Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa
File:                     A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          Beaq/HbEwUmLqjtbFI36ZdyefQZQbopRjbyVpSH8Ko8=
Subject key identifier:   CC:ED:E3:04:ED:F9:01:0D:6D:8A:AE:0B:AB:11:35:BD:29:37:30:7D
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       05A5
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:48:54 +0000
ROA not before:           Thu 03 Sep 2026 00:48:54 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140326
IP address blocks:        147.50.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Sep  3 00:48:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c3f6-8762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:0d:1b:ae:df:d4:52:e3:46:b3:af:c0:72:
                    7a:e0:34:5a:14:b8:c4:32:0c:c6:8c:5d:a9:ad:fb:
                    46:23:fa:73:14:01:4a:58:98:9b:c2:39:d3:f9:d5:
                    2e:27:17:b3:60:49:93:ab:00:c4:95:80:e8:e9:82:
                    31:a1:5c:34:b7:29:5e:20:8f:cb:c1:56:9f:32:b4:
                    5f:e0:de:4e:a2:17:f4:7b:29:ca:28:a3:3c:4a:7d:
                    f0:35:db:f5:82:92:1e:44:d1:dd:69:15:87:77:08:
                    52:77:79:73:bb:51:86:97:67:fc:1e:f5:6b:0e:0d:
                    11:41:52:d4:59:df:c0:da:b3:ef:d8:f8:91:d8:26:
                    ab:b2:53:0a:6d:0d:25:7b:d7:8e:7d:7a:a5:9d:42:
                    bc:e1:d4:f8:7b:12:c5:f5:cd:b5:ae:69:56:d3:eb:
                    ee:64:fb:ff:cb:92:02:4d:28:68:95:02:7d:7b:1b:
                    43:ed:b0:96:05:f8:e4:ea:97:f7:b2:c1:ed:6a:56:
                    20:e1:d9:1d:9c:ef:7f:7f:c6:59:2c:27:aa:74:2e:
                    36:37:e5:0e:9c:e9:75:32:84:88:46:b1:a9:91:ed:
                    c3:7d:da:e6:5d:79:d6:21:2b:ab:64:3c:50:58:6e:
                    6e:80:60:47:56:29:43:e3:0c:98:d0:a0:4b:2d:82:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:E3:04:ED:F9:01:0D:6D:8A:AE:0B:AB:11:35:BD:29:37:30:7D
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:20:a6:f4:e1:47:17:e4:63:1d:7e:f1:0a:8c:8c:6f:a6:b6:
         1d:0c:12:21:d5:4e:de:10:d7:bf:ad:06:85:01:fc:15:9a:c2:
         69:8b:62:45:bb:6d:31:99:e0:29:04:23:cd:27:1d:2a:8c:d1:
         e5:25:59:35:48:d5:3b:4c:43:14:e2:b4:5b:f0:18:cf:d2:09:
         f4:04:cb:dc:0d:33:bd:21:0b:eb:1f:04:6d:a7:ce:bd:67:d3:
         4e:60:2a:f6:93:1f:5b:a5:44:a2:77:e0:19:4e:e6:6e:d4:36:
         ec:11:52:7e:36:12:90:0c:9f:72:c9:da:6e:31:22:0e:cb:f9:
         3e:4c:ba:ea:5d:fb:59:1f:89:b2:38:24:e6:fb:f9:e2:4e:43:
         64:52:5f:3c:87:fa:47:c5:1f:b3:25:cc:0d:03:c1:69:d8:65:
         5f:28:6b:57:65:17:12:8c:74:da:1b:ae:86:38:7b:3f:ee:98:
         aa:d1:68:ee:3f:b2:8d:b3:2f:07:a4:f2:59:d0:6b:8f:34:40:
         e0:89:a3:7f:5b:03:fb:4e:43:80:da:78:28:75:4a:7d:d5:21:
         c2:7b:59:07:e1:d3:11:fd:59:ab:62:ca:01:88:f9:af:bf:89:
         48:e7:05:d6:43:37:04:a3:5d:63:1d:4c:ec:52:8e:dc:65:8b:
         0e:d9:0c:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjYwOTAzMDA0ODU0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4YzNmNi04NzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtF0NG67f1FLjRrOvwHJ64DRaFLjEMgzGjF2prftGI/pzFAFKWJibwjnT+dUu
JxezYEmTqwDElYDo6YIxoVw0tyleII/LwVafMrRf4N5Oohf0eynKKKM8Sn3wNdv1
gpIeRNHdaRWHdwhSd3lzu1GGl2f8HvVrDg0RQVLUWd/A2rPv2PiR2CarslMKbQ0l
e9eOfXqlnUK84dT4exLF9c21rmlW0+vuZPv/y5ICTSholQJ9extD7bCWBfjk6pf3
ssHtalYg4dkdnO9/f8ZZLCeqdC42N+UOnOl1MoSIRrGpke3DfdrmXXnWISurZDxQ
WG5ugGBHVilD4wyY0KBLLYL/+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMzt4wTt
+QENbYquC6sRNb0pNzB9MB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQTA5RjhFNTJE
RjNFMTFFQzgzQ0NGRTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAkzJIMA0GCSqGSIb3DQEBCwUAA4IBAQAyIKb04UcX5GMdfvEKjIxv
prYdDBIh1U7eENe/rQaFAfwVmsJpi2JFu20xmeApBCPNJx0qjNHlJVk1SNU7TEMU
4rRb8BjP0gn0BMvcDTO9IQvrHwRtp869Z9NOYCr2kx9bpUSid+AZTuZu1DbsEVJ+
NhKQDJ9yydpuMSIOy/k+TLrqXftZH4myOCTm+/niTkNkUl88h/pHxR+zJcwNA8Fp
2GVfKGtXZRcSjHTaG66GOHs/7piq0WjuP7KNsy8HpPJZ0GuPNEDgiaN/WwP7TkOA
2ngodUp91SHCe1kH4dMR/VmrYsoBiPmvv4lI5wXWQzcEo11jHUzsUo7cZYsO2Qxs
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:39:51 2026 by rpki-client