Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/F50A884C5DDF11F197B40288B8833773.roa
File:                     F50A884C5DDF11F197B40288B8833773.roa (raw, json)
Hash identifier:          q5ErDtvJGiFQsfi0aNFW5nSZE39VbQoqOQCebpIWByc=
Subject key identifier:   6A:EF:DD:E7:21:D8:73:F0:E5:64:50:09:AB:1E:D4:AF:A2:AD:DA:B8
Certificate issuer:       /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Certificate serial:       066A
Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/F50A884C5DDF11F197B40288B8833773.roa
Signing time:             Sun 02 Aug 2026 23:43:32 +0000
ROA not before:           Sun 02 Aug 2026 23:43:32 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     58955
IP address blocks:        103.169.66.0/23 maxlen: 23
                          103.169.67.0/24 maxlen: 24
                          2407:9c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 22:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
        Validity
            Not Before: Aug  2 23:43:32 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6fd624-aaba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:df:2f:44:c5:5f:02:bf:72:c5:e3:68:fc:
                    82:9f:a3:b2:26:35:5c:d9:44:15:76:2b:10:ba:ce:
                    0b:e2:84:70:7c:3f:0b:43:f4:39:8b:e2:cb:13:40:
                    b0:92:39:c0:71:ce:70:a6:b7:db:1c:b3:c1:89:23:
                    49:86:7d:0d:08:b3:22:1f:f5:5a:27:6f:b1:1e:be:
                    f3:32:f7:61:3e:7b:c4:cd:35:24:3d:b4:3d:13:d6:
                    6a:01:55:87:e7:85:24:30:e1:b9:4b:68:09:0d:86:
                    f6:df:67:64:67:26:92:a7:f9:2f:39:ce:d6:ed:58:
                    d7:64:3c:b7:2a:6d:be:91:50:cb:70:e3:79:75:e3:
                    59:f6:42:c1:25:a1:de:15:6a:53:69:af:51:c8:9a:
                    f4:78:97:59:7d:63:55:97:f7:a5:9d:29:45:ff:ac:
                    9e:fa:70:92:01:98:69:be:6b:c1:7b:b1:49:29:44:
                    a1:e6:27:fd:c2:77:64:f7:8c:06:78:93:b8:30:4d:
                    93:c9:d5:de:f3:d6:ee:7a:f1:b5:cf:32:ac:84:9a:
                    92:f7:f6:56:ec:b0:88:d9:9c:39:d2:ee:34:4f:a2:
                    2e:8a:fb:0f:66:27:71:55:89:d1:07:fa:c5:06:09:
                    93:23:39:67:35:31:86:76:7b:35:2d:ef:46:79:13:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EF:DD:E7:21:D8:73:F0:E5:64:50:09:AB:1E:D4:AF:A2:AD:DA:B8
            X509v3 Authority Key Identifier:
                keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/F50A884C5DDF11F197B40288B8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.66.0/23
                IPv6:
                  2407:9c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:1b:c0:0d:15:f1:eb:62:50:e7:fc:6b:cb:29:90:ab:3f:
         a1:aa:09:49:5f:98:b5:f1:6f:d6:f3:57:ec:75:51:16:5d:26:
         55:14:d7:9e:ad:0e:e7:97:14:10:87:00:17:5a:75:c3:57:d0:
         4e:ef:88:d9:13:cb:5d:18:02:0e:51:16:37:33:7d:81:c6:e5:
         b0:0b:a9:05:57:8d:ae:45:58:f2:d0:ef:90:6e:e8:90:9a:eb:
         d9:6e:b8:65:30:08:3d:7c:2b:9c:9b:c1:37:49:46:59:a9:59:
         3f:9e:5d:a4:3f:f1:31:ba:ea:fa:34:03:2f:f3:1c:ee:9e:e9:
         fe:53:f9:83:2a:93:26:48:9f:0a:8b:aa:c1:be:3a:ef:a2:66:
         cd:cc:3d:1d:51:9d:3f:cf:2e:6b:1d:c3:41:d3:5d:a2:41:82:
         2f:2c:fb:72:f2:54:7c:19:de:a9:81:73:85:26:66:c2:b2:fd:
         39:83:49:39:bb:0c:6a:6b:54:63:f4:41:d0:19:98:02:98:ce:
         0b:25:de:a0:ac:a5:5d:08:52:e9:c9:d0:13:5c:68:b6:25:90:
         df:94:29:1c:bd:29:9b:d1:a4:4b:f3:05:dd:7d:11:0a:a5:02:
         4d:11:06:43:8d:5e:4f:d1:4c:5f:c8:a2:dc:dd:10:67:58:be:
         8e:ef:6a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:14:45 2026 by rpki-client