Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/76F2B3B6641B11F198CEA0269E47A888.roa
File:                     76F2B3B6641B11F198CEA0269E47A888.roa (raw, json)
Hash identifier:          rjCErKj7bSMsxmVFZ/SuhXQV1dTpG2cojoGjacopO+o=
Subject key identifier:   B7:1B:A4:1C:EC:39:51:EE:F4:57:5D:1B:08:7C:C7:FA:A3:9E:C9:32
Certificate issuer:       /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Certificate serial:       0733
Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/76F2B3B6641B11F198CEA0269E47A888.roa
Signing time:             Tue 09 Jun 2026 15:54:15 +0000
ROA not before:           Tue 09 Jun 2026 15:54:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142050
IP address blocks:        103.165.186.0/23 maxlen: 23
                          103.165.186.0/24 maxlen: 24
                          2407:4d40::/32 maxlen: 32
                          2407:4d40::/48 maxlen: 48
                          2407:4d40:1::/48 maxlen: 48
                          2407:4d40:2::/48 maxlen: 48
                          2407:4d40:3::/48 maxlen: 48
                          2407:4d40:4::/48 maxlen: 48
                          2407:4d40:5::/48 maxlen: 48
                          2407:4d40:6::/48 maxlen: 48
                          2407:4d40:7::/48 maxlen: 48
                          2407:4d40:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
                          rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
        Validity
            Not Before: Jun  9 15:54:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a283727-9053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:df:01:bc:cb:4f:c0:90:25:86:ff:1c:8d:
                    79:e9:d5:90:e0:90:55:15:16:fa:1f:7a:03:dc:c3:
                    e9:3c:9b:6d:40:21:95:9d:f4:f1:b5:93:be:87:2b:
                    ec:ef:76:2d:6c:b5:bc:41:e1:08:56:ab:fe:2c:48:
                    70:fd:a8:39:3e:84:a3:b4:a1:0e:9a:38:bb:51:a0:
                    88:af:6a:27:ef:4d:39:6b:c0:67:2c:83:0f:39:43:
                    e8:01:bf:60:66:87:09:37:eb:d0:c9:ec:67:ac:94:
                    88:cc:69:ef:7d:c6:58:c2:ec:99:6e:0b:6b:62:f1:
                    87:d4:b1:b5:c4:3e:75:bf:17:b5:6a:c3:a7:b0:92:
                    79:ff:74:6f:d7:3d:04:f3:d2:50:ef:a2:77:77:1e:
                    ff:4d:d6:11:d0:53:3f:48:95:bb:2f:99:5e:3e:0a:
                    84:a5:96:88:3c:c6:e2:ea:49:fa:71:4c:1b:00:fe:
                    c6:28:13:2e:6e:ec:c5:93:f7:93:1d:6a:ae:74:9c:
                    ae:5d:d3:4c:0b:b6:83:5c:71:8c:be:57:b5:97:28:
                    b3:72:00:48:14:9f:8e:fb:bd:ee:79:3c:74:df:4c:
                    0c:01:95:62:20:2d:c3:24:1e:db:79:13:11:c2:cd:
                    93:86:67:7c:e3:bf:1d:ae:2b:dd:89:b4:96:60:25:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1B:A4:1C:EC:39:51:EE:F4:57:5D:1B:08:7C:C7:FA:A3:9E:C9:32
            X509v3 Authority Key Identifier:
                keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/76F2B3B6641B11F198CEA0269E47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.186.0/23
                IPv6:
                  2407:4d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:b6:48:75:eb:c4:89:88:08:52:99:ab:95:f9:15:67:6a:a5:
         ce:85:04:28:eb:cc:87:99:c2:66:7d:02:07:f2:97:02:2e:aa:
         2b:d8:e7:ba:8d:fb:1a:3e:74:81:7f:27:12:18:62:24:02:b0:
         7d:7f:a8:da:3f:57:f1:2b:1c:4a:cf:13:4a:f3:4f:34:cf:d6:
         2f:e0:fb:7e:6c:d8:b4:8c:77:7a:a4:fa:23:28:9f:88:88:bc:
         ec:cd:b9:eb:70:a4:dd:7c:1c:dc:ee:f5:05:9b:e9:c4:92:41:
         17:a8:11:4e:53:5c:49:e9:53:ed:81:3c:17:c3:25:3f:3a:4f:
         fd:a1:9d:f6:9b:b3:fd:db:16:2c:fe:95:cb:d1:6f:12:95:33:
         19:6b:48:24:c5:a3:c1:6a:60:ff:1b:03:d9:1f:df:aa:ce:f4:
         a8:41:bb:72:b9:dd:7b:8c:2d:33:33:20:8f:80:44:22:fd:17:
         4a:f7:f2:ea:ca:6e:b1:d7:87:8a:14:57:cc:bc:0f:ed:8e:6f:
         5c:70:c2:a8:fc:b4:02:6f:5b:4f:30:7e:d3:10:b1:cd:10:e0:
         43:84:f6:0f:7f:36:35:74:80:d7:e5:26:61:ce:31:2c:d8:43:
         58:15:f6:b0:70:ac:67:41:40:97:f1:b0:b5:ea:d3:55:8a:59:
         bb:da:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:39:59 2026 by rpki-client