Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/AD46933EB65011F0B751DB86C4F9AE02.roa
File:                     AD46933EB65011F0B751DB86C4F9AE02.roa (raw, json)
Hash identifier:          LK3Fx9ZDOnbQgLdeGCFpJxId6+acwMWw9HvmZv77xfg=
Subject key identifier:   46:03:06:E7:64:C1:D9:0A:4D:0A:F5:E8:79:D5:DC:F9:97:53:C5:8B
Certificate issuer:       /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Certificate serial:       BA
Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/AD46933EB65011F0B751DB86C4F9AE02.roa
Signing time:             Tue 23 Jun 2026 07:37:24 +0000
ROA not before:           Tue 23 Jun 2026 07:37:24 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     150775
IP address blocks:        165.99.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
                          rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
        Validity
            Not Before: Jun 23 07:37:24 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3a37b4-5f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:84:7d:83:79:c1:58:49:f7:0e:b3:b9:c6:
                    1b:d5:5f:82:5e:65:8f:06:57:19:30:d7:7a:72:ad:
                    65:c9:3d:e2:b3:08:bc:64:ed:68:1a:53:fb:68:ba:
                    38:2c:84:99:2d:9d:6b:d2:d9:cd:af:1c:54:70:a4:
                    71:19:a4:8d:f3:7b:34:49:16:69:1a:e2:bb:71:97:
                    01:94:ca:78:30:25:ad:ed:dc:3f:70:77:cb:59:e8:
                    3d:4a:b9:83:27:4e:5a:29:07:0e:6f:07:14:7a:34:
                    08:b3:7e:03:d3:ce:dc:f5:e9:3b:1d:ff:d3:55:8b:
                    ee:00:75:ad:aa:ea:eb:e6:de:de:5c:36:cf:2b:3a:
                    71:44:4b:bd:c7:02:8e:ac:30:69:5a:1f:c3:e4:8e:
                    ff:88:8b:04:8a:3a:9c:79:37:7c:62:0e:c7:e3:09:
                    0f:69:a0:66:d4:39:8f:2c:35:9e:32:bd:87:70:1b:
                    0f:2b:11:31:4d:37:34:a2:89:06:a9:79:62:e5:00:
                    bd:50:d4:a7:af:98:fc:75:df:bf:12:ef:62:9d:75:
                    79:e3:68:89:14:3a:00:18:41:c7:f1:a0:f9:c7:de:
                    81:19:ca:60:63:5b:e5:78:2a:a3:e5:d9:da:84:1b:
                    e0:7a:c7:fb:58:b4:91:f5:00:d5:71:ec:0b:87:0c:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:03:06:E7:64:C1:D9:0A:4D:0A:F5:E8:79:D5:DC:F9:97:53:C5:8B
            X509v3 Authority Key Identifier:
                keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/AD46933EB65011F0B751DB86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:e4:ff:9f:76:18:cd:59:f0:60:0f:0b:57:b7:1b:33:e2:
         ef:59:14:b8:68:28:a4:71:0f:a0:f1:2b:3c:f4:7d:88:bd:b4:
         bd:5c:95:46:91:10:5a:2a:54:56:d7:49:86:02:dc:17:90:9e:
         ca:72:7f:a3:32:97:ef:e8:f7:b9:4b:47:75:64:52:55:eb:74:
         0f:b7:60:9c:7b:11:aa:c7:d5:8c:89:b9:5c:61:46:30:e4:ad:
         02:ee:83:a0:8c:0d:73:9a:01:e8:dc:3c:d8:64:5d:e0:29:d5:
         d2:50:56:59:bb:e2:c9:e5:af:d8:ef:f4:0c:8b:bb:8e:46:1c:
         db:85:65:79:c2:14:83:50:81:8b:e5:ce:b2:71:58:34:ec:05:
         d7:4f:7a:ed:24:60:75:35:b6:38:c7:af:82:59:6d:c2:20:0b:
         3e:0b:c4:f6:d1:d8:95:51:19:2c:3c:1f:32:80:04:55:74:49:
         aa:32:35:81:1d:70:f0:73:85:1a:81:2c:8b:91:52:3b:26:06:
         e6:54:c1:55:3b:cd:06:f0:ed:6e:66:b0:ba:73:6f:4e:11:0d:
         a0:76:db:d7:64:c0:48:56:94:34:7d:cc:06:c2:a6:02:7b:7c:
         eb:67:9e:f0:f8:70:7d:20:78:1d:60:8f:c3:16:38:61:9a:99:
         ad:85:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 14:30:31 2026 by rpki-client