Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/7CC6D634F27311EF9AAECC3CC4F9AE02.roa
File:                     7CC6D634F27311EF9AAECC3CC4F9AE02.roa (raw, json)
Hash identifier:          JlnWnWQAzlSTGPZ0MViHKFiBTc40udDEhKy825iFvdA=
Subject key identifier:   F7:A0:83:5B:F3:59:1A:E2:1D:23:85:7E:B2:41:DF:F8:78:E0:92:E0
Certificate issuer:       /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47
Certificate serial:       F4
Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/7CC6D634F27311EF9AAECC3CC4F9AE02.roa
Signing time:             Mon 01 Jun 2026 07:34:59 +0000
ROA not before:           Mon 01 Jun 2026 07:34:59 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        203.29.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl
                          rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47
        Validity
            Not Before: Jun  1 07:34:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1d3623-5649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:47:52:bf:9b:47:11:a9:27:96:ff:e0:17:
                    c3:65:e7:cf:0a:2c:1b:a0:da:33:67:71:99:28:11:
                    17:1b:6b:d5:eb:26:f5:89:0a:70:2e:80:f3:70:c5:
                    cc:b2:e8:e0:39:95:7e:b9:98:7b:d8:f4:97:de:4d:
                    44:4f:9b:4a:2e:3d:07:73:74:33:40:ed:00:51:38:
                    9f:a4:70:0e:80:04:42:70:95:ed:bb:eb:3e:da:ae:
                    3c:23:24:6d:b0:61:18:a9:8b:02:06:3d:61:b4:49:
                    7d:8c:53:c3:97:5a:2b:2e:91:07:05:10:96:54:f5:
                    f3:54:04:06:46:c4:35:4b:70:5f:ab:5c:4d:40:22:
                    05:fd:89:85:99:09:eb:c7:c3:e3:8b:3b:5e:22:7f:
                    2d:03:9a:eb:34:b7:ed:e7:c4:79:17:a7:1c:5e:56:
                    b3:7b:0e:cf:17:f1:53:27:11:60:82:c3:2a:31:41:
                    9f:69:88:c7:12:1e:cc:d7:99:3a:78:b8:f7:56:02:
                    d9:c4:da:35:27:f2:2c:a1:1e:a9:80:99:87:19:15:
                    0f:c4:04:b4:a9:d1:f1:f4:d3:e8:25:ea:7d:0b:ab:
                    8a:d0:be:5a:41:91:91:36:6b:8f:47:9f:c8:86:10:
                    bd:61:d0:83:cc:55:8e:aa:b8:16:f9:b9:28:9a:ec:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A0:83:5B:F3:59:1A:E2:1D:23:85:7E:B2:41:DF:F8:78:E0:92:E0
            X509v3 Authority Key Identifier:
                keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/7CC6D634F27311EF9AAECC3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.29.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:bd:7c:35:8e:88:c3:14:50:67:24:5b:41:79:9d:a0:13:
         04:ce:fa:29:5b:b1:86:fe:ca:3e:77:af:43:85:1f:cb:42:d2:
         fc:3e:bc:33:a4:9b:20:8a:c6:7c:4e:38:3b:eb:53:33:18:06:
         27:9e:af:c3:9f:8c:c0:ff:ca:de:d8:0d:c1:b4:c4:44:e1:09:
         1a:c1:e0:63:b6:b2:37:28:be:63:3c:ad:43:36:03:b0:74:65:
         70:cf:69:63:e9:d0:40:60:f9:1a:60:e3:8c:08:6f:03:0d:70:
         db:a1:1a:a5:02:df:cf:0e:74:b6:47:16:ce:a8:2c:03:3a:ec:
         36:9a:64:19:14:d4:28:5b:e3:e6:a9:dd:55:43:2b:76:e6:5b:
         f8:7a:05:eb:bd:c7:1c:12:01:aa:9d:6d:29:9a:24:7c:a6:86:
         8c:66:b9:0b:12:dd:75:bf:ad:9e:15:8b:29:92:53:f3:f5:09:
         66:b3:eb:ea:1f:6b:21:df:9e:db:60:e6:5f:09:0a:c5:ad:27:
         6d:5a:76:c7:41:2a:bd:5d:cb:39:69:e7:be:c6:a2:f8:68:c2:
         00:00:4d:6b:94:02:dd:29:9b:0e:78:1a:96:0b:06:da:0e:0a:
         98:e7:9d:09:5c:46:84:9d:5b:a9:bb:ff:7a:c6:84:4d:0b:3b:
         5d:85:40:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:44 2026 by rpki-client