Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/C6FF76A0000C11F1BBD3B1413E6F56BC.roa
File:                     C6FF76A0000C11F1BBD3B1413E6F56BC.roa (raw, json)
Hash identifier:          z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=
Subject key identifier:   7F:38:49:BD:21:C3:7B:BF:A3:B1:F7:BE:DB:DD:2D:59:20:6F:2E:02
Certificate issuer:       /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial:       2A05
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/C6FF76A0000C11F1BBD3B1413E6F56BC.roa
Signing time:             Sat 30 May 2026 16:18:00 +0000
ROA not before:           Sat 30 May 2026 16:18:00 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     58746
IP address blocks:        203.101.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10757 (0x2a05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
        Validity
            Not Before: May 30 16:18:00 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1b0db8-1e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bd:5f:c0:80:aa:b4:02:f9:5a:5f:fe:39:8c:
                    3c:1f:69:58:15:dd:d7:25:85:71:2a:cf:07:49:e8:
                    2b:a7:1c:22:db:51:00:db:29:ce:94:cf:0a:0f:f6:
                    96:cb:f4:63:cd:74:dc:0b:70:6b:c4:3c:82:ad:99:
                    c2:7a:c3:b2:51:57:c3:70:e4:f9:f8:7a:76:25:be:
                    ed:fb:c9:39:85:cb:63:cd:15:ca:9e:c7:4e:ea:78:
                    ef:b3:a1:b3:b3:79:01:a0:e8:40:93:7e:9e:39:22:
                    53:5e:8b:b8:e1:f8:48:3f:ec:17:01:ca:07:4c:95:
                    83:8d:0d:65:ae:bf:5a:ed:ca:15:0b:b7:ac:61:cb:
                    a5:07:a4:e1:26:bf:7b:be:1c:4d:67:39:ba:ca:bb:
                    8b:9b:3a:e1:91:ad:24:d5:51:c7:39:66:b5:8c:b4:
                    a0:50:f1:09:7c:75:c6:10:fe:81:d1:03:53:6e:04:
                    18:e4:6a:e6:8f:b2:60:1b:bf:78:14:33:f0:2d:07:
                    57:4c:c8:57:67:d4:21:36:a4:06:81:28:e1:43:76:
                    a2:2d:1d:fd:a7:e1:b4:d8:50:6d:cc:59:04:4c:7a:
                    b6:86:f4:da:5b:2d:78:07:e1:46:d7:9d:28:97:ab:
                    b1:1e:2b:8d:df:ec:57:fd:97:17:ff:67:62:d1:b7:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:49:BD:21:C3:7B:BF:A3:B1:F7:BE:DB:DD:2D:59:20:6F:2E:02
            X509v3 Authority Key Identifier:
                keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/C6FF76A0000C11F1BBD3B1413E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.101.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:27:5d:59:a5:45:8a:19:d4:d5:c1:90:90:01:1c:e7:5a:
         b1:54:63:9b:98:50:7a:c2:e5:ef:28:d4:89:7a:1b:c4:c8:4b:
         ef:6a:e2:bf:2d:f7:6b:fd:25:16:01:a3:72:24:82:6c:b4:66:
         c9:fc:84:d1:ac:d0:be:c1:19:c1:17:37:aa:00:78:1c:a0:c1:
         83:36:9c:e7:b1:dd:19:af:5f:21:52:63:14:5e:75:18:39:96:
         44:30:02:63:0b:f1:8b:ff:31:7f:da:61:c6:b4:23:a8:6e:d0:
         49:ee:52:f0:18:3d:b7:d5:92:4f:f9:26:5e:f4:6c:5a:f6:4c:
         9c:eb:f7:cc:ab:e3:40:17:aa:02:d4:c5:43:90:b1:6f:f2:c9:
         b5:b1:b7:00:2e:5c:ce:aa:cf:66:83:11:11:bb:6f:5a:e9:ba:
         d6:35:a3:26:bf:f2:d6:b2:5a:05:d1:45:85:75:8e:6e:02:82:
         a1:55:37:ad:fa:98:09:53:90:85:f1:44:7f:81:e2:a8:ca:b2:
         18:c0:77:cd:8f:88:15:72:31:e8:8f:7c:1c:45:f1:cc:29:9f:
         8b:b4:26:5e:9c:c9:b6:4c:f7:d6:42:21:01:f6:8d:bf:cc:c0:
         85:ff:bf:25:ed:80:a0:ee:5b:85:90:77:b4:d0:d9:30:06:7c:
         98:03:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:07:07 2026 by rpki-client