Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa
File:                     76C782CC836811E9B8830935C4F9AE02.roa (raw, json)
Hash identifier:          IEwmF1YPiOGApN7H4VHhpg4ij4obs6SexWhQUYa7bXs=
Subject key identifier:   67:C9:06:8F:BD:D4:A3:EB:32:6E:87:11:14:CC:14:C1:5E:81:E7:50
Certificate issuer:       /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial:       0FD3
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa
Signing time:             Tue 02 Jun 2026 18:21:00 +0000
ROA not before:           Tue 02 Jun 2026 18:21:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     64073
IP address blocks:        14.102.98.0/23 maxlen: 24
                          103.9.40.0/23 maxlen: 24
                          103.85.28.0/22 maxlen: 24
                          103.139.184.0/23 maxlen: 24
                          103.250.88.0/22 maxlen: 24
                          118.67.192.0/21 maxlen: 24
                          163.47.128.0/22 maxlen: 24
                          202.179.140.0/22 maxlen: 24
                          2404:e940::/32 maxlen: 32
                          2407:8b00::/32 maxlen: 32
                          2407:8b00::/36 maxlen: 36
                          2407:8b00:1::/48 maxlen: 48
                          2407:8b00:1000::/36 maxlen: 36
                          2407:8b00:1160::/43 maxlen: 43
                          2407:8b00:1162::/48 maxlen: 48
                          2407:8b00:2000::/36 maxlen: 36
                          2407:8b00:3000::/36 maxlen: 36
                          2407:8b00:9000::/36 maxlen: 36
                          2407:8b00:c003::/48 maxlen: 48
                          2407:8b00:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
                          rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4051 (0xfd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
        Validity
            Not Before: Jun  2 18:21:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1f1f0c-b29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:31:6b:6f:05:61:3f:b1:00:0c:41:d7:bf:
                    2e:60:b2:ed:85:3f:de:cf:16:42:83:4f:b2:8b:22:
                    64:31:ee:52:a4:ea:c1:1e:7b:b4:47:86:8c:4c:24:
                    fe:be:d3:44:fa:13:ab:28:4a:ce:88:d1:8a:3c:83:
                    20:28:64:2c:ff:2b:ac:4e:a1:e2:b1:3d:78:4b:ef:
                    4f:83:6e:e8:8d:22:80:dc:84:ac:10:73:52:fe:9f:
                    94:7e:1e:89:1d:39:ce:db:75:46:d1:c2:11:ea:4b:
                    1c:1f:63:50:af:e1:8b:21:a8:bf:2f:1c:d6:d9:68:
                    27:3d:a6:a4:1f:cf:b2:8e:04:78:e3:0d:f7:3c:0b:
                    03:4a:a9:a2:ad:dd:cb:26:75:41:55:c4:bf:12:f2:
                    a1:19:83:f0:9e:0f:f4:33:9b:87:06:c1:f3:85:13:
                    6c:b0:48:e5:08:85:bb:cb:52:66:e8:03:69:fe:d1:
                    70:4c:80:ad:af:ba:44:55:91:99:4c:6c:6b:5d:89:
                    ce:e2:e2:52:d5:b7:2c:77:6b:08:35:8a:70:90:22:
                    ca:63:d1:ff:7b:7d:76:97:4c:a4:99:a3:b9:61:12:
                    0b:4f:1c:3e:a4:b4:9a:b6:e9:22:47:56:a9:6d:fa:
                    30:4a:3c:d0:b9:d5:e1:02:79:28:18:f4:e8:76:43:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:06:8F:BD:D4:A3:EB:32:6E:87:11:14:CC:14:C1:5E:81:E7:50
            X509v3 Authority Key Identifier:
                keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.98.0/23
                  103.9.40.0/23
                  103.85.28.0/22
                  103.139.184.0/23
                  103.250.88.0/22
                  118.67.192.0/21
                  163.47.128.0/22
                  202.179.140.0/22
                IPv6:
                  2404:e940::/32
                  2407:8b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:0b:e8:19:11:9e:a3:33:f0:3f:60:81:2d:f4:1f:0e:e6:9b:
         e2:d5:1c:ef:d7:73:4d:fc:05:fc:be:81:e5:79:6c:91:a2:86:
         f6:83:27:51:88:c4:de:3a:2a:37:1d:32:d7:ba:60:2d:63:2a:
         0d:b4:16:e4:ac:b4:cd:29:93:bb:70:bd:31:92:43:cd:dc:c2:
         50:d3:19:00:7d:08:ea:e5:48:74:04:77:d4:59:3b:37:22:0f:
         e4:7e:4d:05:20:dd:52:51:90:9d:39:87:c0:48:a4:05:73:93:
         e4:d5:ea:97:bf:c1:f4:12:b4:c4:b8:20:33:aa:3c:e5:b3:7c:
         58:84:b1:c2:30:a5:6c:61:dd:c9:7b:0e:d0:92:24:09:28:cf:
         0d:bb:84:87:3d:76:52:af:87:8a:23:c4:4f:68:a5:e8:27:a8:
         c3:43:9e:68:e5:2f:08:12:ab:a8:93:af:ec:0a:5d:81:ed:49:
         28:90:30:35:10:d5:99:44:9d:27:8e:24:48:e8:6e:3f:30:f3:
         f4:83:fe:29:ff:84:71:96:fd:26:9f:c9:44:83:05:3e:d3:69:
         b7:c9:a3:2f:81:e3:94:69:c4:0c:b3:7d:fb:50:15:09:1d:02:
         bb:2a:cb:92:b1:37:16:bb:d1:b0:99:a8:49:34:54:1e:92:82:
         3a:d6:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:37 2026 by rpki-client