Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/55B50AD44A7911F1B14C958BA6833773.roa
File:                     55B50AD44A7911F1B14C958BA6833773.roa (raw, json)
Hash identifier:          YVOTLa1N/mkhBq+m7wSSuhRQT5BjlMv5vOjViN0kd+U=
Subject key identifier:   B2:DF:6E:A5:11:F4:81:13:2D:C5:F0:E3:DA:6D:1B:CB:B1:48:22:4C
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       073F
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/55B50AD44A7911F1B14C958BA6833773.roa
Signing time:             Fri 08 May 2026 01:00:42 +0000
ROA not before:           Fri 08 May 2026 01:00:42 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        103.99.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 22:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: May  8 01:00:42 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69fd35b9-ed7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:ba:93:08:43:aa:e3:56:8a:4a:14:4a:d5:
                    fe:02:51:d0:2e:11:73:be:03:bd:71:b3:9c:07:81:
                    c2:7a:1b:4c:22:fd:e4:23:8c:99:b3:25:7c:4a:b2:
                    dd:dd:e7:46:f6:76:83:6c:c4:33:57:04:99:ae:6c:
                    31:c7:9d:98:40:d6:0a:1e:4c:d7:98:63:96:b3:0a:
                    57:20:87:bd:77:67:c3:53:60:d7:81:32:cd:0f:ac:
                    02:ed:be:f9:2c:b5:d9:c4:2b:c4:2d:53:70:81:11:
                    a0:aa:34:9e:19:95:af:e2:75:40:f5:e5:72:7e:f4:
                    da:15:e6:bd:1b:2a:d5:09:ae:4a:6a:7b:64:86:54:
                    48:48:23:c1:a0:bf:06:5d:3f:a5:3a:16:23:08:48:
                    e2:3d:e9:36:44:ae:7e:c3:80:d1:0f:b1:c1:1a:55:
                    d7:0e:e5:35:f3:1c:58:09:6d:96:f0:c0:fa:20:c2:
                    ad:a7:c7:62:60:6a:87:c2:9b:ca:6a:3b:ad:20:86:
                    e8:49:00:85:f9:34:a6:62:c6:fc:a8:bb:cc:9c:64:
                    6e:11:1f:12:a6:2f:d2:50:0c:4b:5b:6a:9e:ee:a6:
                    d3:bb:ec:3f:37:6b:ff:81:dc:b4:82:51:b8:2f:45:
                    cb:e7:81:e4:a1:76:41:27:fb:ef:88:2b:ce:34:d7:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DF:6E:A5:11:F4:81:13:2D:C5:F0:E3:DA:6D:1B:CB:B1:48:22:4C
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/55B50AD44A7911F1B14C958BA6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:22:e2:85:1f:78:a7:dd:d0:31:c5:64:da:a3:38:4a:8c:0d:
         54:e7:7a:0b:db:b3:81:22:cc:75:52:67:46:b1:c2:56:d3:24:
         63:d2:8c:19:91:11:4d:69:12:28:32:cc:8d:48:94:8f:ad:05:
         b6:c7:e4:70:61:19:19:4f:76:31:67:f2:79:71:d1:74:cc:7a:
         74:99:79:d5:e8:ca:a3:ab:30:d8:ef:1f:1e:c9:be:fe:fb:4f:
         c6:2e:66:cb:1f:11:0a:4e:6b:4a:99:14:42:63:66:29:24:5f:
         16:68:30:80:41:71:0c:ac:75:2d:4f:c1:03:0b:f8:d2:fb:32:
         43:13:a9:8a:9d:45:65:c0:09:78:35:66:b3:eb:fd:7e:39:ea:
         f4:c8:f7:43:bb:99:48:70:d0:79:40:e6:be:96:e5:27:3a:cd:
         5c:4e:8a:33:d6:3f:6a:c5:95:e1:a1:88:0f:e0:fb:52:7d:5e:
         92:34:dd:31:1f:6c:e3:b2:ff:76:00:26:66:0b:85:e3:45:06:
         99:12:fc:29:2f:8b:2d:f2:d3:e7:1c:3a:c1:95:b7:fa:3f:4e:
         35:27:62:41:4b:9f:60:e4:6c:75:fd:83:b1:c1:fd:46:c3:04:
         3a:47:a8:b2:94:2f:a9:e5:34:1a:6f:07:93:dc:01:79:a9:cd:
         35:e4:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:19 2026 by rpki-client