Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/C93C3BD2BF1211F0825A8B67C4F9AE02.roa
File:                     C93C3BD2BF1211F0825A8B67C4F9AE02.roa (raw, json)
Hash identifier:          n9/IQR0BwLZbi9yJcCTUnntLY2aytZXC8mDV+WP0G4o=
Subject key identifier:   7D:D7:1F:E5:93:47:52:A5:01:53:53:63:92:0B:0C:24:52:CA:F7:66
Certificate issuer:       /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial:       0206
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/C93C3BD2BF1211F0825A8B67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:32:11 +0000
ROA not before:           Sat 13 Dec 2025 03:02:52 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134146
IP address blocks:        36.50.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
                          rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
        Validity
            Not Before: Dec 13 03:02:52 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4781b-1420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:0c:13:be:2d:6d:33:9c:cc:18:9b:65:55:
                    58:77:b6:d0:a8:db:b0:78:22:f8:c6:12:78:75:7f:
                    0e:62:9f:37:fc:aa:6b:82:c8:4d:7c:df:2e:22:b7:
                    1d:ad:37:42:13:29:48:42:c9:31:bd:33:11:1e:e2:
                    32:fa:d1:96:d7:b2:8c:8e:58:7f:85:2a:fd:36:2d:
                    eb:17:d2:81:ec:4e:68:41:aa:fa:f6:a8:55:9e:fa:
                    bf:00:19:c0:94:b2:9c:02:c1:39:1f:14:f8:2e:55:
                    4c:e7:c3:23:aa:e4:b2:fc:82:de:f9:c2:10:fa:57:
                    fa:7a:76:0e:61:38:4a:88:af:5c:19:e8:d7:0a:74:
                    64:94:f4:9a:f6:73:f3:0c:64:ae:14:e4:70:0f:5d:
                    1b:c9:ed:73:f3:31:3a:c4:e3:ac:e3:ea:47:33:11:
                    4b:88:9d:1c:2a:90:76:e7:e6:68:0b:c9:81:9f:f6:
                    85:3d:06:47:00:9b:7f:98:ef:b1:0a:48:7a:c9:2a:
                    83:d4:cf:11:ef:98:54:64:d7:0e:84:dc:09:c5:16:
                    70:35:52:ee:b5:82:e3:47:5a:52:e4:b8:df:7c:e3:
                    84:ec:18:4b:a2:8f:1f:9d:c9:d5:8c:38:5e:35:7a:
                    e4:c3:88:95:da:77:b1:a7:1e:29:ad:bd:51:63:45:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D7:1F:E5:93:47:52:A5:01:53:53:63:92:0B:0C:24:52:CA:F7:66
            X509v3 Authority Key Identifier:
                keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/C93C3BD2BF1211F0825A8B67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:83:a6:1f:e2:4d:12:0e:b2:e9:89:8b:3b:ba:5a:ec:56:
         99:68:b7:1b:fb:93:6a:fa:ba:45:24:09:b9:9b:ef:8f:ec:15:
         c4:64:c5:2a:51:31:25:32:9b:84:98:4e:43:9c:c0:b1:1a:8a:
         b4:16:69:e9:6b:56:12:6e:e5:f7:da:25:dc:68:1c:30:0a:d2:
         74:56:79:c8:e4:ca:d4:4b:3d:d7:df:f6:f9:52:b4:14:a4:cb:
         59:b6:14:f6:50:fb:17:7c:c4:85:67:06:4b:17:0d:de:44:18:
         3b:47:dd:4d:83:6e:17:d7:ff:7a:92:51:e5:1c:a2:8e:79:7a:
         59:3b:c0:ea:56:bd:60:a8:90:64:05:98:05:60:53:c9:69:3a:
         01:9c:10:18:b8:ac:52:16:ad:df:a5:44:a4:58:29:92:7f:41:
         2d:2c:57:48:38:ac:b9:26:16:46:eb:4f:44:95:0a:6e:a3:f9:
         6e:cb:42:84:59:7b:b0:11:12:e9:f4:2e:4d:e2:d8:ba:9b:de:
         6e:1b:c6:6a:b5:34:dd:a9:10:ef:39:23:5a:c6:00:4e:4d:79:
         cb:a2:bc:af:a5:47:56:6a:8d:5e:1c:90:dc:7f:e8:da:da:53:
         fa:e9:e4:51:10:2e:d8:b7:91:ef:7c:93:a3:b0:13:75:3c:f0:
         f5:10:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:29 2026 by rpki-client