Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/BFF1B8A04E6311F1BB35B40EA8833773.roa
File:                     BFF1B8A04E6311F1BB35B40EA8833773.roa (raw, json)
Hash identifier:          o+hcbHfTfjKw25Ns/WHpn8y34UunupoxcmW2ooCHKwI=
Subject key identifier:   E4:27:09:A8:B6:E1:F8:3D:0D:95:BE:32:F0:AD:48:C0:E7:30:5C:F2
Certificate issuer:       /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Certificate serial:       0755
Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/BFF1B8A04E6311F1BB35B40EA8833773.roa
Signing time:             Wed 13 May 2026 00:36:15 +0000
ROA not before:           Wed 13 May 2026 00:36:15 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     136991
IP address blocks:        103.162.244.0/23 maxlen: 23
                          103.162.244.0/24 maxlen: 24
                          2407:1fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl
                          rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
        Validity
            Not Before: May 13 00:36:15 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a03c77f-465a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:6f:6e:ac:2d:22:9d:7e:86:29:c3:e5:68:
                    7c:30:93:0a:85:94:27:57:2c:6e:2e:e2:df:57:71:
                    0f:47:62:2a:8a:a5:e9:27:5b:77:7a:6a:fa:87:b9:
                    db:a1:02:54:88:57:20:ed:cc:8a:49:d8:0c:8a:4e:
                    d0:87:0c:11:63:07:bd:ef:9b:51:f7:c5:c9:2d:ca:
                    56:dc:92:9a:7d:88:0e:b2:04:8d:ee:33:a0:bd:58:
                    70:02:d8:cb:d6:7e:b9:82:34:69:eb:73:33:0b:dc:
                    72:62:a0:b0:fe:a1:fd:db:3a:b3:17:19:68:f5:6a:
                    15:d7:85:70:79:31:47:a1:a6:d1:ee:71:f9:6a:0a:
                    12:0d:98:96:b8:06:34:16:eb:32:56:9e:ce:b7:04:
                    e0:96:1b:f2:e0:df:bd:43:4e:00:cb:57:35:6c:81:
                    92:5d:f1:a7:c5:8f:b1:d8:50:04:8a:d8:16:ef:ec:
                    6d:92:5e:1f:4d:10:36:73:a7:1b:94:92:4c:9c:2d:
                    6b:d2:17:71:87:58:99:ce:bd:d4:d8:b3:d3:1d:cf:
                    8c:49:37:34:3c:6a:ac:30:7a:90:61:ca:50:82:9e:
                    ca:28:a0:dc:38:f1:80:4e:92:85:55:11:c1:18:52:
                    3b:47:96:1e:b0:5c:12:bc:fd:a1:52:0a:38:5c:9c:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:27:09:A8:B6:E1:F8:3D:0D:95:BE:32:F0:AD:48:C0:E7:30:5C:F2
            X509v3 Authority Key Identifier:
                keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/BFF1B8A04E6311F1BB35B40EA8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.244.0/23
                IPv6:
                  2407:1fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:af:46:c0:63:13:23:7f:26:ca:fe:52:8d:7e:f5:be:5c:
         1c:8a:45:25:07:e6:e0:af:3b:aa:1b:84:30:8f:19:22:ff:b6:
         e2:4e:73:64:f8:81:fd:d4:af:f9:28:9d:a1:95:32:75:86:06:
         f5:32:98:51:57:ef:0d:0a:59:05:aa:b5:1d:67:92:85:97:23:
         2e:91:eb:5b:6b:90:80:ae:e0:00:cf:d7:a2:b3:91:8b:ce:75:
         ed:99:7e:17:51:8d:9e:1c:0a:7b:d1:7f:3f:98:29:37:54:33:
         35:7e:87:4f:b5:81:cb:95:95:22:17:21:54:db:ba:4f:0b:a8:
         45:ee:68:e9:16:63:6a:c6:11:d5:2f:5c:ab:75:37:a6:0a:e1:
         08:2f:31:31:ff:c7:db:eb:1f:60:f8:b2:98:a4:bb:38:c7:cd:
         40:15:c6:c4:5d:f2:fc:c1:5d:cd:f7:36:05:f7:bd:b3:e9:6b:
         5b:d5:df:33:94:82:ae:37:ef:4f:44:73:ed:1c:82:f7:54:18:
         90:69:fb:a5:7b:73:f4:9b:d6:2a:86:95:87:bd:fb:95:81:af:
         4f:42:a8:f9:3f:1f:08:ae:da:c0:33:aa:77:49:38:dd:8e:04:
         e0:9e:e9:3f:fa:38:b2:bc:8c:da:84:8f:ed:75:54:bf:48:32:
         a3:9f:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:03:52 2026 by rpki-client