Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa
File:                     9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          2zSdcx5929a8dt719wcbBeKXvSvjdVDWpToHnx4XxQ0=
Subject key identifier:   23:FE:47:C5:A6:EA:A6:43:37:82:3F:B7:D9:D2:BE:7D:0E:81:6D:BF
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       05A0
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:48:43 +0000
ROA not before:           Thu 03 Sep 2026 00:48:43 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135381
IP address blocks:        147.50.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 23:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Sep  3 00:48:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c3eb-8648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:30:0b:53:7a:17:fc:16:f2:d9:35:6c:c7:
                    d4:29:f7:1c:a7:c6:c5:28:2e:00:25:10:76:74:5d:
                    e2:d5:f3:83:de:ab:8d:c2:1b:67:9f:db:73:0a:02:
                    47:17:86:df:b6:71:da:77:5b:17:22:c6:d5:90:56:
                    48:13:4b:2f:dd:9a:d3:62:f6:a4:62:53:d3:9a:cd:
                    9e:81:6c:b0:bc:77:25:3e:f3:36:ab:a2:24:5e:78:
                    30:ff:e6:d6:a0:17:b7:d1:3d:fb:dd:f1:c8:5c:23:
                    36:67:7b:39:94:ab:7c:4c:dd:e2:f5:84:95:35:ec:
                    4b:92:e6:62:c4:bf:1d:dc:66:74:36:5e:c1:01:02:
                    5e:06:dd:94:84:93:96:2c:c6:94:b1:c7:78:67:32:
                    58:cf:58:d0:60:4f:bf:58:82:bf:e2:69:40:f4:2a:
                    44:e4:38:61:ae:c7:f9:2b:37:6c:7f:e6:85:fe:56:
                    da:71:21:94:47:dc:51:a9:46:2c:e0:0b:f8:ce:81:
                    d2:56:cf:6f:eb:50:f8:3e:33:ed:9f:bb:7a:e4:ec:
                    37:67:6a:66:1a:bf:76:b2:bb:8a:3a:f3:fa:53:03:
                    05:50:6b:9a:f2:36:c2:0a:4c:4f:4e:00:98:b6:05:
                    75:a2:b4:f2:dc:eb:13:aa:ae:55:73:28:e0:f4:47:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FE:47:C5:A6:EA:A6:43:37:82:3F:B7:D9:D2:BE:7D:0E:81:6D:BF
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:45:ae:16:f9:f0:d4:06:9b:3c:80:92:6d:e2:5c:48:5f:
         0b:ce:a0:86:d1:1a:79:61:a7:a6:07:c6:b0:23:5b:e5:69:59:
         a3:33:31:6a:85:74:7a:a4:a1:ff:99:c9:36:cb:6a:05:d0:1f:
         f6:7b:48:a5:97:6b:c2:50:1b:6a:ca:77:89:c2:68:3d:65:25:
         3d:30:e1:6f:42:34:d1:8d:ad:0b:ce:0d:31:36:b9:6d:ec:fc:
         6f:15:f3:74:bc:c6:95:d3:a2:1d:9f:be:1d:14:cc:86:bc:8a:
         4d:e8:d1:b4:c2:03:66:0b:45:35:07:ce:ca:ae:34:2d:37:8e:
         18:95:87:1f:21:50:ad:9d:ad:10:77:27:0e:60:57:f8:17:bc:
         5f:bd:3d:4e:37:92:52:3b:bf:35:5b:32:65:a1:d1:27:a0:bc:
         54:89:d6:db:3c:fe:8d:81:e8:7d:54:14:44:46:5a:60:67:16:
         fb:68:fd:a2:8c:99:7e:fa:a6:89:33:ef:90:c6:af:61:25:83:
         e0:ed:54:66:b2:f3:fb:ad:5f:f3:3a:98:b6:2d:07:23:9a:33:
         23:53:08:59:66:61:37:8b:eb:e5:fb:ac:6e:08:0e:46:56:45:
         14:40:53:7e:d2:81:d3:b8:13:f6:29:16:8b:9d:08:a6:d4:51:
         ae:66:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:39:53 2026 by rpki-client