Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/05163DEADD8711EC9BF56E5BC4F9AE02.roa
File:                     05163DEADD8711EC9BF56E5BC4F9AE02.roa (raw, json)
Hash identifier:          63cio2MUFm7vWLjvaTxI8FgoeyjASbbb5Aorm9U3n2I=
Subject key identifier:   98:39:BD:90:F9:B5:BF:D8:C0:FB:78:29:6E:46:3B:9E:F3:72:58:6B
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0520
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/05163DEADD8711EC9BF56E5BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:46:58 +0000
ROA not before:           Wed 27 Aug 2025 01:05:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142299
IP address blocks:        147.50.229.0/24 maxlen: 24
                          147.50.233.0/24 maxlen: 24
                          147.50.235.0/24 maxlen: 24
                          147.50.238.0/24 maxlen: 24
                          147.50.240.0/24 maxlen: 24
                          147.50.242.0/24 maxlen: 24
                          147.50.243.0/24 maxlen: 24
                          147.50.244.0/24 maxlen: 24
                          147.50.252.0/23 maxlen: 23
                          147.50.252.0/24 maxlen: 24
                          147.50.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a586c2-d258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:94:ba:e9:03:be:f6:db:0b:57:d9:51:cd:
                    1c:76:66:2f:74:0b:e8:35:f1:5e:35:7f:da:db:74:
                    e0:35:eb:ec:46:80:78:b0:3a:ad:87:47:11:6e:49:
                    88:24:1c:de:ab:e2:5e:91:24:d7:ac:a7:60:92:40:
                    bd:b1:b2:11:ab:7f:0c:11:96:05:1d:09:a1:92:29:
                    47:5d:c0:09:51:a8:ee:f5:9f:b7:69:4f:18:c7:db:
                    29:5d:0e:46:2f:f4:de:f7:5e:b0:9e:33:0b:c0:cc:
                    e3:5c:8c:49:5f:e7:57:22:30:c4:6c:0e:da:94:3c:
                    7a:74:da:72:b8:bb:a3:4e:32:fe:08:2b:06:bf:9a:
                    a0:2e:82:4d:36:cf:de:43:f3:81:9f:cd:6e:3a:aa:
                    7a:02:0e:c9:cd:e8:ea:98:70:02:0d:ac:ba:66:52:
                    f3:b8:6c:5a:82:f4:67:d5:61:d6:22:ce:ae:16:c2:
                    72:61:40:9b:fa:9f:fa:7e:31:6e:0a:f4:dd:16:24:
                    aa:40:89:79:ed:67:52:b7:ea:6d:b9:8a:16:41:59:
                    e7:85:8a:9a:6f:ac:7f:af:9e:99:c3:e6:6f:44:08:
                    5e:d7:41:5c:5b:78:c2:96:0a:23:35:0d:48:36:d6:
                    a1:de:98:97:d6:70:2a:4a:d3:aa:fd:1d:48:f1:f3:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:BD:90:F9:B5:BF:D8:C0:FB:78:29:6E:46:3B:9E:F3:72:58:6B
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/05163DEADD8711EC9BF56E5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.229.0/24
                  147.50.233.0/24
                  147.50.235.0/24
                  147.50.238.0/24
                  147.50.240.0/24
                  147.50.242.0-147.50.244.255
                  147.50.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:10:2d:c0:59:58:bc:94:bb:96:9f:11:7e:cd:42:46:49:
         b7:20:52:4b:ab:c5:92:1c:43:32:f6:bb:7d:28:07:cf:7a:27:
         04:e8:8d:ac:d8:94:69:11:27:69:3c:4c:45:99:f6:f4:c6:ee:
         93:fe:36:3b:16:bf:f5:92:b4:86:8f:95:17:f4:6d:58:71:19:
         78:96:7d:72:79:69:09:09:aa:3f:42:e6:9f:b8:f2:a6:e9:47:
         d1:5c:d0:68:60:27:58:e8:08:6d:b2:a6:d6:d9:a4:41:e6:dc:
         a6:99:91:88:3d:65:db:f7:f8:7e:73:c8:48:c5:38:bd:1c:9d:
         b5:95:0b:53:b0:15:93:58:c1:a7:85:20:f5:7d:85:65:09:bd:
         aa:b8:eb:4a:44:d5:74:ed:7c:43:7a:12:92:dc:38:7c:8a:dc:
         a0:1d:00:42:66:7b:cd:6c:fa:73:48:22:9f:6a:f3:ed:90:57:
         db:c9:7c:42:36:5e:50:2f:88:c3:ab:b0:25:17:36:da:be:b6:
         5e:b7:f0:f4:77:e5:c0:67:85:07:10:62:ab:80:fd:9e:83:68:
         79:10:ba:b4:b4:52:07:cc:dc:86:d7:3f:6c:e6:40:cc:ef:5a:
         f2:88:12:90:48:c1:dd:4e:db:3e:2f:da:51:1e:bb:15:98:91:
         e3:95:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:47:49 2026 by rpki-client