Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/50B2C1B2B9A411F18E84E2923411F970.roa
File:                     50B2C1B2B9A411F18E84E2923411F970.roa (raw, json)
Hash identifier:          whyb/mVDiSF0DWvCxdMRi1gNCjEiweNAQ7pps9iVHHw=
Subject key identifier:   BC:5B:75:A4:E2:BF:D9:E6:1C:A7:DF:E7:E7:D4:14:21:3B:F3:94:CE
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0CDC
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/50B2C1B2B9A411F18E84E2923411F970.roa
Signing time:             Sat 26 Sep 2026 12:18:01 +0000
ROA not before:           Sat 26 Sep 2026 12:18:01 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     399452
IP address blocks:        61.15.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Sep 26 12:18:01 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ab7b7f8-20c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:87:2c:59:77:eb:e0:b5:41:c2:b1:1e:5c:
                    df:ce:67:71:7e:8d:8d:46:be:52:af:b7:aa:c4:18:
                    af:d9:5b:af:8e:98:06:d7:bc:5c:b6:a5:fa:98:d5:
                    4f:34:42:82:ac:12:94:a2:3e:12:eb:7e:8d:4a:70:
                    74:1b:2a:e0:41:80:35:0b:a1:92:89:01:a1:45:38:
                    5a:ed:92:02:83:16:b2:f0:6a:37:be:cf:d2:44:54:
                    29:e7:6b:e6:c2:dd:e9:ac:f0:8d:b9:52:05:a0:7c:
                    c4:6f:6d:e8:03:94:5d:b2:45:ce:2f:d1:2f:6b:b0:
                    f6:72:1a:f9:08:d1:54:63:fd:8c:68:5d:23:2b:53:
                    ea:1b:b8:11:e8:42:20:d5:31:33:e8:8c:77:1a:f5:
                    10:76:5f:50:bc:fe:13:1f:4e:06:58:0c:ce:21:5a:
                    a2:f8:2a:7d:06:0f:ac:70:93:23:76:56:ea:09:e2:
                    6f:ae:a8:85:be:04:a3:06:27:e9:d2:d8:2c:17:54:
                    ba:4a:d9:93:05:a7:82:1a:94:78:af:cb:73:6f:e6:
                    e0:6e:c7:d6:32:c3:70:c5:79:4f:8a:7f:89:b7:4e:
                    3a:b1:0e:4b:3a:c3:9c:44:16:b8:01:cf:aa:df:d6:
                    78:e4:d0:0a:1a:6b:84:3d:25:96:d5:6e:7a:e2:56:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5B:75:A4:E2:BF:D9:E6:1C:A7:DF:E7:E7:D4:14:21:3B:F3:94:CE
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/50B2C1B2B9A411F18E84E2923411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.15.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:92:c4:1a:f8:50:7a:2c:10:d3:6e:59:f7:d8:5d:51:31:f8:
         4e:5a:03:42:be:1a:9e:2c:5b:6a:ca:54:20:5c:fb:8d:28:d1:
         fb:99:ab:aa:43:e5:cb:0a:99:b5:79:15:03:39:d2:54:c9:3a:
         67:95:64:de:8a:bd:54:76:24:7a:ef:a6:0a:1f:e7:d8:57:f1:
         15:07:5a:cc:81:4a:cf:79:9f:f3:25:b5:b5:50:02:59:39:ba:
         40:5e:0a:c1:ec:5e:c3:76:b2:48:78:c5:ee:1e:93:66:f0:73:
         a9:3f:d0:8c:b9:7b:d3:c0:bb:d3:1a:96:07:fa:bd:c1:74:f5:
         1e:2c:b8:5f:c8:8c:ff:f6:75:92:5a:e3:5e:9b:fc:65:b1:5b:
         1e:b7:29:42:99:63:31:23:5b:06:b3:36:67:3c:33:ff:4e:b4:
         f7:a6:34:89:5d:94:16:5c:3e:38:56:8c:ad:33:5e:97:c3:25:
         ad:23:e4:4a:29:54:cb:05:ce:d4:3b:80:a2:19:a8:4a:1a:b8:
         09:0b:19:7b:8f:13:64:88:8f:6e:51:72:25:a7:af:1a:79:ec:
         54:e3:c2:c5:b0:9c:ef:73:e6:b7:1c:3b:e0:9d:c1:28:03:42:
         04:f2:56:f2:2a:0e:b9:72:7d:87:9e:49:20:a8:87:4a:f0:d8:
         65:c0:1c:c6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjYwOTI2MTIxODAxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI3YjdmOC0yMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxwOHLFl36+C1QcKxHlzfzmdxfo2NRr5Sr7eqxBiv2VuvjpgG17xctqX6mNVP
NEKCrBKUoj4S636NSnB0GyrgQYA1C6GSiQGhRTha7ZICgxay8Go3vs/SRFQp52vm
wt3prPCNuVIFoHzEb23oA5RdskXOL9Eva7D2chr5CNFUY/2MaF0jK1PqG7gR6EIg
1TEz6Ix3GvUQdl9QvP4TH04GWAzOIVqi+Cp9Bg+scJMjdlbqCeJvrqiFvgSjBifp
0tgsF1S6StmTBaeCGpR4r8tzb+bgbsfWMsNwxXlPin+Jt046sQ5LOsOcRBa4Ac+q
39Z45NAKGmuEPSWW1W564lbozwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLxbdaTi
v9nmHKff5+fUFCE785TOMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNTBCMkMxQjJC
OUE0MTFGMThFODRFMjkyMzQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAPQ/EMA0GCSqGSIb3DQEBCwUAA4IBAQB9ksQa+FB6LBDTbln32F1R
MfhOWgNCvhqeLFtqylQgXPuNKNH7mauqQ+XLCpm1eRUDOdJUyTpnlWTeir1UdiR6
76YKH+fYV/EVB1rMgUrPeZ/zJbW1UAJZObpAXgrB7F7DdrJIeMXuHpNm8HOpP9CM
uXvTwLvTGpYH+r3BdPUeLLhfyIz/9nWSWuNem/xlsVsetylCmWMxI1sGszZnPDP/
TrT3pjSJXZQWXD44VoytM16XwyWtI+RKKVTLBc7UO4CiGahKGrgJCxl7jxNkiI9u
UXIlp68aeexU48LFsJzvc+a3HDvgncEoA0IE8lbyKg65cn2HnkkgqIdK8NhlwBzG
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:37:05 2026 by rpki-client