Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/50D705A87FA911EBA8C11D63C4F9AE02.roa
File:                     50D705A87FA911EBA8C11D63C4F9AE02.roa (raw, json)
Hash identifier:          94GzLbfU9wvrOoMqnHUdOKE75uiqX+97F7gLUxAyt+c=
Subject key identifier:   A5:74:9E:5A:80:F9:1D:3F:55:F4:6E:46:74:0A:A2:2B:C3:7C:E2:A1
Certificate issuer:       /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial:       0765
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/50D705A87FA911EBA8C11D63C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 22:28:29 +0000
ROA not before:           Thu 30 Apr 2026 22:28:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56183
IP address blocks:        103.7.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
        Validity
            Not Before: Apr 30 22:28:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3d78d-7906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:b2:8b:76:ed:e1:c2:b9:2b:9c:c9:40:9f:
                    b2:92:7f:fb:7f:d6:05:4e:1e:c6:1b:44:33:bc:5c:
                    24:43:bc:0d:60:29:e2:63:57:37:db:77:0c:03:ba:
                    48:5e:8a:6e:e7:66:24:93:ca:d1:ce:1c:5f:cb:5e:
                    10:d7:87:b4:fb:94:69:e1:86:59:ca:3c:38:39:70:
                    94:de:d9:1c:a6:64:92:a7:8e:2c:39:30:bb:53:bf:
                    3d:23:18:37:57:08:b2:7f:6e:7b:7c:a8:8f:e8:4c:
                    01:b7:03:06:e8:b6:ca:9d:76:27:ab:19:ac:9d:26:
                    20:78:9f:c4:23:17:48:d5:fd:7c:cc:90:41:a2:13:
                    ee:80:93:01:50:7a:0b:46:4b:1c:0e:69:9f:76:a5:
                    66:28:30:c9:25:57:b9:90:64:62:b9:f8:a0:ec:b3:
                    1b:4e:4a:0e:8e:45:6c:ca:8f:bd:a9:1e:2d:d9:6d:
                    e1:fb:91:18:88:42:98:fb:9b:08:b7:04:ee:75:b1:
                    eb:6f:72:5b:d2:25:7a:79:11:74:23:06:a5:6f:2c:
                    e0:a7:48:68:15:83:43:45:cf:13:4c:89:b0:07:8e:
                    a2:9d:96:fc:f7:d0:24:09:3b:d1:40:34:c0:f8:94:
                    b8:98:6b:f1:22:d3:c1:65:78:ae:33:59:7f:48:30:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:74:9E:5A:80:F9:1D:3F:55:F4:6E:46:74:0A:A2:2B:C3:7C:E2:A1
            X509v3 Authority Key Identifier:
                keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/50D705A87FA911EBA8C11D63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:34:e7:01:a8:12:86:1a:57:3e:29:99:93:a5:90:82:57:
         6c:7b:c2:18:79:2a:4f:61:e4:e2:2e:6f:2c:0e:79:6e:56:d4:
         e0:70:ed:74:5c:11:e4:09:bb:4d:d7:32:2b:cc:93:6a:e7:00:
         9f:ff:db:cb:51:6d:1d:63:3b:62:65:ea:90:d8:89:32:b2:d5:
         b9:13:43:77:bb:ab:21:ec:e4:e6:56:6a:1b:00:3a:5d:0d:e7:
         d6:b2:71:5b:55:51:70:26:c4:cc:35:82:37:24:a6:1a:d4:ee:
         d8:66:08:bf:1e:38:ee:23:8e:bb:8f:2f:0b:28:c7:f4:1b:b2:
         c0:37:37:3b:ea:5d:ca:0b:12:d6:5e:33:86:5c:42:bb:0b:45:
         1a:5f:9f:ea:26:f6:e8:71:e4:27:b4:68:af:9c:7a:f6:da:59:
         49:fc:35:b0:a1:2b:ea:9d:ff:45:76:70:ab:ff:ea:78:42:5e:
         40:a4:2c:e9:9f:79:be:6e:7c:c2:5f:79:17:fe:26:70:6a:fc:
         18:61:6c:77:25:19:d4:63:cb:a0:37:22:e2:1e:e2:e5:30:b0:
         55:f5:5c:2a:d0:9d:83:80:2b:63:e9:39:15:f8:c0:1e:4b:43:
         46:1f:74:9d:1d:9c:fc:a4:1f:a6:8d:a9:c5:9b:5b:24:f7:90:
         c1:6d:b7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:52 2026 by rpki-client