Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa
File:                     A7CEC08691E611F0A8D76134C4F9AE02.roa (raw, json)
Hash identifier:          rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=
Subject key identifier:   34:BB:0C:B9:1F:6C:3C:EA:E7:22:A5:F7:2F:21:34:FD:8F:93:DC:72
Certificate issuer:       /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Certificate serial:       68
Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:02:47 +0000
ROA not before:           Mon 15 Sep 2025 03:47:09 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141217
IP address blocks:        122.50.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
                          rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
        Validity
            Not Before: Sep 15 03:47:09 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a5a696-8b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:24:f2:71:f1:6d:96:d6:52:48:a0:b8:8c:
                    f3:15:54:7f:7c:c2:4e:4c:e0:66:ba:62:da:d3:e5:
                    73:32:50:77:2d:05:86:a8:08:95:e2:18:89:26:a7:
                    73:d1:86:6a:52:e2:10:86:b2:2c:ab:93:9d:6d:66:
                    2d:98:4a:89:5e:c1:fd:08:07:01:bb:52:4b:49:5e:
                    ed:9d:93:6b:b5:cc:4f:9a:c8:de:b7:fd:48:d9:db:
                    a9:69:c3:ac:fc:94:ae:ae:28:6a:bc:3a:54:a0:cc:
                    fa:83:22:32:a2:04:63:83:e4:5e:97:37:ae:2d:61:
                    cb:6d:73:38:42:80:a5:6a:a6:21:48:83:e1:7d:78:
                    96:cd:6e:90:00:4a:f8:be:b8:03:ea:e4:39:c6:34:
                    0a:46:83:c0:de:13:31:3e:10:9b:0d:ba:cd:69:7c:
                    25:2f:fb:11:4f:0e:b9:89:7d:68:79:f9:b6:e4:9e:
                    47:a3:72:55:e4:52:05:17:81:a7:3d:a7:37:9f:5e:
                    1c:f3:7e:2a:e3:d6:09:d8:68:3e:52:56:93:0e:a3:
                    b8:ae:7f:39:43:c6:86:92:7d:6d:56:06:1a:fb:0e:
                    be:48:fb:73:42:96:85:08:a6:fc:dc:fe:7a:53:24:
                    de:c6:e2:8c:bc:67:c9:fe:f5:b7:b1:30:08:e5:94:
                    bd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:0C:B9:1F:6C:3C:EA:E7:22:A5:F7:2F:21:34:FD:8F:93:DC:72
            X509v3 Authority Key Identifier:
                keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:65:bd:97:67:75:6d:8f:18:c0:e4:f8:49:60:7d:b6:50:cb:
         69:c9:c5:4d:a3:34:17:c7:ef:6b:75:14:a1:61:a3:72:2f:3b:
         82:f3:6c:00:a8:03:c1:38:21:5a:6e:4d:aa:90:82:7d:82:73:
         ba:2e:ed:11:c4:f8:b5:d8:e2:4f:fb:69:21:a9:d8:bc:3f:61:
         1b:46:93:e6:9c:27:17:0f:3c:3c:76:00:fb:bb:7c:74:56:fc:
         4b:dd:b3:27:f6:46:82:66:a5:92:74:f0:a1:7f:b3:5e:03:2c:
         22:f9:7c:99:2a:1e:77:10:77:f8:e3:e4:99:0d:70:3b:da:1f:
         ff:b1:77:98:4b:7e:c3:b1:c7:af:44:78:9c:09:bc:16:cc:d1:
         5a:11:bd:a7:70:d7:93:bb:fc:19:71:7a:48:c4:63:50:35:91:
         64:f7:f9:d3:14:45:ff:e6:ef:03:78:ef:ec:11:c3:25:bc:8c:
         e8:ed:ab:eb:28:8e:5e:e3:39:36:03:59:d8:55:d4:45:7f:22:
         3e:17:97:97:a0:f2:17:b8:58:05:56:2b:e2:2c:fc:8d:18:f8:
         dc:ec:39:49:e3:2f:18:80:02:85:4a:f8:66:4e:85:c9:3f:d2:
         2e:81:60:cf:24:bc:99:b8:82:77:f1:a0:4e:5e:18:83:06:b9:
         cd:e4:79:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:02 2026 by rpki-client