Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1DFB74B4693511F098DA961FC4F9AE02.roa
File:                     1DFB74B4693511F098DA961FC4F9AE02.roa (raw, json)
Hash identifier:          l3UimkGBI5YHxZ8+gWiLFTB+1VyeVZn9Y+NS5KLmKi0=
Subject key identifier:   99:CC:6D:1C:2C:F9:B2:4D:4D:53:9D:C9:E0:8B:8B:CD:DA:B2:D3:CD
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       05A9
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1DFB74B4693511F098DA961FC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:49:01 +0000
ROA not before:           Thu 03 Sep 2026 00:49:01 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154088
IP address blocks:        147.50.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Sep  3 00:49:01 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c3fd-949f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:c6:18:e1:5f:de:cd:ab:c2:38:74:07:44:
                    c6:f5:17:ff:de:80:d8:45:94:1f:2e:b9:c6:5e:54:
                    00:09:a1:83:29:e4:c2:ae:a0:34:6f:6d:7d:7a:56:
                    29:9d:58:ac:f0:e1:f0:76:e2:82:e9:85:cb:bf:8e:
                    d7:26:68:d9:6e:3c:c6:56:e8:90:f5:ee:dc:6e:6f:
                    9f:c4:3f:83:ad:42:b2:ed:22:a2:9e:42:4a:2e:b9:
                    d7:f9:4a:47:35:42:7c:c9:e5:7d:99:4c:b2:74:b8:
                    c3:84:7a:5b:16:3b:d3:a1:a4:8b:01:64:16:74:71:
                    8e:7d:d3:64:0d:68:44:0e:79:59:49:c0:1d:47:96:
                    6f:33:bb:ee:1a:b7:23:14:c1:45:f2:45:60:57:5f:
                    b4:55:1c:c3:8e:a3:e2:f5:2c:58:bf:24:23:74:e2:
                    ba:ce:53:ca:a0:10:14:b4:01:6d:f8:a9:ce:1f:31:
                    1c:1f:d2:f4:50:a6:14:a1:90:36:5f:f0:33:ca:e5:
                    d3:85:d0:f9:a9:15:8a:9a:76:d0:61:a5:7a:79:ce:
                    6b:18:4a:44:3b:d9:d5:80:60:75:1b:e9:59:79:9b:
                    3c:37:cd:0b:fe:5e:2a:d0:15:35:83:1f:7b:11:6e:
                    bc:9c:9f:a9:c9:61:a0:92:31:18:92:db:a3:ac:db:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CC:6D:1C:2C:F9:B2:4D:4D:53:9D:C9:E0:8B:8B:CD:DA:B2:D3:CD
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1DFB74B4693511F098DA961FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:81:a2:7a:78:0b:0f:c1:74:83:1d:86:07:b2:3e:1b:bd:75:
         b1:40:4b:96:52:6e:90:33:23:db:79:56:f9:95:0e:be:92:9d:
         41:7e:f4:b3:03:2f:6e:4b:05:c2:52:6a:e8:db:cb:d9:d4:36:
         4a:b3:37:7e:6c:41:d4:b2:b4:3b:6f:b1:ca:84:43:a1:50:0b:
         e7:a9:7e:20:cb:70:ef:f6:8f:3e:05:21:42:62:f8:20:81:b4:
         28:a9:52:a8:8c:8f:ee:04:84:fb:c8:d5:e1:66:22:d4:d7:ef:
         bd:8a:8c:b1:67:5b:12:ca:a9:f9:8c:17:bb:83:98:c6:f4:80:
         cd:9e:29:11:2b:ea:c2:0f:a9:2a:ab:1a:7e:da:d2:c1:5b:da:
         87:eb:d2:d9:74:ff:b1:30:18:2d:2a:b4:1e:84:41:b9:7d:d0:
         6c:d5:d6:81:14:36:70:27:aa:1a:86:67:20:d7:b6:89:be:64:
         f0:0b:46:7d:60:1f:08:09:5b:8e:7f:c0:b3:d7:8e:35:65:2b:
         35:2a:0f:8d:21:e6:8b:5c:68:89:d8:cf:7c:f9:0c:6b:ba:a4:
         e0:0b:86:7d:2c:b0:98:48:66:5a:51:5c:dc:5d:c0:b1:b1:a3:
         10:71:27:f7:00:23:00:49:17:56:48:4a:92:55:03:bf:39:68:
         e5:68:8b:37
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjYwOTAzMDA0OTAxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4YzNmZC05NDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAorvGGOFf3s2rwjh0B0TG9Rf/3oDYRZQfLrnGXlQACaGDKeTCrqA0b219elYp
nVis8OHwduKC6YXLv47XJmjZbjzGVuiQ9e7cbm+fxD+DrUKy7SKinkJKLrnX+UpH
NUJ8yeV9mUyydLjDhHpbFjvToaSLAWQWdHGOfdNkDWhEDnlZScAdR5ZvM7vuGrcj
FMFF8kVgV1+0VRzDjqPi9SxYvyQjdOK6zlPKoBAUtAFt+KnOHzEcH9L0UKYUoZA2
X/AzyuXThdD5qRWKmnbQYaV6ec5rGEpEO9nVgGB1G+lZeZs8N80L/l4q0BU1gx97
EW68nJ+pyWGgkjEYktujrNtdDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJnMbRws
+bJNTVOdyeCLi83astPNMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMURGQjc0QjQ2
OTM1MTFGMDk4REE5NjFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAkzIoMA0GCSqGSIb3DQEBCwUAA4IBAQBZgaJ6eAsPwXSDHYYHsj4b
vXWxQEuWUm6QMyPbeVb5lQ6+kp1BfvSzAy9uSwXCUmro28vZ1DZKszd+bEHUsrQ7
b7HKhEOhUAvnqX4gy3Dv9o8+BSFCYvgggbQoqVKojI/uBIT7yNXhZiLU1++9ioyx
Z1sSyqn5jBe7g5jG9IDNnikRK+rCD6kqqxp+2tLBW9qH69LZdP+xMBgtKrQehEG5
fdBs1daBFDZwJ6oahmcg17aJvmTwC0Z9YB8ICVuOf8Cz1441ZSs1Kg+NIeaLXGiJ
2M98+QxruqTgC4Z9LLCYSGZaUVzcXcCxsaMQcSf3ACMASRdWSEqSVQO/OWjlaIs3
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:39:56 2026 by rpki-client