Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9D13F282DF3E11EC83CCFE1EC4F9AE02.roa
File:                     9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          XwJMM4XT9gT0aVtWG316wKn9hxu8On/bNf9gwVip4Eg=
Subject key identifier:   05:34:E3:56:F6:7F:DE:90:A0:F1:05:A6:8F:55:09:97:E3:BB:48:E9
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       059F
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9D13F282DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:48:40 +0000
ROA not before:           Thu 03 Sep 2026 00:48:40 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133791
IP address blocks:        147.50.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 23:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439 (0x59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Sep  3 00:48:40 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c3e8-3f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:f8:e4:10:eb:80:4e:4f:e4:bb:54:6a:4e:
                    d4:2f:48:54:f5:0f:7d:2e:bc:82:60:3a:0b:7d:d9:
                    98:26:f8:ec:2f:64:03:47:7f:1d:eb:b5:9b:6c:84:
                    a9:97:61:97:3d:40:fb:d3:d7:69:dc:93:f8:34:ab:
                    93:7d:b6:7e:d6:65:23:48:cf:e9:0f:07:33:6c:da:
                    f5:f2:93:5e:f7:81:a8:5d:c9:cd:57:eb:7a:63:a9:
                    8c:71:32:e3:39:ea:21:23:eb:ba:5a:4e:34:95:91:
                    26:30:dd:f1:e5:d2:87:8f:e2:58:ef:9e:7a:97:06:
                    8b:f3:79:95:2a:28:9a:28:bc:35:e5:fe:d3:54:82:
                    28:63:98:54:56:f5:98:d9:69:7a:71:76:07:2b:ac:
                    66:78:74:56:a4:f6:f7:95:93:9b:6f:7a:30:e4:cc:
                    db:1c:0a:a7:05:2a:c8:48:c9:c8:35:a6:2f:ca:87:
                    f4:69:49:40:be:eb:e3:74:ca:90:9f:5f:b4:4c:0d:
                    3f:22:ba:52:64:b5:97:1f:2c:d5:14:51:5e:9b:da:
                    48:22:8f:88:15:22:e9:c4:0e:c0:2d:69:c7:02:c5:
                    36:34:28:1a:ce:e2:56:ee:20:73:85:89:2b:a1:79:
                    8a:82:df:13:09:44:26:b1:50:2c:64:9d:d7:aa:a8:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:E3:56:F6:7F:DE:90:A0:F1:05:A6:8F:55:09:97:E3:BB:48:E9
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9D13F282DF3E11EC83CCFE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:5a:ee:c9:d6:74:c4:0c:e8:e6:4b:37:da:84:b9:9e:7c:58:
         bd:ca:5d:8b:d2:ce:7f:1a:fc:e7:08:b6:7a:87:96:d6:d9:52:
         ea:fb:a4:20:77:9e:8a:69:20:dd:36:6f:bf:58:7b:c6:70:db:
         0c:36:52:16:13:6d:ad:cc:0f:34:94:cc:70:cd:a3:93:91:bb:
         68:c4:f3:d5:e2:8d:3a:85:84:79:71:0c:fb:02:ff:50:76:ee:
         5d:25:c9:f7:a4:6f:d2:0c:a3:c5:dd:13:ed:1e:32:b2:1b:4d:
         76:d3:6c:3e:19:b1:33:8d:cb:72:b5:be:09:ca:8b:bd:7e:7e:
         ba:57:80:5c:bf:41:fe:4b:a0:9f:25:5c:22:90:bc:cb:e4:5c:
         1c:94:2f:8d:94:f3:2e:f3:44:67:8a:a8:31:25:57:ab:76:ee:
         3a:aa:6b:52:c3:bc:8e:65:06:d1:c2:3d:b3:76:a5:c7:1c:67:
         b7:5b:3e:74:20:8f:cc:29:88:55:49:1f:c4:f7:ff:e9:5a:5e:
         70:e3:33:ca:f2:67:a1:d4:ba:7e:36:51:50:7b:49:f0:38:f5:
         b8:fc:20:cc:3b:32:22:ba:c4:a0:f2:c0:df:d6:2b:d0:c7:93:
         ef:a8:2f:09:f1:79:3d:91:dd:83:66:d3:09:37:f8:d6:e3:2c:
         0d:07:d2:5c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjYwOTAzMDA0ODQwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4YzNlOC0zZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySD45BDrgE5P5LtUak7UL0hU9Q99LryCYDoLfdmYJvjsL2QDR38d67WbbISp
l2GXPUD709dp3JP4NKuTfbZ+1mUjSM/pDwczbNr18pNe94GoXcnNV+t6Y6mMcTLj
OeohI+u6Wk40lZEmMN3x5dKHj+JY7556lwaL83mVKiiaKLw15f7TVIIoY5hUVvWY
2Wl6cXYHK6xmeHRWpPb3lZObb3ow5MzbHAqnBSrISMnINaYvyof0aUlAvuvjdMqQ
n1+0TA0/IrpSZLWXHyzVFFFem9pIIo+IFSLpxA7ALWnHAsU2NCgazuJW7iBzhYkr
oXmKgt8TCUQmsVAsZJ3XqqgwTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAU041b2
f96QoPEFpo9VCZfju0jpMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvOUQxM0YyODJE
RjNFMTFFQzgzQ0NGRTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAkzIQMA0GCSqGSIb3DQEBCwUAA4IBAQCwWu7J1nTEDOjmSzfahLme
fFi9yl2L0s5/GvznCLZ6h5bW2VLq+6Qgd56KaSDdNm+/WHvGcNsMNlIWE22tzA80
lMxwzaOTkbtoxPPV4o06hYR5cQz7Av9Qdu5dJcn3pG/SDKPF3RPtHjKyG01202w+
GbEzjctytb4Jyou9fn66V4Bcv0H+S6CfJVwikLzL5FwclC+NlPMu80RniqgxJVer
du46qmtSw7yOZQbRwj2zdqXHHGe3Wz50II/MKYhVSR/E9//pWl5w4zPK8meh1Lp+
NlFQe0nwOPW4/CDMOzIiusSg8sDf1ivQx5PvqC8J8Xk9kd2DZtMJN/jW4ywNB9Jc
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:39:54 2026 by rpki-client