Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
File:                     37241BF4757911EFB0F87073C4F9AE02.roa (raw, json)
Hash identifier:          oXuCgd284p2fwDuc7fv7+Ly3x2Cr+yyDDkTfSE0guWM=
Subject key identifier:   D6:D6:0C:7C:0C:B4:08:78:18:81:13:40:DD:E8:EB:8F:7D:B9:A9:EB
Certificate issuer:       /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial:       014E
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
Signing time:             Thu 05 Feb 2026 14:24:14 +0000
ROA not before:           Thu 05 Feb 2026 14:24:14 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132200
IP address blocks:        49.50.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
        Validity
            Not Before: Feb  5 14:24:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6984a80e-8cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:98:99:b6:5a:b3:4f:f8:f1:29:08:ab:a8:
                    86:12:c5:14:1b:0d:b9:40:2a:46:b1:be:42:2e:dd:
                    23:7e:29:2e:73:f8:5a:13:fc:75:be:19:57:1b:93:
                    72:21:2e:0c:74:34:0b:fc:e6:c3:78:4f:d0:0a:64:
                    f9:44:d1:23:5a:32:5e:28:2f:c9:3b:44:f6:46:1d:
                    86:f0:64:5c:a2:1b:b5:24:40:e1:c3:0f:39:49:bf:
                    ec:5f:8c:37:10:2b:53:45:97:3f:74:b4:a1:da:d6:
                    c5:33:50:4f:a7:d4:16:1f:c3:dd:3e:d9:86:82:d8:
                    54:d0:96:eb:bb:38:f0:1f:05:f4:43:f4:c4:72:0e:
                    a1:d9:75:74:45:70:bd:00:9a:81:2f:20:5c:35:e3:
                    76:82:d2:8c:33:81:76:ec:9b:60:66:56:12:e2:aa:
                    ac:6a:86:35:07:ac:5e:ad:77:b2:58:56:45:b3:75:
                    4b:95:dc:cc:18:1b:37:30:1e:54:0d:9d:21:a4:21:
                    b8:56:33:ef:af:de:3b:ac:6b:7f:1d:5a:bc:7f:9e:
                    5f:36:71:be:1f:8b:7f:c9:76:d2:25:1c:95:09:32:
                    65:f9:e4:65:f1:01:f9:22:be:3a:03:30:bf:94:84:
                    52:f1:d8:ca:75:72:ea:89:fb:f5:c1:61:b0:ba:d0:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D6:0C:7C:0C:B4:08:78:18:81:13:40:DD:E8:EB:8F:7D:B9:A9:EB
            X509v3 Authority Key Identifier:
                keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.50.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:cc:ff:ca:75:60:a4:99:c1:64:f3:aa:82:ad:ec:ab:30:
         08:32:62:df:ef:5e:3c:4d:b7:6b:18:89:e2:71:03:56:f0:7a:
         60:87:59:a0:a3:e5:c1:2c:7c:e8:42:a3:fd:a5:14:aa:96:47:
         28:29:39:f5:2a:cf:35:2e:d5:bd:53:45:0f:a7:90:a8:9b:35:
         1b:f1:a2:6a:93:07:0f:46:42:15:9b:4f:86:4e:b4:c8:b4:a7:
         2b:e1:75:f2:04:bb:6c:3e:68:77:30:14:e0:a2:2d:68:9f:51:
         28:60:a9:c0:36:de:e3:88:ff:d1:63:d9:59:87:a4:31:08:38:
         7e:da:4f:00:6d:49:f5:2a:36:06:50:c6:fd:fd:9c:c0:9d:4c:
         12:21:6f:d0:32:76:a2:7b:75:46:89:75:3e:b9:0a:ec:86:da:
         cd:32:26:36:3c:26:4e:9d:05:cb:e7:70:64:d1:1b:80:71:ba:
         74:67:68:34:42:0e:2a:57:ad:32:b0:d0:95:39:08:5c:7b:32:
         45:02:f0:79:ef:91:1a:ab:90:72:32:b3:f8:73:4a:6b:3c:5b:
         02:5f:fc:c6:6d:f7:58:ee:7f:a9:16:37:4c:5f:01:12:dc:d8:
         85:19:12:e5:b9:f4:a9:30:16:49:0c:37:f7:43:b5:c7:2f:33:
         cf:bc:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:36:24 2026 by rpki-client