Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
File:                     9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          xXSyKHJ3NBPSi2dne5M9cyAkwhzfAyBhVMB+xnu2wEw=
Subject key identifier:   EC:6D:FB:58:11:C9:37:D6:3A:EB:96:4A:DC:3F:28:01:71:0B:0D:BE
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0491
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:23 +0000
ROA not before:           Wed 27 Aug 2025 01:05:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137977
IP address blocks:        147.50.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 00:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59d3-26a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:18:da:03:ce:a2:db:ef:de:29:3e:3c:f0:
                    c3:ac:74:26:76:29:ee:8b:97:9f:37:e9:ba:53:45:
                    fe:1b:53:ac:9c:47:e6:04:75:f0:de:e8:dc:2e:2d:
                    17:7a:5d:f4:31:84:07:cb:f7:4e:ab:06:18:ee:4d:
                    2d:0e:15:81:67:27:98:54:50:3d:c5:50:5f:8e:12:
                    cf:f1:36:ed:98:85:b6:b7:c0:d0:98:78:e4:b1:2b:
                    81:79:f5:ad:22:de:65:8f:6a:f3:d6:5e:c9:3b:cc:
                    82:9f:fd:f4:27:1b:f5:2b:c0:0d:c0:f6:1f:a1:3c:
                    e2:81:7a:f1:25:64:9f:41:4e:c5:aa:13:e7:28:e0:
                    4b:a7:8b:d9:c2:46:f0:a0:5d:db:75:36:94:4b:c1:
                    97:28:ba:3c:6e:47:74:bd:a5:04:6e:1d:12:18:ea:
                    cd:e5:b5:55:cf:6a:ca:d2:05:7f:29:e0:32:ca:4a:
                    3b:0d:df:7b:d1:a8:39:7a:09:d1:55:dc:ac:5e:a7:
                    01:cc:89:15:0a:95:02:10:45:b0:e5:8d:e9:ad:86:
                    c6:d8:e9:7f:87:ae:ae:a8:a1:6f:78:8b:a2:bb:98:
                    62:86:1b:b8:40:11:09:96:db:85:83:ca:c2:8d:4f:
                    ef:e8:23:e1:6b:f1:78:42:80:74:81:29:7d:b3:2b:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6D:FB:58:11:C9:37:D6:3A:EB:96:4A:DC:3F:28:01:71:0B:0D:BE
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:97:f0:01:34:87:20:f8:7d:04:66:0f:6f:44:9f:cc:b8:72:
         32:9d:ef:31:11:2c:a0:8b:5c:67:d7:8e:0a:6b:ad:cf:53:b5:
         29:f5:a8:5c:37:49:af:c1:73:10:56:a3:2f:71:c6:d4:78:7d:
         0e:67:0f:ed:3b:22:95:70:8b:91:76:7b:76:03:79:cb:65:48:
         f3:48:ac:0c:e4:57:41:a3:12:a5:f3:b8:ed:53:8d:f7:dc:dd:
         c4:0d:d7:ef:94:dc:0d:54:0f:16:50:70:fe:9c:8f:af:10:1c:
         62:d4:88:f2:fe:ff:c3:54:50:ef:08:bb:89:23:23:1a:71:01:
         85:6b:82:b2:7d:fc:64:27:95:cc:2d:5c:55:61:12:cd:00:ec:
         58:96:de:78:92:bf:9c:b0:d2:a4:56:4a:60:8a:37:fc:13:31:
         f8:58:a0:f4:7b:71:07:4b:ac:ba:68:fc:d8:a9:43:0e:10:5e:
         ea:08:25:0e:f4:2e:b9:fe:e9:31:83:cb:f6:32:64:c1:36:ad:
         9f:31:ce:43:1c:28:69:91:b5:a2:50:8c:06:e2:16:94:39:d2:
         29:d3:98:67:b1:b0:d8:b5:4d:1b:05:85:38:87:39:bc:7c:90:
         64:aa:f5:b9:c8:67:c3:3c:d6:89:0c:f3:af:61:57:7f:dc:95:
         7b:ae:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:58:05 2025 by rpki-client