Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/260428EC312211EEAF54935BC4F9AE02.roa
File:                     260428EC312211EEAF54935BC4F9AE02.roa (raw, json)
Hash identifier:          wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=
Subject key identifier:   22:04:C2:1B:5B:78:D8:91:21:98:1B:54:15:7E:9B:B0:15:C3:07:80
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       260C
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/260428EC312211EEAF54935BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:20:13 +0000
ROA not before:           Fri 02 Jan 2026 16:13:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133581
IP address blocks:        147.50.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9740 (0x260c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:13:58 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4835d-6e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:02:2c:65:4c:c3:8a:d2:63:2d:e5:fd:f5:
                    22:89:04:d9:19:9c:1a:1d:20:42:3c:76:4d:9b:6f:
                    4d:be:79:d7:0e:18:93:0b:1c:08:93:bd:24:ec:fe:
                    77:05:6a:98:00:73:b1:1f:dc:c9:aa:54:0f:8f:02:
                    c1:54:fa:89:50:23:e1:cb:22:4b:2f:71:cf:8f:d3:
                    7d:a9:d9:7f:c4:13:62:2b:f3:de:b9:e1:33:31:a9:
                    a3:27:53:96:48:37:bc:79:66:bc:96:6a:d2:1f:0d:
                    8e:cd:65:3d:a7:e4:cf:8e:e6:82:7d:4d:31:79:83:
                    87:79:61:c3:02:9f:0a:89:ef:11:73:10:d1:44:c3:
                    fc:13:c8:60:e1:2d:e1:b9:04:11:69:ae:81:62:35:
                    c3:e7:c1:f6:64:1a:37:e2:ed:16:65:bb:cf:7f:ec:
                    bb:9e:2d:e0:b5:28:3f:1e:64:e1:3d:cc:6e:45:dc:
                    9e:c9:12:29:99:9e:d0:0d:0e:cf:08:aa:39:a5:3f:
                    20:c7:2e:23:e4:85:a7:83:ee:7b:b4:b1:97:cd:f0:
                    ec:72:77:42:ff:f9:62:8f:5d:24:8b:14:73:3b:94:
                    2e:41:3d:76:1d:a2:62:bf:98:07:ca:eb:78:6a:dc:
                    8b:ba:39:00:84:d5:c2:36:f6:54:ed:38:33:45:07:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:C2:1B:5B:78:D8:91:21:98:1B:54:15:7E:9B:B0:15:C3:07:80
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/260428EC312211EEAF54935BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:cc:2a:22:87:c9:bd:46:3e:e5:7a:90:e0:c2:aa:c3:25:16:
         4c:24:50:91:c2:53:85:24:9b:34:08:7e:52:98:b1:8f:4d:26:
         5a:b8:5b:db:e0:be:91:64:55:8c:05:07:4e:fb:ad:2a:0f:77:
         0e:02:b5:2a:45:0a:a2:fd:28:7f:a7:26:b9:2e:14:be:e3:b4:
         e4:d0:0e:52:24:6b:25:8d:94:d8:19:ad:5a:7c:36:a5:f6:fe:
         f4:89:0c:62:fb:1e:ca:ef:5c:a1:2a:fa:c3:30:1b:7e:fd:c9:
         12:73:5b:51:14:d6:46:73:31:60:e4:5e:8e:76:e0:ce:bb:4c:
         0e:b4:80:fa:48:af:dd:88:4d:cb:f3:70:fa:70:bc:f8:8a:43:
         11:a1:29:44:2f:0a:72:d7:30:3f:9f:91:f8:84:58:b0:82:53:
         07:79:d0:9d:22:0a:2a:c5:83:1e:d3:b7:ad:bb:16:b5:ab:c7:
         a4:30:cf:51:55:e6:ad:52:cf:32:08:5a:c0:14:2a:b0:44:6d:
         2f:eb:fd:77:e5:97:60:dc:13:37:ae:0a:06:9f:86:af:12:3b:
         1a:4b:0d:8c:c8:5a:36:38:49:2b:a8:c1:aa:17:40:b5:b9:7a:
         1a:bb:1f:d8:fa:7b:dc:15:33:58:fc:63:f5:54:48:39:56:e8:
         06:40:67:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:03 2026 by rpki-client