Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa
File:                     DC50B57AE84511EB87AD6B49C4F9AE02.roa (raw, json)
Hash identifier:          A1JJHlqgLeycmUKsITWH6CZ+L2789FVfnYoijesk8IU=
Subject key identifier:   97:58:60:B5:3D:4A:5A:09:A1:8B:6E:1E:EE:28:8D:EE:9D:58:10:59
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       3538
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:11:02 +0000
ROA not before:           Wed 02 Apr 2025 14:40:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132890
IP address blocks:        182.54.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Apr  2 14:40:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a42cd5-65aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:81:a5:a3:39:7a:59:47:98:4a:c0:b2:e7:63:
                    bb:00:3a:74:c8:9c:94:16:ce:59:cf:c7:eb:bd:45:
                    a3:d9:6d:4c:68:cf:c2:05:f7:b3:fb:02:d1:19:db:
                    fb:38:4f:d7:3a:5e:6f:01:ea:4c:f9:ae:1f:aa:e0:
                    1f:b7:a9:8d:ad:51:26:8e:c0:05:2c:e8:6b:b0:54:
                    2b:4c:57:c1:8d:2f:d1:85:35:41:29:3c:f3:e8:75:
                    0f:0d:92:c2:30:a0:34:bd:96:af:fd:19:f6:ec:9b:
                    00:0c:20:b8:f2:c1:45:0d:84:51:62:58:a6:35:55:
                    ae:15:44:f5:e8:0e:bf:12:d3:71:6f:87:c3:7b:bd:
                    46:72:8e:88:d8:fb:6f:b1:ba:34:88:cc:c0:d2:36:
                    3f:ce:84:78:59:28:e7:7d:eb:40:72:f2:eb:33:31:
                    4c:04:79:58:10:c1:a9:e5:57:63:ef:be:6a:47:8b:
                    fe:29:4d:3a:ef:da:78:40:bf:85:59:4c:8d:b6:22:
                    12:bf:a7:47:47:9a:da:7c:13:8c:60:64:15:52:53:
                    a5:e6:70:21:b4:cd:09:62:07:0b:e7:e1:f7:3b:47:
                    11:8f:ff:b2:35:60:42:71:21:1b:31:47:c7:01:fa:
                    e3:1b:1c:3a:24:05:b5:af:61:fa:35:64:a4:dc:2e:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:58:60:B5:3D:4A:5A:09:A1:8B:6E:1E:EE:28:8D:EE:9D:58:10:59
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:64:81:ed:c4:79:da:af:3b:cb:45:ef:b5:32:eb:fb:c9:79:
         87:aa:10:38:a8:e4:c4:9d:0e:62:19:b3:ff:1f:25:ef:c8:f0:
         d9:fe:1b:8e:81:83:70:31:b6:21:01:4a:e6:af:2e:3b:df:36:
         3e:ff:71:a5:ac:96:06:68:62:89:64:0f:6f:3b:07:38:91:13:
         3c:e8:06:ef:84:7c:c0:29:ae:2a:72:cd:34:2a:2f:4f:c5:81:
         75:32:4a:d7:bc:e4:f0:6c:84:ed:36:2e:dc:39:f1:77:80:9e:
         9b:74:31:17:0a:e9:32:70:dd:17:0c:b2:0f:24:84:be:03:9d:
         37:68:63:4e:d2:3b:26:92:ef:c1:ca:56:da:3c:46:0e:b7:0b:
         f2:03:db:68:bb:b4:52:75:9d:e0:2f:ac:3e:d8:a0:d6:5f:3f:
         33:7b:f9:0c:81:a2:99:b0:26:44:d9:15:16:d3:73:43:a4:97:
         ec:17:be:7e:3f:8e:e3:39:6f:6d:3a:bb:01:06:30:d8:4b:b1:
         0e:4e:99:98:82:17:5d:3d:5e:13:24:7d:dc:d1:14:06:09:0c:
         8d:51:b2:30:f0:36:da:f7:aa:0c:0c:77:aa:59:da:ba:20:3e:
         53:10:43:c1:53:41:ef:fd:42:fe:44:99:b4:c6:67:60:d5:b2:
         ff:24:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:43 2026 by rpki-client