Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A15115E6DF3E11EC83CCFE1EC4F9AE02.roa
File:                     A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier:          hi3WlnCuIsVxYwmdTuFYuyRcQz4FIsMaP/7U8XUNfSM=
Subject key identifier:   D7:B1:9E:84:0F:78:B8:3A:9D:C1:7D:B4:58:C3:07:E6:46:F7:C3:78
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       051F
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A15115E6DF3E11EC83CCFE1EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:46:57 +0000
ROA not before:           Wed 27 Aug 2025 01:05:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140662
IP address blocks:        147.50.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1311 (0x51f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a586c1-7f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:03:f8:9c:7b:1c:be:7e:a8:6b:c0:13:f2:
                    1c:59:c3:22:47:87:f9:76:88:36:cf:97:95:86:3e:
                    99:f2:ce:fb:c5:1e:24:d3:e4:23:ca:1e:80:bf:2a:
                    76:98:8b:57:80:49:26:41:fb:ea:4d:6b:56:cb:97:
                    2f:be:00:c7:7f:c5:2b:6f:ae:78:7f:b4:61:39:9c:
                    26:16:0b:7f:4c:9f:99:f0:c3:16:2a:39:72:c2:93:
                    77:cd:6e:68:66:f0:5d:61:b7:1d:93:eb:d7:2f:48:
                    85:5b:83:48:84:b2:fd:c3:0c:93:ca:65:b7:e2:3a:
                    6c:85:49:7a:67:1e:2d:b6:56:84:79:5f:0e:9a:9e:
                    8c:af:53:2e:b0:2b:d1:4a:f3:76:fd:b5:fe:4d:a2:
                    da:4d:a1:63:21:b1:29:13:e1:4f:e8:eb:0f:4a:a1:
                    10:bc:14:d4:99:90:d9:fd:60:e5:53:d2:94:54:9d:
                    bb:20:23:5c:f8:36:17:da:1a:ee:21:d2:ff:3a:2a:
                    3b:e4:13:8b:61:38:be:76:08:ee:31:7d:e8:a9:1e:
                    cb:06:cc:f6:54:8f:8f:68:71:5e:07:66:dc:e8:af:
                    0a:f0:43:73:34:d2:98:bc:34:67:8f:b2:14:ca:8a:
                    09:98:e3:4e:d6:83:1a:f9:e5:fb:e9:aa:e6:2b:16:
                    32:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B1:9E:84:0F:78:B8:3A:9D:C1:7D:B4:58:C3:07:E6:46:F7:C3:78
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/A15115E6DF3E11EC83CCFE1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a2:ae:63:bf:aa:fd:a0:28:d7:54:8a:6f:fa:28:29:03:da:
         d7:cf:95:ae:3e:91:6c:06:ee:02:48:17:c7:9b:0c:bb:ab:58:
         79:50:dd:ba:ad:3b:8f:e9:46:e0:d7:c9:d1:30:84:94:e1:85:
         c9:81:6c:ba:95:26:00:96:cc:77:82:71:db:11:a3:83:24:90:
         91:4c:54:d3:97:3f:80:82:d1:b0:88:50:b2:00:15:89:38:33:
         75:4e:be:c7:85:92:49:a6:a3:b6:07:0f:96:6a:cd:c7:37:66:
         5d:b7:e0:98:7e:3a:7c:f1:3f:19:7e:2a:d4:cb:3c:65:d7:df:
         ac:14:1a:84:18:a5:ad:61:77:15:59:d0:76:7a:b2:9c:7f:12:
         e2:f9:33:87:88:13:61:3c:dd:d4:d4:27:8b:cc:f2:45:08:75:
         4f:d6:c3:e1:5d:a8:ab:6a:9a:76:df:27:73:9b:f0:1d:71:1f:
         77:0c:23:3b:78:1a:52:43:7f:05:90:4f:3e:9f:fa:f0:43:c7:
         51:06:7b:9f:06:16:d3:41:91:7b:ef:3c:97:91:71:28:d4:68:
         4e:45:f7:05:28:68:e9:57:c8:a1:1e:21:5c:19:e0:01:f0:8f:
         48:6a:02:84:9e:d1:8c:3b:7e:5f:f7:3d:54:b2:21:7d:8a:12:
         9b:93:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:44:54 2026 by rpki-client