2d:05:b3:35:04:2e:7f:
                    f6:d7:e1:36:56:12:3f:c0:03:b9:d5:8a:45:9e:9f:
                    58:cd:03:61:31:d0:f6:26:8f:bb:68:e1:3d:90:c9:
                    3f:45:44:a3:4d:15:76:b7:d9:2b:62:21:cb:a2:e1:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:60:1B:16:20:9E:C9:0C:6B:9B:5E:39:7C:D1:C3:D1:84:74:01:0A
            X509v3 Authority Key Identifier:
                keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.50.0/23
                IPv6:
                  2400:6e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:d2:60:f5:4d:57:da:55:dc:60:14:28:5d:05:3f:a4:0b:
         8b:fe:02:3b:92:59:e2:97:df:e4:7f:eb:0f:66:46:83:58:9c:
         ce:2f:43:31:e7:3d:d1:f3:19:bb:f6:15:dd:15:5d:11:8e:03:
         59:63:2d:63:2e:39:71:67:55:14:e4:94:72:33:a0:2d:12:8a:
         c2:d3:43:84:8b:ae:28:ce:32:6c:5d:9c:58:60:37:a4:67:74:
         d6:63:75:b3:bf:80:de:20:cd:31:f1:f2:65:cf:8b:d1:81:06:
         d3:03:8d:9d:c7:e2:33:71:c7:74:d1:ac:4c:fe:93:9a:fe:93:
         85:6f:96:dc:a9:2a:a6:aa:11:09:d6:4b:fd:2a:f5:98:b7:29:
         82:a0:57:ab:83:0c:bf:79:18:09:fb:c2:67:ff:1f:23:bd:93:
         47:6c:29:f3:1a:08:f6:2c:db:71:cf:3c:57:1e:47:bb:22:99:
         74:91:d9:42:68:89:a6:10:e0:85:bd:d1:73:7e:90:97:0f:82:
         bd:14:94:49:79:0a:2c:01:5b:00:68:0b:8d:12:91:2e:d1:d9:
         6b:b4:6e:f1:e7:75:06:68:a1:ff:b3:85:f8:f4:44:ab:3f:40:
         48:43:ed:44:c8:63:09:07:5c:bd:e8:0d:ac:fd:4d:20:c1:c7:
         a7:bf:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:27:25 2026 by rpki-client