Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa
File:                     6EAE50E8EBFA11EEA937307AC4F9AE02.roa (raw, json)
Hash identifier:          gqtTgTa/5S3Sd4RP8oatcAFjD99BV64g0IQPdSlFBu0=
Subject key identifier:   D6:F7:8E:DD:88:79:25:BD:8D:B6:B2:B7:9F:C4:14:CC:64:38:60:C8
Certificate issuer:       /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial:       0178
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:03:32 +0000
ROA not before:           Sun 07 Dec 2025 03:12:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142636
IP address blocks:        36.50.59.0/24 maxlen: 24
                          36.50.59.0/25 maxlen: 25
                          36.50.59.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
                          rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
        Validity
            Not Before: Dec  7 03:12:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5a6c4-f1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:4e:b7:7f:76:e0:39:cd:6b:c5:28:24:ad:
                    d2:ff:95:63:f8:37:91:3a:1b:93:03:94:20:e1:6d:
                    1b:d0:46:fa:1e:46:36:b5:8d:32:12:4b:7e:61:17:
                    39:a8:e2:8a:99:09:05:ca:cc:c6:32:40:8c:b3:b3:
                    72:f7:c1:ae:25:cb:24:b5:06:f7:7f:2c:32:b7:9a:
                    20:dc:be:b0:20:96:93:09:7a:54:9d:70:98:65:48:
                    ed:ea:7d:71:95:3a:ee:c3:f1:b3:b2:f0:09:87:bd:
                    b1:bc:a4:0e:23:26:b9:f2:b5:5f:e6:01:27:40:c4:
                    de:a1:d9:71:0b:21:e2:47:06:3c:b0:25:35:94:4f:
                    d1:50:cb:34:f5:ec:c7:00:61:d6:0e:df:a9:c4:cf:
                    d3:32:43:67:32:99:ca:7e:15:76:63:4f:7d:b2:df:
                    72:4c:a1:e0:d4:90:c7:93:a4:55:ec:01:f1:40:de:
                    83:09:f3:8f:c7:49:22:8f:b7:b7:ab:dd:64:d3:09:
                    c4:49:52:3b:9b:b0:f1:d1:7e:95:19:d3:07:bc:a1:
                    05:c2:9d:26:ef:9a:9b:0a:55:e6:5f:64:5a:94:32:
                    f0:b0:56:01:f6:cf:8e:54:64:44:7f:db:8c:47:6b:
                    72:82:0b:9a:73:9c:05:fd:e4:a7:e2:35:aa:0b:3c:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:8E:DD:88:79:25:BD:8D:B6:B2:B7:9F:C4:14:CC:64:38:60:C8
            X509v3 Authority Key Identifier:
                keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/6EAE50E8EBFA11EEA937307AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:49:80:54:02:ca:ab:78:c6:90:fa:6c:3e:2a:1a:d4:88:
         49:1d:b8:73:11:9a:6e:e4:e5:72:4a:5c:2c:40:81:79:c9:25:
         dc:a3:6c:b2:24:21:63:19:7e:02:23:05:a3:08:0b:c8:45:03:
         61:33:d8:0f:cc:85:15:3e:32:88:8d:90:b4:6a:f7:50:e7:9a:
         2b:cf:1a:8c:38:9e:99:fd:f8:1f:6e:09:a3:04:67:c4:a0:13:
         d8:72:67:16:56:59:20:54:dd:6a:9c:ba:2a:99:cc:27:d2:c8:
         b9:a3:44:7b:57:bd:63:65:b0:0a:0c:92:a4:16:56:74:9b:99:
         fe:26:fc:96:03:0f:bd:c1:35:9b:98:3f:a9:b9:9b:8d:a8:1b:
         b2:2f:f8:ac:b8:d8:d6:35:00:c1:4f:38:1a:81:a4:eb:ee:bd:
         ea:c1:53:03:8f:53:6d:57:3d:05:93:8a:bf:49:ae:16:40:33:
         1d:f6:e4:6f:3a:34:c0:4b:5f:c0:29:2b:54:ee:0f:2d:fb:a1:
         f3:c7:d5:81:ed:b1:c0:9c:8f:3c:8a:e6:2e:10:59:d5:c8:1e:
         4f:a4:cd:9a:30:fe:8d:18:41:2e:99:6b:ea:cb:51:b9:e2:85:
         ef:08:f5:96:2d:d1:36:14:1b:eb:ae:f6:a2:48:03:56:6c:5f:
         26:a1:33:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:59 2026 by rpki-client