Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa
File:                     D50024D6DFEC11ED9AB6E147C4F9AE02.roa (raw, json)
Hash identifier:          NpbFmehH6sCWVstqM+8ivirhzh87kF22vlqRdRYqcLU=
Subject key identifier:   37:CD:F9:FC:48:66:F5:69:99:82:4B:93:EA:2B:C6:DA:C1:8E:0B:FD
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       256B
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:18:49 +0000
ROA not before:           Tue 16 Sep 2025 15:53:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9498
IP address blocks:        202.189.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9579 (0x256b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Sep 16 15:53:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48309-1e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:18:2a:5d:80:5e:e1:68:99:86:1b:8e:9f:
                    9c:95:80:10:42:ae:91:b5:21:32:fc:14:c8:e3:cf:
                    9d:90:93:7b:19:ed:41:45:06:c0:92:b7:9a:43:17:
                    a2:11:a9:70:f8:68:ba:d7:54:8f:b6:34:ab:58:b3:
                    d3:a8:0d:ba:b3:9a:63:1b:79:3e:4b:bb:d8:22:c6:
                    e5:84:c8:28:45:cb:67:86:6e:61:db:66:38:42:29:
                    bc:31:d1:a9:2f:49:dd:70:c5:1b:2e:ce:96:90:fc:
                    77:1b:81:0e:8f:2b:78:b7:fd:e7:9c:d6:5c:97:ef:
                    ad:a9:bf:11:8b:06:43:e5:e4:71:59:66:a1:ca:45:
                    d4:8e:05:8a:8e:35:0e:4f:82:e1:44:92:bc:12:2e:
                    12:90:a4:ff:cf:93:47:3e:53:db:eb:1c:58:c8:8d:
                    32:91:3d:6f:67:d2:a3:a3:82:ec:67:ce:3d:e8:6f:
                    22:22:59:35:cf:70:46:70:74:83:75:82:37:0b:e7:
                    a7:1b:db:a3:2c:6f:b6:b1:d1:6e:28:37:ca:59:ac:
                    aa:8f:23:ec:5b:e3:16:4f:8f:30:b7:96:03:b1:8e:
                    98:8a:e6:df:27:ab:f1:39:72:e6:bd:29:94:06:55:
                    12:94:7a:44:64:e2:90:4b:b6:24:8e:7f:31:c6:09:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CD:F9:FC:48:66:F5:69:99:82:4B:93:EA:2B:C6:DA:C1:8E:0B:FD
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.189.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:2e:7e:00:f8:0a:8e:1a:7e:5e:49:66:1b:61:46:fc:7b:e1:
         db:6e:50:63:1c:24:40:87:8e:af:ce:58:a6:e4:71:ce:67:39:
         50:c1:6a:df:b8:78:41:b1:71:72:81:8a:4e:ca:7e:e2:99:eb:
         f4:c1:69:ea:cf:61:75:c4:35:97:d6:dc:05:33:2d:f6:6f:a3:
         8c:3a:6f:01:4f:90:3c:d3:15:3f:0f:ba:a8:e0:08:f6:47:31:
         29:71:27:0a:a1:91:6b:b9:c1:9f:8a:bc:80:9b:ab:2b:82:f0:
         25:a4:80:1e:b6:2d:e5:ca:33:42:b3:ec:34:a7:83:5c:7e:d6:
         03:61:d1:9c:7b:c7:77:46:d4:3d:cf:ba:f7:f8:bb:cb:de:fc:
         15:74:1c:21:4e:fa:94:1a:ae:98:64:71:00:2d:8e:36:ab:eb:
         88:a8:d2:cc:7e:4b:91:d3:ea:96:1e:1e:c0:ac:0e:ca:e3:33:
         22:45:bf:30:56:4c:a0:c5:7b:3c:96:1f:9d:b6:3f:1e:ed:2a:
         c2:31:e8:8c:eb:25:26:5f:ac:a7:8f:61:ff:27:63:6a:d0:63:
         5e:15:05:17:f5:d0:82:ac:db:86:70:1f:e2:9b:f8:a8:75:c8:
         81:6f:bd:e5:f5:29:7b:fd:e2:d6:9c:16:37:f9:6f:7c:e8:ef:
         f9:d9:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:00:18 2026 by rpki-client