Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/5FAC3CB644CE11F19BD95499BE833773.roa
File:                     5FAC3CB644CE11F19BD95499BE833773.roa (raw, json)
Hash identifier:          WkErIMYK/mQSKLc4lnPt53wSfKMo9LaNrKnnlPsS/9g=
Subject key identifier:   02:7A:08:CA:C6:6E:A8:D2:3C:C4:04:74:64:92:EF:96:28:8A:A8:C9
Certificate issuer:       /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial:       017B
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/5FAC3CB644CE11F19BD95499BE833773.roa
Signing time:             Thu 30 Apr 2026 19:54:18 +0000
ROA not before:           Thu 30 Apr 2026 19:54:18 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154456
IP address blocks:        36.50.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
                          rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
        Validity
            Not Before: Apr 30 19:54:18 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69f3b36a-aac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:a1:69:a7:03:4a:4c:a1:b1:f7:7c:24:33:
                    e3:ce:03:f7:35:00:0c:27:35:c6:50:29:44:d7:3c:
                    1c:64:f7:f7:79:bc:26:8b:c6:e1:ca:ea:2c:0c:09:
                    c7:e7:09:64:b2:0e:92:b8:59:0f:5e:8e:5c:54:2c:
                    60:07:9c:f9:d7:09:fc:d3:17:6b:29:ad:67:fc:2c:
                    e0:46:84:a1:26:38:44:58:7f:8a:09:1b:9f:21:2f:
                    17:16:4a:3c:b8:fe:9e:7b:70:b7:12:ce:2a:3f:34:
                    46:08:1b:8f:08:bf:dd:ea:12:fe:6e:32:80:0e:2d:
                    93:21:38:2c:c4:c9:50:bb:2f:c0:11:10:2a:3c:b4:
                    c4:fd:c3:65:c8:43:a8:51:df:c7:f4:7f:a1:7a:89:
                    bb:ed:28:0a:a3:1c:91:f8:6f:fa:a8:15:82:cc:34:
                    99:b8:ce:52:97:99:4e:8b:f9:b3:62:4b:76:a6:31:
                    be:26:ea:dd:71:05:6d:79:4b:a5:a2:1b:d9:9b:93:
                    2b:37:6a:b3:d9:fe:31:95:f4:b9:10:9c:31:86:29:
                    0b:30:30:78:34:28:c2:ef:5c:66:39:0a:43:e5:8f:
                    49:76:92:bc:f9:1d:29:29:08:db:91:dd:a7:29:42:
                    05:a7:59:5b:dd:84:38:df:48:63:fb:cc:7c:7a:3d:
                    04:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:08:CA:C6:6E:A8:D2:3C:C4:04:74:64:92:EF:96:28:8A:A8:C9
            X509v3 Authority Key Identifier:
                keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/5FAC3CB644CE11F19BD95499BE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:f6:1d:f5:a3:82:ed:fe:0d:7d:8e:84:ec:40:c7:71:8d:
         d5:1b:56:66:10:41:44:1d:d3:9e:38:9e:50:40:ab:c1:47:9f:
         e3:b8:6f:9b:9d:00:fa:32:d2:15:ed:1a:d0:ee:bd:9e:55:70:
         8b:13:e7:36:f6:70:20:31:74:b2:f6:92:7d:b9:a3:bd:18:a4:
         b4:f2:7f:17:f0:d6:4e:f2:19:f5:3d:24:79:78:b7:f2:c1:b8:
         c0:63:9f:87:01:89:e8:1a:12:c6:5e:70:e1:d1:be:13:fd:4b:
         25:25:fb:74:b5:0b:f3:50:56:0e:bc:d5:88:14:b7:b2:9a:1d:
         12:0e:41:ca:65:36:e5:bb:d6:da:ec:15:ed:01:17:9e:d2:8f:
         37:03:3c:f7:3f:03:6e:c2:a3:ce:99:57:bb:d3:0e:0f:22:8d:
         99:78:1b:75:64:f8:b4:14:66:c7:85:e6:db:84:cd:86:40:b4:
         6f:8f:c6:f7:7f:2e:98:33:ad:01:b1:ce:cd:d2:43:71:a1:00:
         3a:eb:2e:e8:2e:bd:fa:51:05:e3:36:54:17:d3:88:91:82:63:
         47:87:2b:04:c9:63:a0:33:fc:6e:ff:8b:0e:5d:6d:4a:b8:1f:
         a7:c7:7a:03:1f:6f:3a:47:e5:68:7d:a6:4f:dc:f1:0d:c7:23:
         fa:48:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:05 2026 by rpki-client