Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/D13703C6BF4611EE9ECAAC65C4F9AE02.roa
File:                     D13703C6BF4611EE9ECAAC65C4F9AE02.roa (raw, json)
Hash identifier:          kEA6yeUhDISU7WpJDe7H86w819sEogR4lALDsAB0ROU=
Subject key identifier:   32:01:B4:E9:D6:6C:97:18:43:19:72:0E:61:7F:90:63:CB:67:E1:EA
Certificate issuer:       /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial:       018F
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/D13703C6BF4611EE9ECAAC65C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:31:14 +0000
ROA not before:           Wed 07 Jan 2026 03:23:00 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152160
IP address blocks:        36.50.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
                          rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
        Validity
            Not Before: Jan  7 03:23:00 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a59122-7c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:ff:fb:0c:75:ea:a5:c0:3c:da:79:24:7e:
                    df:74:8b:93:02:55:58:6a:d6:f5:ad:eb:cd:d5:8a:
                    5f:50:0f:b3:d9:a7:39:e6:80:fa:cd:ba:24:f8:81:
                    ef:40:ad:d4:64:f7:29:bd:17:3d:c4:8b:15:7d:90:
                    81:7d:c8:4b:30:99:88:4e:91:60:6b:ad:d9:b1:79:
                    04:8f:e5:74:f6:73:09:a3:46:02:f3:6d:ff:88:8d:
                    90:d4:7c:44:2d:4d:a3:df:66:2e:4d:c5:60:34:55:
                    6a:01:12:72:49:d5:fa:40:01:d8:5b:27:df:46:e1:
                    d7:ad:47:43:82:94:45:3b:12:33:74:f0:42:5e:01:
                    f0:85:60:c3:18:51:9a:2f:e3:93:59:3c:89:f3:a1:
                    a7:bc:4f:04:8e:fb:77:56:88:35:4d:46:56:4f:95:
                    7b:54:07:6c:01:05:9c:2b:7f:c5:e1:91:37:74:84:
                    d0:63:e1:4c:6e:6b:94:a9:75:3e:cc:f5:64:2a:bf:
                    1f:71:81:8f:3a:b5:1a:56:c5:5b:d3:26:11:c4:97:
                    39:a3:48:a0:6b:cb:e1:a1:7e:0b:73:ee:87:99:e4:
                    ba:22:3a:ba:4c:30:f1:4b:a7:75:64:f1:db:96:d0:
                    19:3e:2e:27:cc:05:a8:60:e3:70:cd:e4:3c:f0:ac:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:01:B4:E9:D6:6C:97:18:43:19:72:0E:61:7F:90:63:CB:67:E1:EA
            X509v3 Authority Key Identifier:
                keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/D13703C6BF4611EE9ECAAC65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:bb:4b:40:ca:73:59:15:00:5d:ff:10:b5:e6:54:87:d5:c2:
         b4:dd:4f:56:d1:b7:b0:ae:e7:86:f3:24:41:01:a3:2a:17:d5:
         92:cb:43:1c:6b:9f:7a:da:3f:13:77:1a:ff:db:5a:af:86:0b:
         e5:a5:c1:aa:6e:3d:60:f2:fb:b1:47:19:4e:44:01:81:03:4b:
         f7:d5:41:4f:2f:73:04:41:23:f8:ad:51:f8:e7:98:6b:58:0f:
         13:7b:c0:bd:c4:49:29:f4:a4:17:f1:ba:b6:2d:f2:af:42:99:
         f7:85:45:39:cf:e7:f8:c2:9c:f7:08:33:31:09:9b:e7:38:4b:
         c6:04:74:11:4b:90:b9:f8:b8:a4:f2:f0:79:43:10:ba:9d:7e:
         e8:52:de:88:d3:2a:21:dd:6a:d7:31:93:cd:39:3c:5d:34:7d:
         0a:48:5d:32:3f:56:b3:52:f0:60:8b:c0:c7:ee:90:b9:3c:6c:
         4f:7c:98:c7:fe:c3:d3:86:da:b2:2e:a1:00:4b:e6:6a:0b:33:
         6e:95:d6:12:14:6f:1c:c4:2e:53:41:6a:ee:40:f9:a4:54:11:
         6e:30:b8:08:65:da:05:a3:d4:dc:66:8c:a1:16:e8:82:26:32:
         f0:11:33:d3:81:4f:41:45:a2:ab:fd:c3:c7:b6:c3:cb:9b:5b:
         36:1d:f7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:31 2026 by rpki-client