Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa
File:                     56EC4CB4927911EFABEC2D46C4F9AE02.roa (raw, json)
Hash identifier:          Y02mgS5DNy58XveykHiaUrFKd9w7Z1qSSkg1uUTw9f8=
Subject key identifier:   E7:04:12:29:D1:B1:8E:D1:66:BD:32:E9:83:C0:EB:6B:23:83:28:4B
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       054B
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa
Signing time:             Thu 07 May 2026 06:15:26 +0000
ROA not before:           Thu 07 May 2026 06:15:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9891
IP address blocks:        147.50.224.0/19 maxlen: 19
                          147.50.224.0/22 maxlen: 22
                          147.50.226.0/23 maxlen: 23
                          147.50.228.0/24 maxlen: 24
                          147.50.230.0/24 maxlen: 24
                          147.50.231.0/24 maxlen: 24
                          147.50.232.0/22 maxlen: 22
                          147.50.232.0/23 maxlen: 23
                          147.50.232.0/24 maxlen: 24
                          147.50.234.0/23 maxlen: 23
                          147.50.236.0/23 maxlen: 23
                          147.50.239.0/24 maxlen: 24
                          147.50.240.0/22 maxlen: 22
                          147.50.246.0/24 maxlen: 24
                          147.50.247.0/24 maxlen: 24
                          147.50.248.0/22 maxlen: 22
                          147.50.254.0/24 maxlen: 24
                          147.50.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: May  7 06:15:26 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69fc2dfe-814d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5a:67:09:38:ec:4b:31:fa:2c:b0:dc:6e:3b:
                    78:13:90:1d:39:29:a3:a6:58:4c:00:d1:66:af:ab:
                    aa:0b:75:df:9e:9a:b4:7e:e9:c5:fb:8e:58:c1:dd:
                    3a:3d:ed:93:0f:53:97:9c:0c:cd:56:00:45:a9:6c:
                    b1:07:63:3e:2c:2f:0e:45:e1:20:18:03:3d:63:75:
                    d1:df:f1:a4:ca:2e:67:68:4e:3a:f2:bf:f7:3d:52:
                    df:47:21:09:83:49:13:f8:ae:3e:32:9c:3c:a8:6a:
                    6d:80:e5:82:3a:35:6e:7e:86:a9:7c:c3:b6:bd:90:
                    24:c0:b6:4b:9d:77:ae:74:98:7c:d6:31:a8:32:63:
                    e7:2f:be:63:f6:94:30:cc:42:13:cb:1d:67:e6:c5:
                    aa:de:99:bd:76:24:a3:e0:5d:4d:2f:c8:c6:a0:3c:
                    98:79:a2:95:6a:12:05:f1:45:4f:55:19:96:16:ba:
                    db:93:e7:de:f9:50:a7:ad:24:97:2d:8c:27:b3:51:
                    0c:68:05:f0:52:f3:6f:22:ea:6c:9a:a8:c0:7c:4f:
                    6b:31:aa:cd:47:23:e3:c6:43:6a:58:a4:66:99:34:
                    85:5e:e6:41:f6:8e:dd:37:4a:18:23:60:40:70:b9:
                    e2:58:3c:84:f5:eb:0e:75:27:b1:f9:dd:2e:66:2c:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:04:12:29:D1:B1:8E:D1:66:BD:32:E9:83:C0:EB:6B:23:83:28:4B
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b6:85:49:5a:b2:fc:d2:99:f7:72:0a:fe:66:b4:b9:78:9c:81:
         33:8c:0d:de:82:07:af:0d:e2:27:0f:b2:f1:73:9d:9e:34:8d:
         94:47:0c:a6:b7:14:21:b2:00:ba:c4:bf:b1:59:fb:f7:31:36:
         01:44:9a:bb:7a:11:18:1e:2d:03:e7:27:7a:ec:34:a7:64:54:
         62:c4:02:b1:e6:14:10:aa:0f:b9:25:f5:6b:60:20:3f:90:02:
         17:2d:db:1a:e5:b7:15:70:e5:ac:59:05:c4:d8:96:a8:78:f1:
         5f:ee:e1:5d:f5:85:1e:35:ac:9d:0f:cb:c1:ba:8c:57:1b:13:
         a3:ec:c4:7b:fe:f7:74:8d:41:44:b0:98:49:78:06:61:c6:cf:
         43:57:97:f6:3e:76:9e:d5:9b:46:a4:48:90:ac:19:34:50:5d:
         39:60:59:11:cc:45:08:63:af:fe:ce:d0:fb:2c:fe:5b:08:2f:
         56:23:2e:b0:8a:1b:52:2d:68:1d:bb:44:bd:e4:f7:9f:a9:60:
         59:71:40:e1:6b:5b:2d:24:1a:8e:c5:95:c6:2b:6e:ae:c4:fa:
         e1:27:e9:ed:d2:63:3d:3c:d1:0b:b9:06:26:bc:44:cf:aa:59:
         85:76:af:6e:6b:9e:d2:f7:14:a8:23:3d:b9:f3:83:ba:ac:6d:
         49:cc:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:57 2026 by rpki-client