Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D9F50A00525011F09EA05B7DC4F9AE02.roa
File:                     D9F50A00525011F09EA05B7DC4F9AE02.roa (raw, json)
Hash identifier:          vVYvXp/EgI7ebz92NWUI0t2SsGY/Jg8gIpFgUZKo6/A=
Subject key identifier:   AF:C2:59:33:09:3B:98:C3:E6:EC:C7:E3:A2:D6:26:D2:2E:E1:CB:E4
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BC2
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D9F50A00525011F09EA05B7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:23:06 +0000
ROA not before:           Fri 02 Jan 2026 16:13:13 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138422
IP address blocks:        49.229.51.0/24 maxlen: 24
                          49.231.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11202 (0x2bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:13 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4921a-bca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bd:c1:51:4d:48:f5:ca:72:f9:c5:35:82:8e:
                    50:63:93:54:8c:7d:04:b8:5f:3b:95:65:37:02:55:
                    42:b8:2f:fa:9b:af:28:a9:24:09:f9:c6:f3:5c:00:
                    d7:db:72:30:d0:ad:40:be:d4:52:59:98:cd:7c:9f:
                    b1:99:68:15:3f:4c:3b:79:bf:87:3b:89:12:e0:b4:
                    ba:c6:e6:30:e9:46:16:88:e0:ec:44:35:4d:5d:e2:
                    6a:b6:9d:34:db:a1:0f:80:89:7e:2b:e0:81:98:14:
                    01:48:07:7c:be:45:cd:a2:bf:c4:cd:cb:94:ec:c0:
                    97:20:f1:09:6e:96:76:82:58:a7:73:a5:39:7a:9b:
                    af:ee:33:9b:f8:df:30:7e:9b:98:ab:30:ff:ba:6f:
                    3f:d0:39:d8:c4:8e:af:cd:4a:01:ee:67:d2:7d:4b:
                    0f:d0:aa:42:e4:00:51:8e:aa:39:79:62:40:31:a8:
                    ca:38:21:1a:79:6b:dc:e8:e4:d8:22:88:3b:8d:25:
                    09:94:39:54:cb:e4:30:e9:c6:7a:51:71:cd:ce:b8:
                    ef:d6:7f:36:a9:35:7c:14:9f:77:2b:bd:ba:9a:66:
                    20:d0:f2:95:ec:5c:60:67:85:57:c5:28:27:8c:4a:
                    4f:d1:b4:73:34:38:94:1b:2d:b2:fa:12:2d:32:a1:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:59:33:09:3B:98:C3:E6:EC:C7:E3:A2:D6:26:D2:2E:E1:CB:E4
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D9F50A00525011F09EA05B7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.51.0/24
                  49.231.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:61:38:46:04:28:a4:82:dd:a2:61:cf:0b:4c:da:cd:75:
         cb:76:64:6c:74:2d:fa:56:0b:23:41:ac:09:96:35:89:ed:4b:
         7e:58:8a:3f:b9:5c:7d:e6:ad:63:1f:2a:b3:b0:13:96:c4:c1:
         05:cd:0e:1c:69:b7:b9:e7:af:10:25:31:72:23:90:b6:06:da:
         80:5e:4c:03:e8:f3:1b:4d:bf:7d:77:27:d2:d0:bb:39:36:4c:
         91:9d:4b:94:9f:2a:ec:ab:9e:d3:4a:66:39:87:8b:0b:36:ab:
         ec:0a:d3:65:30:b0:19:9b:71:05:e3:99:5d:63:86:fa:0b:7b:
         51:ea:49:20:55:fe:71:54:b6:42:47:d3:4e:92:17:c1:7b:09:
         73:32:6c:6b:98:43:54:d6:c2:45:f8:d9:77:97:d5:72:89:24:
         7a:14:0c:a7:a9:84:72:69:6e:27:de:20:3a:b1:3e:b0:7a:c7:
         76:f8:a6:3d:17:a0:e9:dc:4a:ff:a2:e1:e8:4f:e5:a9:f2:95:
         10:44:99:8d:04:9e:29:c6:34:03:37:8f:b5:d8:21:98:80:2d:
         4f:b9:c7:07:08:9e:b5:b9:bb:3b:6c:e2:95:ff:9e:4d:56:e9:
         fd:c5:c2:44:d3:06:48:a3:4d:4a:a5:b7:3e:67:1e:f9:37:c8:
         53:fa:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:57 2026 by rpki-client