Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
File:                     9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          X9aul/hRgPk68N6AmoCtSGzTWlW5UtIGtVxtQ1hm0tU=
Subject key identifier:   33:DE:A5:49:59:1B:B2:FC:31:A7:54:CB:75:0D:02:EB:29:2E:7D:98
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       051C
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:46:54 +0000
ROA not before:           Wed 27 Aug 2025 01:05:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137977
IP address blocks:        147.50.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a586be-5f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:be:47:f8:4a:db:b0:6f:a0:d3:c4:e1:25:
                    6b:de:be:c8:9c:87:5f:c6:a1:29:42:ec:49:32:db:
                    71:4a:1e:f1:15:f5:8f:26:f2:7e:a8:8c:16:b9:9f:
                    e3:8b:c3:0d:5b:6f:b1:1a:cc:49:ce:f1:3b:b6:7c:
                    f7:12:43:f0:11:82:b0:f7:aa:1a:18:fd:71:cb:91:
                    95:8a:8f:8a:d9:a4:69:12:2f:1b:a3:18:23:89:2d:
                    78:58:aa:81:8b:2e:a8:56:60:a0:0d:9d:a9:38:38:
                    5a:79:1f:c5:54:c2:12:f2:ac:da:c9:0d:97:6b:29:
                    14:ae:e6:7d:83:bd:26:24:22:de:12:12:dd:c4:75:
                    0c:ce:22:fc:47:51:a6:d8:c0:74:fc:4e:1f:78:97:
                    c5:a9:c8:0a:4a:1c:08:0f:8d:96:bd:09:21:e8:c3:
                    fc:19:b1:29:f2:39:3f:ea:5b:4c:a8:31:68:e3:da:
                    78:df:5d:5d:a5:be:6e:2c:7a:e3:3f:d0:3a:7b:8f:
                    81:c0:26:27:91:c9:53:d4:06:64:5d:16:c4:6a:0a:
                    dd:1b:9a:55:49:a4:a4:c7:5b:fa:34:17:0f:70:a2:
                    fb:5f:b2:85:eb:3f:eb:25:4a:b4:fa:4b:fe:f8:7a:
                    25:3b:5d:4b:99:4c:5b:af:85:34:38:d3:67:12:29:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DE:A5:49:59:1B:B2:FC:31:A7:54:CB:75:0D:02:EB:29:2E:7D:98
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:98:0d:42:79:d1:87:14:13:ed:9e:ef:83:de:6e:34:ca:7e:
         77:b0:0d:ae:87:67:08:f0:e6:7c:f8:60:cd:8b:a7:58:0f:61:
         d1:f6:06:78:ad:2d:2d:b4:d9:cd:71:95:52:a0:f5:17:82:46:
         f3:5a:5c:de:c1:4e:50:e4:0e:6b:ab:e1:d6:0b:2a:d9:5e:1d:
         03:e2:ed:6c:d4:d8:3d:59:b1:79:dd:e8:e0:db:05:36:43:b9:
         0a:0a:8d:5a:cd:dc:91:0a:d8:03:0d:79:e8:6c:cd:39:13:1b:
         c6:5e:c2:2b:1f:c0:80:a0:a2:47:07:04:af:85:72:8f:c1:91:
         8d:66:2c:7a:94:39:c6:c0:73:6e:c6:d6:1f:ca:a7:79:38:f8:
         ad:5d:01:bb:0b:9a:71:d8:3b:7d:63:7d:f1:80:d5:56:c6:80:
         9c:3b:ed:cc:87:2e:46:e7:1f:b9:20:cc:0a:ce:04:96:c8:7e:
         78:fc:15:28:87:85:a9:20:36:b1:3b:be:f5:9e:a8:ac:c2:4a:
         83:7a:cc:90:c2:6d:1d:6c:b5:66:82:7f:2d:05:7b:bd:02:07:
         97:ee:b2:61:22:fc:30:09:5d:70:2d:e9:a4:a9:6f:13:41:4e:
         3f:22:c2:43:d9:8d:7c:47:e7:ea:57:52:ad:e7:71:6a:64:3c:
         c7:ca:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:43:33 2026 by rpki-client