Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa
File:                     CA761A36760A11EC8FB55C23C4F9AE02.roa (raw, json)
Hash identifier:          e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=
Subject key identifier:   05:31:DB:C4:24:2D:BE:63:D8:F7:D4:5F:8C:73:BC:31:5F:52:F0:2B
Certificate issuer:       /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Certificate serial:       0E36
Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:34:00 +0000
ROA not before:           Tue 18 Nov 2025 17:37:02 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55448
IP address blocks:        27.50.4.0/23 maxlen: 24
                          27.50.6.0/23 maxlen: 24
                          202.52.56.0/23 maxlen: 23
                          202.52.56.0/24 maxlen: 24
                          202.52.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
                          rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3638 (0xe36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
        Validity
            Not Before: Nov 18 17:37:02 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45c68-1851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:d7:f1:60:67:96:99:b6:98:5a:17:dd:fe:
                    8a:af:c3:99:3a:93:1f:49:0b:09:34:a7:6b:9c:25:
                    5e:a7:c6:78:43:ab:d7:d8:5c:19:40:63:15:07:37:
                    c0:20:1a:f1:b3:c7:e8:28:ee:74:c3:a5:f5:43:d3:
                    e4:12:6c:5d:fd:80:6e:f9:aa:9d:54:96:4b:b4:a5:
                    5e:50:ec:0e:59:b8:43:53:37:f2:6d:fc:05:42:c8:
                    b3:cc:8b:da:3f:8f:68:76:7b:11:e8:c6:f2:3e:d5:
                    8b:f1:2e:f1:6c:15:87:7a:3c:1c:20:d6:c2:9d:00:
                    b2:91:6e:33:85:e4:ae:b4:dd:dc:a3:42:69:27:bd:
                    53:80:33:5f:32:41:bf:3b:18:6d:4e:95:8f:80:b3:
                    2f:e0:c2:99:42:f0:8f:97:fa:2d:c0:af:1a:fe:84:
                    36:6f:22:9d:5a:1c:0a:54:c6:f6:f8:86:92:eb:7d:
                    5c:9d:bd:07:26:ad:48:09:16:c4:0a:a4:83:73:d4:
                    24:d7:c1:35:58:5f:a2:bb:02:40:46:57:6a:c8:b5:
                    41:46:f8:53:fc:18:8d:52:b7:15:43:95:9e:66:c2:
                    2e:c2:c9:19:6b:fd:e1:42:0d:e9:bd:b0:26:80:8a:
                    08:78:c0:fc:35:66:78:50:68:ab:74:d0:a4:33:78:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:31:DB:C4:24:2D:BE:63:D8:F7:D4:5F:8C:73:BC:31:5F:52:F0:2B
            X509v3 Authority Key Identifier:
                keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.4.0/22
                  202.52.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:13:9e:eb:e0:ae:b0:d6:b5:d8:58:b4:ef:20:c6:f1:0a:3a:
         e2:e4:4a:40:6f:a6:ec:43:1e:f3:42:0b:d4:31:8d:53:ef:78:
         61:21:7f:33:e0:04:fa:ce:5d:a8:c1:49:1c:2a:eb:13:f6:e9:
         5d:74:1b:14:4c:7d:3f:54:7b:c5:83:a1:fe:91:32:8c:b0:c5:
         c0:7f:8f:6b:98:f7:60:c3:de:a8:89:7b:93:7d:7d:8c:ad:44:
         ab:6b:12:ae:2b:d9:9e:28:7e:70:7d:6c:3e:f2:b1:61:76:55:
         31:ae:e2:b4:81:79:7b:2c:5a:1d:c4:e1:87:04:94:b0:49:29:
         85:bb:67:6e:5f:fd:11:d9:63:4e:9f:ae:fb:41:9b:b1:69:c4:
         a8:ee:e4:92:ce:6d:46:97:57:8f:d6:da:38:be:83:0c:a9:c9:
         9a:68:7e:8c:84:04:3f:33:bf:09:e2:63:dc:6f:d4:60:84:99:
         12:c0:02:7c:a6:37:75:fd:e8:27:38:32:e2:2d:91:4c:29:7b:
         55:48:a0:8a:16:e0:6f:a0:7c:d6:50:ed:55:61:67:91:86:48:
         3c:4b:91:0b:a7:8c:2f:b5:c8:b6:e5:bf:2d:2d:f1:ee:68:b3:
         d7:20:f7:df:69:44:aa:aa:9f:06:67:6c:a5:ae:42:b7:6a:ad:
         8c:4a:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:10 2026 by rpki-client