Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/F50431A0E48511F0BEFBEDFF436F56BC.roa
File:                     F50431A0E48511F0BEFBEDFF436F56BC.roa (raw, json)
Hash identifier:          biBbqFto51rOZiPG5JNmrRxR/U8JC7IUfuy2q4b9zao=
Subject key identifier:   9B:BC:6F:98:36:26:40:D7:D4:45:5E:84:F3:1E:20:A2:14:96:D1:1A
Certificate issuer:       /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial:       27
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/F50431A0E48511F0BEFBEDFF436F56BC.roa
Signing time:             Mon 02 Mar 2026 14:14:50 +0000
ROA not before:           Mon 29 Dec 2025 07:14:04 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154471
IP address blocks:        144.79.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
        Validity
            Not Before: Dec 29 07:14:04 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a59b5a-3e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:44:06:65:17:4e:bb:81:32:a1:6a:88:5b:
                    e9:d5:7e:93:0e:ad:28:6c:42:a0:f6:ae:8b:ab:ea:
                    f1:46:07:50:c2:47:bf:6d:c0:c9:d4:74:de:7d:b7:
                    cc:5c:c6:d3:40:a8:a0:d1:98:1b:35:2c:ed:da:27:
                    9b:e4:74:85:39:2c:6e:eb:be:45:ca:f7:7a:33:79:
                    9c:a4:89:b3:e4:50:53:54:23:72:ba:75:e9:f3:1f:
                    eb:bf:66:c0:cd:5f:a8:42:d8:d2:0c:a1:6d:12:74:
                    8f:f0:81:d7:84:40:57:07:c9:b6:18:25:27:b7:75:
                    69:52:8e:70:cf:2c:e1:8a:69:9a:23:19:69:af:81:
                    2c:9f:78:82:15:72:8c:35:69:ce:46:57:cf:b6:ed:
                    88:95:7a:70:eb:e7:0e:28:6a:0f:6b:d1:c0:20:3a:
                    7a:3d:c2:5e:ac:1e:0a:49:63:50:14:92:4a:6c:d5:
                    33:a8:ab:d4:0f:d9:b6:cf:e0:78:1f:81:5e:c0:01:
                    8d:8b:f1:09:82:f2:5d:fd:4a:90:02:38:2c:97:bd:
                    1f:f7:d8:48:42:73:c3:09:34:26:e8:52:f8:d9:f6:
                    01:60:a3:54:fb:c9:0d:cc:08:91:3f:f6:b4:da:01:
                    cb:c2:ef:83:d3:f1:d2:af:46:f3:f0:24:46:d1:b7:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:6F:98:36:26:40:D7:D4:45:5E:84:F3:1E:20:A2:14:96:D1:1A
            X509v3 Authority Key Identifier:
                keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/F50431A0E48511F0BEFBEDFF436F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:d2:eb:9e:24:33:b6:1e:97:99:f6:9b:92:67:06:b1:81:
         27:bd:5a:b7:ce:d3:c9:5f:20:2e:0d:d1:5e:c2:69:51:c3:7e:
         3d:3d:7c:45:8a:ac:f7:46:76:3d:65:c1:99:5f:8e:8c:f0:52:
         b1:24:d6:75:c0:a2:68:d9:dd:50:2c:05:9b:35:d8:ec:43:0e:
         98:28:a7:39:d9:3f:2c:67:d3:22:0e:65:b6:da:0e:fe:2f:d4:
         71:82:0f:2c:ec:dd:c7:09:9e:92:18:21:5c:01:d9:4d:2e:b6:
         24:d4:8d:b5:65:62:cb:56:ef:99:cc:9e:3f:1d:d6:3a:fb:a3:
         45:64:8a:fb:10:0b:78:5b:ba:d2:2d:32:64:f8:a7:25:e7:19:
         68:dc:ad:66:78:9f:3b:f9:53:76:7d:29:85:f5:a9:3c:c1:6e:
         13:69:2c:54:df:d9:b9:f3:ab:87:74:af:f4:30:ed:b1:b4:82:
         d9:cb:6a:f2:fb:f6:5b:20:97:3d:16:5d:05:ba:be:fa:d0:2d:
         62:a0:47:d3:59:41:86:af:9a:a3:bb:32:c9:38:0e:03:1e:5f:
         a7:59:ed:05:50:63:e7:2b:e2:c9:68:83:a0:11:de:60:d3:3d:
         2e:9e:dc:e5:82:77:2f:45:e0:12:e8:99:03:64:47:18:38:7f:
         79:15:14:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:51:07 2026 by rpki-client