Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/E0CD5510BE6111ED88CAF164C4F9AE02.roa
File:                     E0CD5510BE6111ED88CAF164C4F9AE02.roa (raw, json)
Hash identifier:          vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=
Subject key identifier:   92:68:0F:C1:05:4A:24:27:2A:EF:EF:84:14:8F:61:B7:65:2B:01:1F
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       260F
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/E0CD5510BE6111ED88CAF164C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:20:15 +0000
ROA not before:           Fri 02 Jan 2026 16:14:00 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     147187
IP address blocks:        147.50.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9743 (0x260f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jan  2 16:14:00 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4835f-2940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:77:97:62:01:e7:45:f0:18:27:50:b4:65:
                    32:03:c4:76:e1:64:9f:2c:d7:76:35:5b:37:8c:3f:
                    66:65:d1:29:bd:09:79:53:ac:03:66:b9:21:7a:48:
                    8c:56:6c:9b:7b:21:fc:47:69:14:b1:be:c7:c9:bc:
                    e3:5a:2c:d1:02:c3:50:55:09:a1:74:22:69:f4:84:
                    84:77:b2:67:e7:c4:8d:bb:8f:09:4a:2e:fa:03:32:
                    bf:2c:ed:04:05:72:9d:3f:17:59:fd:df:f1:d2:ab:
                    5c:5c:c4:15:e8:63:f8:e0:b5:df:40:63:6b:47:5a:
                    94:80:2a:24:2c:de:54:a1:11:6d:05:14:b9:09:35:
                    41:33:d8:a5:ac:06:fe:02:20:16:74:23:4f:0e:d1:
                    45:bf:c8:6f:37:b9:a4:b5:d9:17:80:c5:f6:7f:04:
                    33:8f:7d:e2:31:1e:95:42:62:0a:88:58:30:39:01:
                    29:88:cd:7f:0a:33:25:08:f8:00:1c:a8:4e:c8:a7:
                    5d:9f:35:db:0d:72:e1:2c:90:ed:6d:e7:83:35:d8:
                    18:df:38:cf:01:c1:4e:99:8d:10:39:6a:8b:8a:83:
                    9f:db:e1:7c:45:b8:4b:d5:ae:8d:11:7f:33:ed:7c:
                    32:96:77:30:f1:84:a8:9d:15:11:64:8c:99:b3:b1:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:68:0F:C1:05:4A:24:27:2A:EF:EF:84:14:8F:61:B7:65:2B:01:1F
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/E0CD5510BE6111ED88CAF164C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:4f:87:84:4e:90:f3:89:ca:21:5e:df:82:bb:a1:a1:9d:4d:
         df:72:b0:d2:11:34:e1:9b:f4:57:26:0b:34:18:9e:23:d6:4e:
         5f:01:d0:d5:9d:e0:e6:38:30:59:2c:2d:a0:fb:45:e3:5e:f6:
         d9:81:fb:25:c2:ff:a6:fb:62:96:85:00:d8:fc:98:ad:27:25:
         08:70:5c:52:7b:cc:2b:c8:c0:0a:03:fd:dc:f1:d1:cd:3e:b0:
         f3:48:2b:59:cb:82:26:8d:28:b9:a8:bd:67:28:23:3f:0e:01:
         42:5c:e9:ed:08:86:45:48:5d:91:a3:f4:74:16:8d:ed:18:81:
         04:b0:e3:b6:d8:b1:6a:0f:85:6b:68:47:86:90:ff:e4:75:3a:
         70:43:e6:71:15:07:59:91:f2:cd:d0:b1:2d:b4:99:51:44:70:
         9b:aa:98:7e:ae:9e:5a:4a:91:7a:ff:da:e5:5f:16:c4:84:c9:
         b0:61:ec:ee:22:d9:a7:96:a1:e6:96:f5:f5:a5:d0:b5:04:0f:
         a6:30:c7:d3:ed:9d:0d:67:ee:3a:c9:2d:48:78:8f:4b:12:33:
         3f:eb:cc:10:b2:c0:c8:33:a9:ff:1d:67:1d:c8:2b:35:b4:f1:
         0a:b9:2c:c2:a3:a9:a2:60:f1:86:62:b3:c9:dd:ec:39:a3:5a:
         7b:d3:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:03 2026 by rpki-client