Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
File:                     E29CD82EC58B11EFBA44DE34C4F9AE02.roa (raw, json)
Hash identifier:          9dMuDPQ7Unf82i4iHOF9hXKZnCQhPIgKBJEAkT/HbQ0=
Subject key identifier:   64:A9:5F:FA:01:52:4C:84:4D:48:9C:CD:09:BE:F7:47:A8:F9:22:F8
Certificate issuer:       /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial:       CC
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
Signing time:             Tue 27 Jan 2026 05:28:11 +0000
ROA not before:           Tue 27 Jan 2026 05:28:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137943
IP address blocks:        161.248.50.0/23 maxlen: 23
                          161.248.50.0/24 maxlen: 24
                          161.248.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
                          rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
        Validity
            Not Before: Jan 27 05:28:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69784ceb-fd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:aa:b9:6e:19:d2:ef:82:4c:e2:ed:47:09:
                    63:0f:f0:ab:67:95:54:3a:6d:d5:e1:d4:3d:11:62:
                    ea:70:c3:40:b2:d3:30:c6:7f:12:b7:f2:dd:81:df:
                    5a:09:54:e5:62:74:97:3b:50:36:80:d1:36:ae:62:
                    6d:a2:0a:cb:16:a9:5d:17:db:e6:0f:66:69:08:1d:
                    75:c4:a6:e9:16:44:e9:67:32:30:4b:2a:90:8e:e4:
                    4f:16:d0:4f:04:65:93:78:ed:f1:16:f8:32:c3:b9:
                    76:30:bb:c7:8a:89:8a:9a:86:3c:97:aa:8c:a6:89:
                    97:af:13:0f:9c:b6:db:58:1a:ac:4b:e3:7b:02:97:
                    b2:ad:76:f9:3c:d1:d7:95:42:5e:39:34:69:69:6d:
                    b4:31:f6:e6:3e:81:2d:2f:77:ae:76:7e:74:f0:e3:
                    92:c8:b5:49:f9:01:dc:c0:5b:7d:1e:ad:c7:f1:28:
                    54:36:8e:e5:de:c7:77:2c:c4:a4:35:be:78:5d:b9:
                    8c:63:67:5a:6d:9c:8a:82:8c:f2:5d:d8:c4:c2:b7:
                    e3:1a:e0:5c:1a:f8:16:fc:b8:df:71:e6:cf:98:19:
                    f3:be:51:df:be:62:b3:71:7a:64:e1:cf:4e:88:dc:
                    18:33:f1:7f:f4:cb:e7:06:d2:9c:f3:ee:0e:2d:86:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A9:5F:FA:01:52:4C:84:4D:48:9C:CD:09:BE:F7:47:A8:F9:22:F8
            X509v3 Authority Key Identifier:
                keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:61:ab:aa:48:0b:04:dd:f5:f3:d4:b6:3d:d0:54:26:52:82:
         95:ca:4c:a5:e2:17:b4:d7:9f:11:55:71:b6:9e:a7:8a:13:74:
         ed:e7:2b:05:dd:3e:49:e7:c5:0d:2b:9c:9e:32:ef:b5:a3:5b:
         7c:52:f7:96:d2:a0:59:d9:5d:99:bc:d3:6e:43:6c:b7:13:fa:
         78:05:87:ef:23:94:65:0b:c6:75:10:21:40:5d:53:55:26:30:
         aa:5c:65:58:69:91:05:aa:22:c6:a1:ce:ba:b8:2a:cb:5a:1c:
         2e:de:47:a3:8f:09:93:d9:30:a8:17:88:71:3a:2a:ca:49:b7:
         bc:62:26:28:c3:ff:a3:f1:cd:95:0c:c3:04:06:e7:74:44:9d:
         2d:71:4b:20:b5:49:d2:f7:f2:80:9b:8e:1b:61:0e:6a:7f:7a:
         9a:14:a7:dc:c3:e6:7a:5a:64:7e:17:00:20:c8:12:c3:99:84:
         f7:e4:54:4b:98:df:af:66:d2:f1:0f:19:09:8c:42:41:08:0e:
         5e:f0:53:bc:f5:bf:c4:27:9c:55:a4:13:21:56:49:69:11:25:
         86:ee:d4:0c:ea:dc:20:6f:6e:13:e1:b3:96:c4:d9:c7:db:5a:
         d1:9f:f1:80:55:69:34:2a:68:60:40:8a:46:fd:69:4e:ea:9a:
         ca:19:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:26 2026 by rpki-client