Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa
File:                     71D21A40A05E11EDAC005F21C4F9AE02.roa (raw, json)
Hash identifier:          EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=
Subject key identifier:   51:16:C7:AF:7F:43:7A:1B:1B:46:91:9D:29:96:66:52:79:0C:DE:D8
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2612
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:20:18 +0000
ROA not before:           Fri 02 Jan 2026 16:14:04 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     37932
IP address blocks:        147.50.197.0/24 maxlen: 24
                          147.50.198.0/24 maxlen: 24
                          147.50.199.0/24 maxlen: 24
                          147.50.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9746 (0x2612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:14:04 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48362-d560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:ec:ac:86:cd:61:b4:74:d6:25:3f:3b:29:
                    b0:d2:1a:2b:c2:d4:5b:40:a5:a4:5a:20:3b:2a:00:
                    da:38:2d:b9:29:0d:73:bf:c5:e5:05:79:67:2c:06:
                    a6:af:26:79:71:43:3b:f0:0e:07:91:48:0a:af:0a:
                    5f:4b:55:0a:e5:1d:9b:7d:95:24:34:c3:55:1b:5b:
                    57:16:14:a0:25:e8:6e:2f:6b:a5:8d:b0:c2:ee:4a:
                    50:26:7c:4c:3f:8d:ca:bc:bb:81:f0:50:2b:2a:db:
                    26:8f:46:69:a7:e8:a2:bd:e6:4f:0f:9a:b1:24:f7:
                    ef:57:00:fa:a2:91:6e:4e:8c:fa:64:f3:e6:b4:b4:
                    79:e4:a6:e5:1f:95:68:6c:e9:9b:35:5c:79:e7:d3:
                    0e:2f:bc:e1:06:31:04:dd:82:54:5f:71:b9:94:22:
                    a3:ac:01:2b:fc:0a:26:c7:c1:e0:1e:25:14:bc:e7:
                    54:f1:11:33:80:62:19:33:35:87:32:54:1d:45:14:
                    f2:17:2a:14:20:b9:d3:70:5e:0c:ae:2f:c8:29:d6:
                    01:a7:01:bb:e6:a2:7d:57:bf:02:f9:4e:ce:91:9e:
                    fa:f9:fb:b8:c6:18:bf:a0:c6:f9:51:f5:16:b6:3d:
                    82:bc:0f:0b:7e:fb:eb:79:e2:52:b8:ff:39:64:6e:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:16:C7:AF:7F:43:7A:1B:1B:46:91:9D:29:96:66:52:79:0C:DE:D8
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.197.0-147.50.200.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:83:b3:9c:0c:7f:3e:30:02:6b:3f:46:93:6a:78:63:7e:
         f1:fa:f8:03:6f:15:0e:e3:7b:d3:63:af:bd:0b:c4:39:d1:24:
         c3:11:d3:7e:60:15:eb:13:ce:ce:c4:f4:d7:48:7d:05:12:3c:
         27:44:4e:51:d8:a7:c2:7a:70:c2:bb:9e:42:93:cb:80:64:e5:
         34:e8:d5:47:83:80:c0:b2:6b:a4:c2:2e:00:0f:15:19:31:0c:
         9b:1c:45:8d:d2:3b:f1:f6:e1:52:6b:67:c2:7e:97:69:19:35:
         ec:cd:91:54:b7:c0:7d:f5:57:3b:13:8b:45:11:49:0f:f1:69:
         8d:a5:78:72:08:24:05:ac:9d:67:2f:71:70:3f:f8:f3:9b:05:
         09:b3:93:6c:41:87:d9:7f:bc:05:78:a6:83:5a:3e:c0:82:2b:
         32:b6:02:64:0f:c4:a0:9d:14:5e:d2:c9:4b:90:d4:b0:6b:1e:
         4d:18:87:10:6b:13:a1:7c:65:8d:e5:7e:25:5c:9c:d5:f0:e1:
         ef:8c:70:eb:7e:6b:db:7a:2a:c5:ec:d1:3d:77:c1:b7:63:25:
         c8:a5:60:31:5a:76:cc:8a:23:aa:14:5c:04:4c:67:25:f9:e6:
         b4:5f:10:56:f8:de:8e:65:06:e9:73:5e:77:09:8c:47:3a:e2:
         92:ec:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:06 2026 by rpki-client