Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/50B13360267F11F0A061882DC4F9AE02.roa
File:                     50B13360267F11F0A061882DC4F9AE02.roa (raw, json)
Hash identifier:          ocsmVrt5nvpzz22tRSdsmLVDYOKhOvYaHpAZa+H/hsA=
Subject key identifier:   2A:99:F5:63:2C:BE:65:C4:73:A6:28:7B:DA:C8:12:39:85:73:8B:10
Certificate issuer:       /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial:       F2
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/50B13360267F11F0A061882DC4F9AE02.roa
Signing time:             Fri 13 Feb 2026 05:24:54 +0000
ROA not before:           Fri 13 Feb 2026 05:24:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152181
IP address blocks:        36.50.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
                          rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
        Validity
            Not Before: Feb 13 05:24:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698eb5a5-bdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:55:a7:12:0e:32:e5:06:02:d2:c2:d8:ba:
                    62:92:22:f1:e3:a2:49:c1:fa:89:9f:dd:df:cf:9c:
                    64:a0:7c:1d:83:a5:b6:12:82:d6:a4:56:1b:c3:fd:
                    cf:6c:d1:b6:92:a4:ed:ad:ff:af:e8:e9:05:d9:c0:
                    ba:14:3e:da:5b:15:09:e8:3f:5a:50:82:8d:09:11:
                    5b:fe:44:d1:2e:56:63:d9:b4:63:7c:34:77:69:37:
                    06:1b:d7:b4:5e:71:95:00:0b:7a:00:72:c1:1b:f2:
                    7d:8d:90:b8:c3:ce:b7:8e:40:41:e1:c4:44:cf:39:
                    ff:6e:38:2b:4c:19:52:cf:f8:08:bd:42:a6:26:b3:
                    da:b1:24:dd:2b:1d:32:b4:da:20:15:bf:a1:88:ed:
                    9a:1e:4e:e7:57:0e:e2:11:60:73:c8:e5:f7:f7:da:
                    41:49:3d:9a:72:d8:6a:a6:06:b8:33:fd:7d:80:e3:
                    2b:d1:7a:b0:df:1e:1a:c1:3a:ff:a1:47:23:63:54:
                    02:68:64:00:cb:8d:30:30:46:f4:3e:9a:d1:37:9c:
                    6e:c1:a9:f6:40:42:d7:b3:26:99:4e:f4:d1:a3:4e:
                    fb:c3:2e:0b:08:ec:2b:c7:47:5e:0c:d3:ab:06:a5:
                    7b:40:cc:b6:72:5a:45:67:33:f2:1c:fa:07:79:9a:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:F5:63:2C:BE:65:C4:73:A6:28:7B:DA:C8:12:39:85:73:8B:10
            X509v3 Authority Key Identifier:
                keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/50B13360267F11F0A061882DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:6c:82:36:40:f0:b7:94:db:c5:42:5c:c5:e2:51:4b:48:c2:
         16:d8:7e:d0:9a:2a:a5:80:eb:e9:b4:e9:ca:18:ec:a0:4f:b6:
         e8:a4:55:66:f4:08:3b:ad:5e:f4:c1:a2:98:7e:e3:94:f4:de:
         c1:65:28:5c:2f:6d:d9:46:96:76:66:32:67:d3:33:ce:a3:43:
         e9:cf:b5:cf:b6:d1:4f:09:26:3e:82:d6:f0:4c:0f:bd:f3:9c:
         28:d2:55:75:3a:90:8d:96:98:22:e7:e7:f4:8d:82:c6:71:c4:
         c6:c1:15:8d:a5:b4:9c:ae:14:4d:99:5f:1b:ec:09:1c:46:42:
         1f:11:9d:83:bf:fb:59:94:fe:9e:fc:9e:b7:fa:7b:70:db:c7:
         41:c8:e1:63:3e:9b:18:e1:60:fd:74:ec:7e:06:df:d7:c1:b3:
         cd:49:69:28:85:22:ab:e7:3c:42:e0:b9:99:c2:6e:c7:78:36:
         6e:f7:c4:de:b2:33:04:4b:3b:36:76:b6:b9:b8:72:61:ac:25:
         a9:e6:03:6d:e2:d4:76:b6:9c:eb:d1:77:dd:89:6f:ae:b6:30:
         a3:8d:68:a2:ed:91:76:7a:b3:57:bd:ca:06:9b:b1:e1:e6:2f:
         59:4d:b7:75:2e:21:72:11:b6:ac:a9:65:4b:c2:e0:75:3a:91:
         f2:c2:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:28:41 2026 by rpki-client