Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/763CCE46479911F18B6CC3CFA0833773.roa
File:                     763CCE46479911F18B6CC3CFA0833773.roa (raw, json)
Hash identifier:          CpUIQBz1IKsSbYy+uVQj1HUnRipg2nzUJuSgxIK6SAA=
Subject key identifier:   C6:88:69:FF:18:C3:14:C4:3E:B5:3D:14:BF:40:EE:D2:3B:23:56:3A
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       0108
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/763CCE46479911F18B6CC3CFA0833773.roa
Signing time:             Mon 04 May 2026 09:13:07 +0000
ROA not before:           Mon 04 May 2026 09:13:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134586
IP address blocks:        205.177.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: May  4 09:13:06 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69f86322-6a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:b8:8d:9f:b6:d9:e5:a3:c3:6e:ad:ba:cd:
                    b9:1e:10:e9:6d:88:f9:58:10:cc:34:51:da:5b:32:
                    b6:87:f9:c8:f1:67:90:bd:4e:35:e6:b8:bb:d1:cc:
                    94:f1:2a:84:85:84:4b:b8:07:8e:11:75:13:13:ce:
                    1e:7f:e9:84:64:12:c8:9c:4e:ae:34:d9:1e:31:d6:
                    a2:e8:b5:86:f9:3b:07:64:ce:2e:c6:0b:6f:a5:f5:
                    12:b9:cb:e2:dd:a3:96:f9:46:25:55:dc:95:07:3f:
                    ed:ce:78:9e:c4:22:23:84:93:8b:ec:6d:9c:f6:17:
                    c7:dd:a2:10:59:5d:65:95:9c:01:85:45:25:43:97:
                    cf:b5:9c:5b:f4:e3:4e:9d:30:4e:e5:91:cd:86:12:
                    88:5d:6f:89:f9:be:82:3f:b0:cd:58:c8:fb:67:e0:
                    0e:b4:4e:11:6f:7e:56:48:58:90:54:da:ea:cf:a9:
                    eb:b7:b2:5a:cb:2c:b6:35:57:2c:4b:1a:47:c8:f8:
                    10:eb:aa:e5:fa:de:86:ad:08:54:09:56:46:93:ad:
                    13:20:c5:14:18:14:14:d7:8e:b8:7b:ed:35:a3:12:
                    e9:c4:a2:de:a2:89:5a:0d:1c:8b:f9:7c:2f:b1:b9:
                    44:18:5d:a1:0d:92:e4:64:d1:51:96:a5:f7:07:29:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:88:69:FF:18:C3:14:C4:3E:B5:3D:14:BF:40:EE:D2:3B:23:56:3A
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/763CCE46479911F18B6CC3CFA0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:6f:1c:88:dd:46:31:2c:dd:38:a1:a6:23:32:8d:68:0b:
         18:65:19:7f:70:2d:7f:4f:22:4b:1c:73:15:22:de:f0:87:7b:
         a4:80:f4:87:57:69:2f:7f:7a:ac:ce:ab:1e:0a:cd:01:12:8e:
         ed:37:2d:0d:69:67:e8:97:a0:7c:db:80:5c:4f:8c:1f:3d:c2:
         e4:f1:28:16:72:85:aa:63:cf:ba:16:d5:9f:86:89:6a:be:69:
         66:7e:a7:b9:95:1d:71:2d:65:09:cd:23:c1:96:ed:06:77:2d:
         d3:de:42:97:44:05:dc:c3:74:e4:a8:a3:d4:b7:2f:31:51:af:
         33:2b:6d:fb:0f:08:70:7a:9a:bb:6b:98:df:aa:1f:28:2d:7d:
         c4:88:c8:c6:61:a5:b0:40:88:c1:27:c6:22:7d:45:a6:f0:9f:
         94:c8:54:d0:5a:3d:20:80:4f:e2:87:55:04:9d:aa:10:ae:07:
         b5:78:21:d8:69:4d:10:46:3d:51:6c:60:d1:90:5d:f5:f1:df:
         d4:96:6b:c9:4a:29:d7:08:3f:a2:7b:b3:e4:e5:ea:8f:62:69:
         2d:d7:c1:9a:3c:e2:7c:6b:f4:d0:02:e3:dc:b1:47:b5:c9:b7:
         22:2c:48:31:d6:66:ab:b0:a7:58:2a:e6:c9:42:94:77:09:47:
         4b:b5:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:15 2026 by rpki-client