Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/50E02D56781D11F09B1DCE86C4F9AE02.roa
File:                     50E02D56781D11F09B1DCE86C4F9AE02.roa (raw, json)
Hash identifier:          bSe35Tr3EsJ69zH7IHyBX8ZUp5fIu9r/OIoFkXlBGVA=
Subject key identifier:   10:0A:D7:53:08:29:7C:7C:E8:3A:99:75:99:25:07:E0:EA:DD:BC:5A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EDD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/50E02D56781D11F09B1DCE86C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:34:07 +0000
ROA not before:           Fri 02 Oct 2026 15:34:06 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154106
IP address blocks:        203.12.252.0/23 maxlen: 24
                          2402:1ea0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28381 (0x6edd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:34:06 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfceee-7490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:60:9d:f9:c4:7e:cc:95:7d:05:3a:8b:9f:
                    59:0b:73:4f:d9:77:9e:24:4a:5f:04:dc:0b:df:ef:
                    47:8f:ee:7f:7c:53:5a:30:ae:a4:25:29:21:1d:c1:
                    29:2a:42:a9:c1:ca:65:22:61:a2:55:64:8c:5f:b2:
                    b0:d1:1b:71:b0:20:53:24:c1:50:77:63:f9:96:e9:
                    13:d3:4e:82:67:e5:94:f6:36:37:61:a8:92:89:10:
                    52:be:51:54:0c:16:a6:3c:d7:a7:cb:75:4d:31:d8:
                    cf:64:69:0c:e5:e6:19:66:8e:cd:bb:49:8b:0c:5c:
                    eb:d9:b1:bb:e2:5c:04:57:e8:5d:5a:94:c8:29:17:
                    8b:c2:8f:28:9f:3a:d2:5c:31:54:b1:07:fb:ce:8c:
                    14:78:67:d4:7d:ec:b8:24:5d:d8:57:d7:6f:d3:f0:
                    75:ab:f3:b1:89:13:ca:fc:70:46:5b:f7:81:47:ec:
                    f7:28:d3:3c:da:bf:9e:d3:b5:8f:bf:a9:a8:d9:8f:
                    b5:3e:07:df:b0:12:e9:4d:e2:53:67:81:14:3d:47:
                    55:39:7f:ec:72:b7:42:48:2c:34:16:c7:85:fd:8d:
                    42:06:7f:c4:9b:fd:0a:e0:bb:f1:df:42:4d:81:f0:
                    cb:4f:ba:e4:77:d1:ae:e4:b2:24:e6:65:56:df:0a:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0A:D7:53:08:29:7C:7C:E8:3A:99:75:99:25:07:E0:EA:DD:BC:5A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/50E02D56781D11F09B1DCE86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.252.0/23
                IPv6:
                  2402:1ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:16:c3:ff:5c:a8:55:33:89:11:ee:f6:a2:c6:f6:4e:bc:8b:
         19:39:c6:09:51:b7:67:6e:6a:f0:95:34:51:9a:c2:7a:ac:ee:
         b4:51:42:bb:bc:80:6f:92:08:29:68:da:44:a5:bf:96:6b:76:
         40:df:11:1c:ad:07:49:5b:db:63:cd:50:5a:79:11:31:c9:ed:
         d0:50:54:3b:f4:8a:fd:02:bd:79:23:28:24:5a:30:c8:bd:d8:
         4a:76:75:b3:d6:9e:88:2f:d7:1a:1c:8a:a0:4f:31:85:6d:62:
         be:c0:eb:29:56:78:47:da:37:ce:09:01:ab:3f:cc:88:a9:5e:
         73:5f:c2:3b:17:e9:ea:bc:95:2a:58:b8:3e:b8:e7:85:5f:4e:
         39:7e:d8:74:a6:5e:a4:b1:5e:63:6f:99:35:be:96:50:da:44:
         a5:b9:f6:c3:70:5f:4e:e4:f1:7a:a4:8f:e3:f0:52:1b:6f:61:
         e4:32:88:1c:84:d9:bb:03:6d:35:f8:a8:0b:b4:2b:80:09:f4:
         dc:6b:fc:80:55:68:15:de:f7:b0:1d:43:af:40:2a:58:82:80:
         49:15:fb:7b:c3:c9:99:98:03:31:2e:e7:4d:03:d1:d1:db:d5:
         bb:50:73:02:30:08:ac:7f:da:15:27:02:ae:4f:1b:dd:01:f2:
         82:30:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:42:32 2026 by rpki-client