Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa
File:                     A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          ojYiriadBdeJ4BH7NXIPyFN9GoN0YxbKy4QT6N+XslQ=
Subject key identifier:   B2:49:E9:4B:D6:08:C0:2A:67:20:03:EC:80:D1:62:13:DD:6C:66:07
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       051E
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:46:56 +0000
ROA not before:           Wed 27 Aug 2025 01:05:25 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140326
IP address blocks:        147.50.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:25 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a586c0-66f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:48:74:cc:d7:6a:97:7e:56:7b:6a:14:e0:
                    cf:0b:d7:f5:9c:36:78:a9:14:ea:02:e4:cf:a8:dd:
                    da:47:d0:e1:0d:03:f1:39:03:9a:cc:3d:34:57:60:
                    89:19:6d:7c:7b:c0:4a:1c:8e:a1:fe:d8:25:10:30:
                    f6:6a:b8:61:7c:62:a1:90:39:1d:19:87:f9:2b:bd:
                    20:c0:a2:96:fe:9e:5d:37:6a:e3:10:bb:53:d2:0e:
                    0f:a6:a0:7d:56:b1:3b:75:c7:c2:85:2f:76:18:53:
                    82:f9:e7:d6:b6:c8:64:4c:52:86:51:2b:97:ff:1a:
                    91:3d:a5:ed:c1:31:bb:76:d9:bc:4b:65:b4:9e:80:
                    4f:19:e7:56:2c:f4:60:80:f7:f8:46:e8:47:7d:df:
                    b5:56:da:00:ab:91:fe:d7:cc:57:86:2e:34:43:8e:
                    3e:5e:99:47:31:27:4d:a8:5d:e6:9b:a9:91:19:db:
                    2f:db:25:8a:d1:d7:79:61:81:c5:df:11:a0:b8:f9:
                    57:b9:26:a0:2a:5d:8e:28:5e:90:80:7c:a7:a8:59:
                    24:53:19:0d:a0:8a:63:c2:90:94:53:d6:bb:99:00:
                    04:3f:49:a7:fa:d7:14:6c:63:35:20:60:b4:38:db:
                    2c:5f:7f:c9:23:88:07:ea:8c:51:aa:5a:40:f6:d9:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:E9:4B:D6:08:C0:2A:67:20:03:EC:80:D1:62:13:DD:6C:66:07
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:2b:e8:06:30:4d:0e:1e:86:10:92:8a:aa:31:2d:6c:2b:90:
         e2:05:91:48:97:16:42:4a:4a:55:e9:47:76:1e:67:42:53:d7:
         a0:35:02:11:20:a7:e7:c1:a9:57:42:44:b0:52:f9:36:1b:b7:
         70:b6:d8:4d:7e:17:9b:83:4c:0a:e5:45:71:3d:b0:01:16:52:
         ee:a5:97:81:20:07:75:29:00:13:0b:9c:99:1a:15:40:2d:9c:
         b1:09:0b:45:75:6f:84:8d:33:4d:f6:09:ad:0b:d3:56:dd:76:
         dd:09:53:40:c8:83:ed:60:e3:57:31:7b:d1:bf:74:a1:24:9b:
         e2:2c:17:68:3d:8f:02:92:43:15:d8:c0:bc:02:f3:53:12:2e:
         6f:00:9d:b9:ea:24:a5:cd:f6:ad:af:78:8d:54:7c:95:bf:ff:
         40:15:7e:a1:19:ee:c5:18:d7:68:42:7c:01:d2:d7:8e:79:fa:
         ba:e7:f2:49:e0:67:31:cc:f7:e5:b1:96:c2:aa:ce:54:6d:bb:
         96:4c:d4:5b:11:c9:13:1e:78:33:52:c7:55:29:6c:b9:ed:6c:
         c3:5a:fa:e5:4a:66:b1:68:82:fa:a4:70:d4:f1:9a:55:1d:b0:
         44:f3:19:83:01:2a:6c:89:38:4d:34:37:8d:f0:72:69:62:da:
         27:40:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:44:02 2026 by rpki-client