Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9D13F282DF3E11EC83CCFE1EC4F9AE02.roa
File:                     9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          jXGTnw/tsqcAu91xGU6v2HfXtRdayM9lNp5kbKAgr+4=
Subject key identifier:   B8:EE:5E:82:F6:B8:5C:F5:0B:1D:28:B2:EB:7C:50:1F:23:62:4D:24
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0518
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9D13F282DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:46:51 +0000
ROA not before:           Wed 27 Aug 2025 01:05:19 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133791
IP address blocks:        147.50.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:19 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a586ba-94df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:e1:9b:a0:92:c1:08:bc:fc:49:0e:66:65:
                    5e:22:86:85:f3:31:18:81:b8:ae:dd:dd:90:39:fb:
                    99:c4:14:af:bc:e9:11:c9:b4:cb:e5:e1:64:3d:2d:
                    a2:6e:da:a8:61:e4:90:80:06:ac:b8:dd:12:24:68:
                    d9:81:57:6f:c4:46:e6:22:8f:75:70:57:63:08:6e:
                    4d:cb:4f:03:00:bb:d8:69:fd:91:73:b5:68:1f:1f:
                    22:b7:70:40:75:82:2c:0d:1b:c5:76:c7:f5:4e:1c:
                    b6:05:2c:45:03:38:57:39:0b:f8:50:ad:00:25:9d:
                    54:9b:d3:b2:3a:48:d4:86:ce:98:c4:d4:d8:a5:b4:
                    42:cb:be:f8:9c:9c:81:99:07:9c:13:5f:eb:a7:1a:
                    32:45:40:55:a8:a5:72:47:d4:db:3b:49:89:a2:67:
                    00:e2:12:cd:de:00:61:43:d0:4b:23:3a:8f:d3:9b:
                    f8:e3:ed:c2:4b:0c:84:df:58:f0:b7:9e:11:1f:90:
                    d4:5e:cb:d8:02:2d:30:ee:12:eb:a4:67:8d:cf:b2:
                    bb:ff:3e:c4:78:a2:2f:b5:5b:4e:44:8b:51:3e:cd:
                    66:98:41:f3:d6:d0:30:c1:d1:2c:f3:06:9b:79:b2:
                    31:62:17:e5:ab:f3:f1:7e:7c:64:f4:3f:cf:78:91:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:5E:82:F6:B8:5C:F5:0B:1D:28:B2:EB:7C:50:1F:23:62:4D:24
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9D13F282DF3E11EC83CCFE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:5a:88:54:da:d6:d1:7a:00:b4:f4:88:5f:56:af:0e:0a:
         01:43:db:54:f1:03:da:ab:51:68:20:8d:e9:de:e9:37:26:41:
         a6:69:62:f4:82:d9:f5:4f:a8:96:c7:59:84:ff:37:5e:8a:aa:
         e8:76:2e:c6:3e:37:ee:05:d8:b8:78:86:15:4d:ee:2d:79:a0:
         eb:82:cc:c6:83:ca:e2:23:0a:a7:81:05:24:f1:14:76:51:96:
         65:0d:67:50:2b:d0:16:66:7b:20:52:f7:f6:2b:8e:8e:7c:82:
         bd:93:c6:f0:ce:2e:3e:a5:cc:27:99:12:d5:54:a0:83:4b:03:
         01:a5:de:7f:69:d0:a8:eb:ad:7d:a7:3b:f3:cc:9d:d8:97:b0:
         50:de:26:f2:26:fb:4a:55:58:b7:b4:09:af:9c:2d:66:3e:8a:
         f8:e7:a9:c9:28:db:14:4b:8f:19:f8:91:04:e4:e9:54:08:5d:
         28:39:7e:0a:be:3c:12:e7:eb:c9:af:34:eb:51:2b:94:24:1c:
         ca:ce:ce:24:9c:79:07:a1:8f:5c:72:72:ce:1e:65:33:05:ec:
         29:eb:40:09:1d:1b:4b:dd:83:13:34:13:bd:54:21:69:29:b6:
         9c:a9:1f:95:c5:59:04:ba:3b:4f:ff:6c:a3:03:ae:16:ac:b3:
         c1:eb:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:44:02 2026 by rpki-client