Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F563D916248D11EF93237035C4F9AE02.roa
File:                     F563D916248D11EF93237035C4F9AE02.roa (raw, json)
Hash identifier:          VCFvtvA9YE6AwHB0R1pkgWrJ/+HVkrKuimdliRgUT8Y=
Subject key identifier:   97:A5:AC:2D:CD:EE:05:40:CB:9B:1D:9A:21:BB:5E:25:5C:D2:EF:C4
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       049B
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F563D916248D11EF93237035C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:32 +0000
ROA not before:           Wed 27 Aug 2025 01:05:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     59374
IP address blocks:        147.50.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 00:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Aug 27 01:05:32 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59dc-d336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:e0:de:30:0b:64:24:f9:a7:cc:f3:e1:c6:
                    f9:65:c0:9b:5f:cb:14:48:c4:d0:63:fc:c0:7b:73:
                    69:14:94:36:74:bb:7e:18:96:8d:8f:91:14:8a:87:
                    b9:49:5a:0a:c6:72:f0:ad:bc:a3:cf:4f:6f:d0:26:
                    eb:07:ad:89:6d:6a:ec:4d:bc:75:5d:c0:89:17:38:
                    df:70:c4:0e:98:c7:5f:0c:db:fe:c6:2e:2e:19:20:
                    96:a8:e4:bb:9c:78:5c:d3:61:3e:87:91:9d:ce:d5:
                    c5:55:5d:e8:65:28:5a:aa:a4:4a:c4:35:c5:bb:0b:
                    87:19:1f:4a:9d:24:07:cf:a3:ea:c8:6e:fa:b0:49:
                    3f:14:8c:24:2b:54:ee:17:79:c3:94:ef:6c:fa:23:
                    e1:9e:f2:e3:81:3a:c7:b9:f3:e3:02:ac:6c:e6:5e:
                    5e:bc:a7:73:e0:09:a2:0d:da:f6:75:67:81:7b:60:
                    67:39:2f:59:16:c3:a8:e6:d5:f9:2d:6c:07:f5:c1:
                    5a:b8:84:6c:13:2d:0e:b8:64:06:24:d8:8d:b6:9f:
                    60:71:5d:72:b5:5f:04:b8:d7:be:b7:45:89:3d:b4:
                    45:94:a9:87:2b:49:91:a0:8d:6f:d7:81:6c:60:e5:
                    f5:be:c9:69:dd:29:7b:50:de:66:74:84:58:98:43:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:AC:2D:CD:EE:05:40:CB:9B:1D:9A:21:BB:5E:25:5C:D2:EF:C4
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/F563D916248D11EF93237035C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:7a:73:c6:ff:e1:ee:ad:4c:83:99:7e:92:88:b0:06:08:
         69:f8:7f:e0:86:75:38:54:d6:b7:34:7c:29:ac:76:e5:f8:f5:
         07:63:7a:9a:78:9b:bb:45:21:a0:75:b6:b8:45:ff:ea:bd:01:
         3b:73:26:58:b7:b4:6c:45:cc:6b:58:b2:05:bc:6c:3c:47:6d:
         31:6b:2c:c8:8c:0a:bd:fd:83:53:03:0d:7e:71:99:37:4e:44:
         4f:7b:b4:d6:63:5c:c4:00:25:e1:48:4d:1c:37:99:c1:3e:bd:
         58:79:b7:07:ae:c5:b9:db:d5:09:c2:f1:b0:ad:8b:27:65:5a:
         f4:d3:6a:43:dd:49:e8:51:3e:65:79:d5:9a:e7:68:45:af:44:
         57:25:ab:02:eb:f8:68:bc:2e:43:6a:99:f7:5e:ee:d2:b7:1f:
         65:8b:f7:d1:21:1c:89:a4:a9:77:65:57:f7:25:e8:e7:5b:cf:
         58:2a:34:a1:e0:39:ea:35:c5:5e:b7:e2:6f:65:07:22:c7:5c:
         9f:8c:cb:fd:a3:4b:16:7e:51:2b:8b:bf:a2:20:e0:ab:3a:66:
         fb:85:b5:e4:e2:f4:03:68:8a:81:6e:07:8f:64:f3:4c:b9:e1:
         1c:f8:a2:b5:94:60:8c:c4:86:0f:53:b9:94:d1:0b:2c:68:83:
         0d:2a:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:00:51 2025 by rpki-client