Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa
File:                     C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (raw, json)
Hash identifier:          P0IxtyxoZ+ByuxHLmgujAknhA1FCwYut3K8P07BZLQY=
Subject key identifier:   A3:AC:80:E2:1F:44:69:46:A8:C9:48:0E:B2:45:9B:E8:DC:28:E3:63
Certificate issuer:       /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial:       0510
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa
Signing time:             Wed 17 Jun 2026 00:28:44 +0000
ROA not before:           Wed 17 Jun 2026 00:28:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     131316
IP address blocks:        103.50.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
                          rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
        Validity
            Not Before: Jun 17 00:28:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a31ea3b-0499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:c8:59:42:c9:b7:ac:00:3e:ff:63:0f:f4:
                    37:a4:17:42:16:80:17:48:2d:08:fb:7c:93:0a:45:
                    de:61:dc:14:7a:c2:a1:6a:3b:0d:f6:3e:84:77:38:
                    ed:14:50:1f:26:d4:a1:b7:9c:81:39:70:28:90:9f:
                    1e:c7:81:7c:2f:b4:25:cf:0f:7c:11:d7:86:2a:ee:
                    34:cc:be:10:2e:fd:62:64:0f:d7:7e:10:11:c7:82:
                    87:c7:6c:6d:13:06:95:e4:ff:3a:27:99:58:d8:ba:
                    7b:19:67:b4:a2:ef:f6:94:af:c8:2a:0f:59:2c:3e:
                    c6:6d:66:bc:3b:eb:7d:97:94:9d:7c:ab:5d:8e:74:
                    0f:8a:e7:d2:31:54:a7:ff:f3:4b:b6:be:67:b9:43:
                    57:5b:3c:30:9a:75:96:e8:30:71:53:64:82:74:5d:
                    c6:63:45:99:7b:cb:1d:8c:ed:06:29:b2:26:fd:bf:
                    94:cb:c2:14:77:8a:b7:2b:89:c3:23:d0:c3:8b:4b:
                    ca:11:2e:c2:9c:ce:e7:08:7b:e6:1c:2f:d8:23:1b:
                    fc:a8:d1:4f:ca:7b:07:ce:3d:f8:7a:db:b4:16:b1:
                    f7:16:f7:24:1c:26:15:1c:19:10:23:55:e3:5f:1c:
                    73:3e:31:0c:ba:0c:a4:99:e4:d2:3e:7e:df:e2:97:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AC:80:E2:1F:44:69:46:A8:C9:48:0E:B2:45:9B:E8:DC:28:E3:63
            X509v3 Authority Key Identifier:
                keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/C7EAFB5AB62011EC9060CD0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:de:a0:f5:a9:34:2b:fd:36:fe:64:a4:56:b1:77:f3:54:97:
         a8:c5:46:38:1d:8f:75:8e:4d:2f:8e:4a:70:51:31:be:27:07:
         c8:3d:63:c1:bf:18:ba:61:8d:07:d7:db:a7:84:8e:9d:98:2a:
         65:66:7e:0e:1d:a1:9a:64:f2:39:cb:8d:fc:f2:7e:2b:9a:ba:
         2e:76:cd:09:50:94:c4:ed:70:49:9c:4c:49:c3:74:2f:41:dd:
         c0:2e:73:38:7f:6d:f6:75:97:bc:58:3a:30:2b:bc:ff:19:25:
         2a:72:25:73:07:7a:17:e5:e3:c7:71:7a:7c:fb:48:25:16:33:
         19:e1:17:88:5c:5c:fc:72:9a:ed:35:f7:14:b6:c6:9e:be:b5:
         62:22:62:6a:e0:64:f0:ab:f0:3f:bd:9b:04:3a:41:10:80:59:
         d2:ba:6c:32:db:58:fe:6d:86:8d:82:e4:bf:3a:b0:89:d5:7c:
         25:8d:f7:14:7a:bc:02:ab:bc:be:a1:29:b3:7d:1d:90:3f:d3:
         0f:52:0d:84:a2:53:50:47:a8:83:cb:60:00:89:db:c2:f7:06:
         ff:e9:14:a1:73:ec:d9:00:b1:fe:22:9a:9b:85:e0:aa:94:3f:
         76:fd:65:08:57:c9:21:e0:b1:7b:bc:6c:fe:73:bc:2a:06:e7:
         88:cc:1e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:28 2026 by rpki-client