Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/041950007AF711F1B5389C4A7CA30FBC.roa
File:                     041950007AF711F1B5389C4A7CA30FBC.roa (raw, json)
Hash identifier:          ZQm4gg0UcoRXA3T9IbH6qYG20ZeLgRrEo6RJPrcej1U=
Subject key identifier:   91:F3:3A:43:3B:4B:00:88:21:D7:A9:4E:D9:28:24:35:F5:EC:20:DD
Certificate issuer:       /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial:       01F5
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/041950007AF711F1B5389C4A7CA30FBC.roa
Signing time:             Wed 08 Jul 2026 18:01:17 +0000
ROA not before:           Wed 08 Jul 2026 18:01:17 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138622
IP address blocks:        36.50.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
                          rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
        Validity
            Not Before: Jul  8 18:01:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a4e906d-d966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:80:ae:03:4c:70:ce:f9:b0:54:50:65:8d:
                    67:28:d0:12:b9:80:08:eb:e0:cb:f2:57:60:46:bf:
                    52:cc:75:c2:c3:80:6d:ec:ad:f3:18:43:cc:44:5a:
                    17:cc:62:e4:7a:06:1e:1e:96:3a:3e:cc:d5:9f:21:
                    1b:e1:7c:64:7b:38:32:29:00:99:fb:2b:46:88:0a:
                    28:4d:aa:22:9e:f6:ee:aa:03:6c:e5:9a:45:fe:08:
                    bb:4e:2d:81:ce:33:c9:fb:ca:6d:5e:10:14:18:da:
                    95:67:dc:df:89:b3:4a:6d:c2:65:c1:e5:ad:8b:8b:
                    fe:1c:f9:ff:65:9f:4b:62:6a:10:72:16:8e:85:17:
                    26:37:bc:d8:8d:a5:7b:11:e4:19:77:b1:59:10:66:
                    aa:2f:64:ac:9b:ce:09:03:51:4d:d9:6f:7d:3a:31:
                    3d:72:b8:f7:3d:e8:7a:7d:a7:02:76:9b:2b:df:16:
                    c7:20:22:5f:bc:b4:0f:ca:0f:18:55:75:c7:bd:67:
                    a3:fe:f1:ff:43:38:0b:4e:47:a0:5b:18:b3:ce:c1:
                    a7:c0:c2:43:be:65:41:f7:35:3e:89:20:79:79:9a:
                    b1:4e:71:83:a2:5c:1d:02:a9:23:23:18:9d:41:19:
                    f9:37:25:d5:a2:2f:41:66:43:b6:ef:5d:db:77:48:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F3:3A:43:3B:4B:00:88:21:D7:A9:4E:D9:28:24:35:F5:EC:20:DD
            X509v3 Authority Key Identifier:
                keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/041950007AF711F1B5389C4A7CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:a9:2d:eb:eb:9f:76:50:9f:56:58:e1:c0:4e:6b:e3:7c:
         b0:b8:9e:09:38:9b:ff:04:4e:a5:15:5d:a9:70:40:93:b3:3c:
         a6:29:59:a9:47:b1:36:00:a7:31:ca:d9:34:2b:e9:10:4e:8c:
         5c:03:88:22:a1:7a:7c:10:7a:22:f7:08:d7:03:90:72:e5:1b:
         64:3a:c5:12:7f:49:2a:d7:ef:02:7b:32:49:41:fc:39:57:de:
         4e:da:3c:85:d5:14:61:9e:37:93:7d:cb:f1:8f:a8:46:d0:51:
         6d:38:97:4f:4a:17:f4:46:a5:6b:63:a5:34:9c:10:2a:1f:62:
         78:2f:4f:73:d2:ac:e3:fb:e3:af:11:02:00:2d:53:0e:5d:47:
         7d:69:6d:31:1f:c5:b0:c5:fc:28:2f:42:be:f0:1a:eb:1c:06:
         33:77:a5:bb:84:2a:b4:5f:93:29:10:19:67:a1:d2:7b:77:6e:
         df:75:89:ee:ef:e9:0a:60:d4:87:b8:b5:29:9a:d5:74:6d:55:
         58:42:6e:8f:c3:3b:cb:d4:89:54:75:12:50:d6:78:1a:dc:5f:
         a2:7a:98:8c:7f:a0:87:18:0b:1f:a1:be:62:c1:8c:5c:29:96:
         be:2e:2d:75:c4:c7:40:06:d8:cf:43:50:c0:b8:b4:58:5e:5b:
         95:92:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:08 2026 by rpki-client