Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4F89B0D6D86311E9BE55026FC4F9AE02.roa
File:                     4F89B0D6D86311E9BE55026FC4F9AE02.roa (raw, json)
Hash identifier:          7xla8/+CNHO6v0Evjo2k6dWHzIpo8SnRlyB+WzJyHM4=
Subject key identifier:   A1:F0:49:C7:94:91:45:5F:71:68:1D:66:88:8E:E0:4A:76:08:AD:61
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BBC
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4F89B0D6D86311E9BE55026FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:23:01 +0000
ROA not before:           Fri 02 Jan 2026 16:13:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136742
IP address blocks:        49.231.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11196 (0x2bbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:07 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a49215-7e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:50:a3:53:05:98:91:8d:35:c9:89:49:aa:
                    12:80:6f:38:db:a4:92:e9:fb:e4:99:08:41:8e:42:
                    04:cc:50:f5:a3:3f:22:50:7f:4c:66:0b:93:ec:b3:
                    8a:ad:fb:67:d4:3f:e2:c0:f0:2a:cc:2a:ef:23:af:
                    4f:4b:01:d2:c6:14:6f:2c:fb:65:4a:89:d0:fa:49:
                    ed:3e:87:d3:55:51:3e:37:fb:a1:84:2c:5f:08:67:
                    09:32:6e:0f:7f:31:26:c0:d3:4d:f2:b8:a2:b7:72:
                    33:24:52:f4:c1:43:1c:67:e6:a0:6c:d8:af:63:4b:
                    89:a9:1d:d4:38:6b:ac:57:c9:0c:56:6e:c8:9f:25:
                    e4:d7:d6:ab:02:5b:2e:1c:ca:d7:b2:f1:6b:3b:d3:
                    cf:e7:8c:31:72:f8:f0:b3:bd:f8:7d:9d:08:48:8a:
                    0d:62:7d:1f:ef:cb:10:ce:97:27:d8:3d:d1:74:8c:
                    2a:84:8a:1e:47:26:10:dc:49:33:11:53:4c:3a:1d:
                    37:37:be:c8:48:43:68:9a:78:a6:80:32:b8:b1:f1:
                    1c:6b:6c:fa:06:61:69:4e:7f:5f:81:d9:a5:f2:24:
                    64:a2:58:1f:9b:a6:58:ea:af:ae:5a:52:ea:b3:95:
                    2a:38:f5:d9:4f:65:cd:ee:7e:2e:4a:29:2a:7f:5b:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F0:49:C7:94:91:45:5F:71:68:1D:66:88:8E:E0:4A:76:08:AD:61
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/4F89B0D6D86311E9BE55026FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.231.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:60:94:cc:31:7b:67:9c:61:ae:ae:32:0f:bf:b1:ab:1f:e0:
         69:85:b7:16:4b:4c:df:11:75:e5:01:af:24:cf:b3:83:29:37:
         72:86:3d:ed:9d:d6:dd:5d:2e:ee:3f:28:a9:94:14:33:35:dc:
         c1:5c:d9:e0:e8:5f:f4:19:b9:07:a3:ea:a0:f5:18:19:88:c4:
         9a:f6:47:4d:cb:c0:38:79:6d:6e:14:83:2c:99:f1:b0:bd:8f:
         ce:42:d1:e7:64:2f:05:44:d6:e9:e9:31:5a:ab:a2:98:fc:50:
         e0:fd:00:4d:ca:51:d5:2b:e3:41:0c:a0:28:63:f5:8f:52:b2:
         b8:e6:25:bb:3b:f2:fe:8a:f8:4c:91:3b:9b:e3:ce:cc:eb:f7:
         8c:d0:4e:1b:b8:97:fb:93:5f:f9:04:e3:17:0f:fd:d8:cb:61:
         ed:90:cb:d1:98:d1:5e:3b:6d:97:99:f9:ac:2e:e7:e1:03:96:
         4f:2f:89:0c:f6:3b:35:3d:ee:41:f6:4e:e4:11:74:25:26:f1:
         ec:65:58:6d:6e:bc:af:80:df:fa:b3:f2:bb:f1:c2:94:a5:17:
         c4:1c:ea:67:94:9f:4f:65:61:68:be:38:7d:8f:2e:5a:af:5f:
         2f:25:8c:85:e0:bd:ad:e5:3f:7e:13:fc:94:77:81:77:f1:5a:
         b5:76:78:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:51 2026 by rpki-client