Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/49433A68FF0C11F0A96F3AB880EE528E.roa
File:                     49433A68FF0C11F0A96F3AB880EE528E.roa (raw, json)
Hash identifier:          mm3r3H3Kr9SQVz1Lp36aTDk5H96q7nAcMMv3K5QJ6Lk=
Subject key identifier:   F8:42:E9:D1:02:FA:C8:DE:29:66:5D:EB:DC:31:36:B5:2E:25:8C:5E
Certificate issuer:       /CN=A9119850/serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347
Certificate serial:       032F
Authority key identifier: 7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/49433A68FF0C11F0A96F3AB880EE528E.roa
Signing time:             Sun 01 Mar 2026 17:52:10 +0000
ROA not before:           Tue 03 Feb 2026 01:20:53 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     58952
IP address blocks:        116.206.136.0/22 maxlen: 22
                          116.206.136.0/24 maxlen: 24
                          116.206.137.0/24 maxlen: 24
                          116.206.138.0/24 maxlen: 24
                          116.206.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl
                          rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119850, serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347
        Validity
            Not Before: Feb  3 01:20:53 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a47cca-286e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:88:cc:0b:44:c4:c8:ba:8e:df:f6:fa:06:a4:
                    10:f0:e2:78:e0:35:11:44:f7:4b:53:aa:e8:99:38:
                    7a:39:52:4c:f7:6d:95:97:71:5b:95:d5:c0:6b:86:
                    f7:2b:13:a4:3b:82:00:0b:8f:dd:bb:a6:e2:b6:1e:
                    5d:93:ac:15:0b:45:d8:2a:07:88:38:b4:5c:fd:18:
                    81:be:72:9d:1d:53:34:cb:e8:12:4c:f2:87:ab:55:
                    1d:37:d9:54:60:da:0e:e6:3d:ed:1e:06:c1:9b:9c:
                    84:de:92:f1:6b:75:8b:c0:ae:4f:54:5f:b8:ea:10:
                    0f:80:b2:62:de:68:9e:16:cd:0c:17:80:85:09:02:
                    42:e7:c7:26:bc:70:b5:66:32:5e:31:3c:2a:65:25:
                    dc:06:cd:f2:6d:73:e4:c6:f4:01:28:94:40:a5:82:
                    f3:07:90:fe:71:9c:4a:11:15:40:d7:53:bf:5d:f7:
                    2c:a8:ce:64:4c:ea:35:d3:55:72:e3:7a:97:e3:cf:
                    90:68:ac:f9:ca:b4:e0:a2:d7:ec:c6:4d:58:1f:d6:
                    88:20:1e:69:c3:a9:43:1c:8e:5a:45:09:5c:22:a0:
                    29:f1:59:b1:29:c1:76:23:55:2d:e9:63:44:39:c6:
                    26:13:e8:87:32:41:47:c0:9f:bf:40:84:46:6d:a6:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:42:E9:D1:02:FA:C8:DE:29:66:5D:EB:DC:31:36:B5:2E:25:8C:5E
            X509v3 Authority Key Identifier:
                keyid:7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/49433A68FF0C11F0A96F3AB880EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:18:c4:a7:c6:2e:9f:e8:d1:15:1c:08:43:9b:cc:fe:c9:
         ee:d7:07:03:8a:12:fd:6a:56:cc:94:20:d5:99:42:82:85:f5:
         79:5f:bb:2d:5a:55:5c:ac:8c:fe:92:3c:05:c3:a8:0b:00:e3:
         97:28:ad:50:43:01:1c:bb:24:bf:6e:99:fd:0f:74:a7:7b:93:
         04:d4:87:f2:2e:26:22:fe:52:84:34:47:7a:1e:62:46:21:6f:
         b4:16:fc:96:3f:8c:1b:75:ac:af:27:5c:18:19:00:10:b5:11:
         20:d6:fa:67:ce:fb:f7:be:6f:b5:31:73:2b:80:81:5b:27:38:
         06:d0:26:42:c9:4f:d6:33:05:dd:49:7f:03:8e:a4:a0:53:0f:
         95:cd:14:fa:e5:e2:18:88:dc:10:da:a5:f1:cb:27:ab:e1:bf:
         42:c7:a4:96:8e:23:d8:1b:1a:8c:eb:27:95:99:58:6c:ea:66:
         94:24:b9:53:c1:88:0c:a6:59:26:ad:00:64:f5:fc:86:56:e7:
         f1:8c:3e:91:ed:a0:c8:ef:b8:9c:e5:62:68:b8:35:6c:3d:5c:
         e9:f3:cb:f9:af:fb:b9:a3:b7:db:a3:29:7b:47:6e:5d:95:ac:
         3a:e2:c6:98:36:12:fa:13:5a:5c:62:b8:c0:da:e1:99:66:37:
         cd:4d:9c:f9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk4NTAxMTAvBgNVBAUTKDdGMjdBNzg4REMwQzEyMDQxNzAyQzc5NkM2REQ1QTE3
NDQwMUYzNDcwHhcNMjYwMjAzMDEyMDUzWhcNMjYwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2NjYS0yODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7YjMC0TEyLqO3/b6BqQQ8OJ44DURRPdLU6romTh6OVJM922Vl3FbldXAa4b3
KxOkO4IAC4/du6bith5dk6wVC0XYKgeIOLRc/RiBvnKdHVM0y+gSTPKHq1UdN9lU
YNoO5j3tHgbBm5yE3pLxa3WLwK5PVF+46hAPgLJi3mieFs0MF4CFCQJC58cmvHC1
ZjJeMTwqZSXcBs3ybXPkxvQBKJRApYLzB5D+cZxKERVA11O/XfcsqM5kTOo101Vy
43qX48+QaKz5yrTgotfsxk1YH9aIIB5pw6lDHI5aRQlcIqAp8VmxKcF2I1Ut6WNE
OcYmE+iHMkFHwJ+/QIRGbabY6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPhC6dEC
+sjeKWZd69wxNrUuJYxeMB8GA1UdIwQYMBaAFH8np4jcDBIEFwLHlsbdWhdEAfNH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTg1MC9GRTE5RUE2QzA3
MkMxMUVEQkQ0MTVFMTNDNEY5QUUwMi9meWVuaU53TUVnUVhBc2VXeHQxYUYwUUI4
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z5ZW5pTndNRWdRWEFzZVd4dDFhRjBRQjgwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTk4NTAvRkUxOUVBNkMwNzJDMTFFREJENDE1RTEzQzRGOUFFMDIvNDk0MzNBNjhG
RjBDMTFGMEE5NkYzQUI4ODBFRTUyOEUucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCdM6IMA0GCSqGSIb3DQEBCwUAA4IBAQAAOhjEp8Yun+jRFRwIQ5vM
/snu1wcDihL9albMlCDVmUKChfV5X7stWlVcrIz+kjwFw6gLAOOXKK1QQwEcuyS/
bpn9D3Sne5ME1IfyLiYi/lKENEd6HmJGIW+0FvyWP4wbdayvJ1wYGQAQtREg1vpn
zvv3vm+1MXMrgIFbJzgG0CZCyU/WMwXdSX8DjqSgUw+VzRT65eIYiNwQ2qXxyyer
4b9Cx6SWjiPYGxqM6yeVmVhs6maUJLlTwYgMplkmrQBk9fyGVufxjD6R7aDI77ic
5WJouDVsPVzp88v5r/u5o7fboyl7R25dlaw64saYNhL6E1pcYrjA2uGZZjfNTZz5
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:09 2026 by rpki-client