Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa
File:                     9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          Wm1/eKkjwSdENyF9XhaIgMMIMyZWJ8FdprbIASCO2bc=
Subject key identifier:   AB:9F:73:3B:74:F3:1D:40:C5:90:8E:4D:96:BD:63:62:A1:89:75:CC
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0519
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:46:51 +0000
ROA not before:           Wed 27 Aug 2025 01:05:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135381
IP address blocks:        147.50.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a586bb-31cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:d7:33:32:a5:79:47:a7:cd:04:e1:c0:f1:
                    1a:ae:a2:00:04:d4:f2:ea:f4:71:98:0f:f9:d4:12:
                    3a:d2:39:aa:e4:5d:57:a4:6d:d1:06:98:77:56:81:
                    01:d9:66:29:fe:c6:ad:95:7e:69:df:21:b1:11:c0:
                    2e:57:82:8d:33:30:ff:b5:94:9e:31:a3:cb:32:6e:
                    43:3c:3b:3d:8f:45:f6:98:f0:dc:eb:79:d1:84:17:
                    79:92:8e:47:e1:0c:b1:88:81:5b:35:5a:10:ea:06:
                    71:07:d5:ea:b3:2d:76:c9:c4:59:91:62:96:81:40:
                    84:6b:23:bf:92:a1:f3:c1:c2:67:47:be:b0:65:23:
                    7e:dd:fc:8a:b1:e2:57:6b:20:aa:43:46:eb:db:8d:
                    df:53:43:2c:83:f8:15:fe:cd:93:d6:bd:d1:c0:65:
                    0c:3a:94:6f:66:d6:73:dc:05:a0:6c:20:46:cc:da:
                    c4:d3:37:4d:fd:26:12:0a:31:f5:f8:c9:bf:7f:04:
                    fe:0a:5b:69:45:c6:19:90:a7:dc:cf:52:a7:ef:b9:
                    3a:68:4a:e9:44:be:f0:35:20:56:0d:3e:6c:c7:11:
                    31:c6:a8:f6:14:07:7e:e4:f1:03:18:7d:23:3f:80:
                    dc:0b:ec:ef:ef:ec:88:5e:25:0a:a4:9d:ac:73:bb:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9F:73:3B:74:F3:1D:40:C5:90:8E:4D:96:BD:63:62:A1:89:75:CC
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:d5:e7:f9:9e:39:97:db:43:0d:4e:77:16:d2:7c:f8:85:7b:
         f1:88:fe:f6:9f:99:90:6b:6b:78:2a:0e:d8:fc:b2:09:8a:97:
         df:9c:1e:ca:34:cb:98:57:20:68:87:68:6e:ed:05:3c:77:f3:
         38:a5:75:f1:34:10:ec:4d:bd:58:16:e2:55:4b:cb:99:08:09:
         2c:07:d0:ac:cc:3b:8a:35:7e:e8:3b:4f:40:f0:2c:41:d6:35:
         50:96:62:ea:b2:fa:6f:8b:13:9e:ca:0b:cd:1f:ef:03:80:59:
         a4:82:b6:97:5d:f5:be:b8:19:8a:b7:c7:e9:60:4b:40:c0:c7:
         2b:eb:22:66:dc:f1:fc:1a:73:09:72:a5:29:c4:b6:11:bb:23:
         83:25:19:cd:0c:c8:b5:f0:2e:df:47:42:d6:72:02:f7:81:f8:
         aa:38:ab:d6:4b:75:40:74:09:f4:e0:1e:d4:b7:84:a7:04:cd:
         ab:c4:28:e2:9b:13:de:9a:ae:42:e3:8e:c5:1c:39:95:3b:52:
         95:de:6b:e1:b4:18:43:f7:ba:ce:2d:21:18:90:e4:81:76:e5:
         14:44:49:2a:6f:86:da:3e:30:b5:a4:12:9e:5e:b1:5c:45:cb:
         9f:9f:f2:d2:a2:04:ae:a7:df:5a:11:03:ab:a4:55:a0:6f:88:
         f0:e5:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:44:03 2026 by rpki-client