Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa
File:                     56EC4CB4927911EFABEC2D46C4F9AE02.roa (raw, json)
Hash identifier:          hdGR4VoIywgrStaLJVKguAZRNDynrb8cvBeZ/B70sbk=
Subject key identifier:   05:AA:6C:F6:C5:DA:1B:8B:51:55:03:2D:14:C1:46:46:23:62:4A:75
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       04F7
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa
Signing time:             Fri 06 Feb 2026 09:03:01 +0000
ROA not before:           Fri 06 Feb 2026 09:03:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9891
IP address blocks:        147.50.224.0/19 maxlen: 19
                          147.50.224.0/22 maxlen: 22
                          147.50.226.0/23 maxlen: 23
                          147.50.228.0/24 maxlen: 24
                          147.50.230.0/24 maxlen: 24
                          147.50.231.0/24 maxlen: 24
                          147.50.232.0/22 maxlen: 22
                          147.50.232.0/24 maxlen: 24
                          147.50.236.0/23 maxlen: 23
                          147.50.239.0/24 maxlen: 24
                          147.50.240.0/22 maxlen: 22
                          147.50.246.0/24 maxlen: 24
                          147.50.247.0/24 maxlen: 24
                          147.50.248.0/22 maxlen: 22
                          147.50.254.0/24 maxlen: 24
                          147.50.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Feb  6 09:03:01 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6985ae45-66f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:6a:4b:a4:ef:dc:a8:e1:0b:b0:5b:d6:1b:
                    1b:df:c8:56:14:62:c4:fe:55:d2:77:cf:08:e1:21:
                    26:da:72:76:b7:8c:31:8b:ec:c6:12:fc:59:3d:ac:
                    62:77:5b:bd:8e:85:a3:26:da:10:67:ea:87:c5:97:
                    90:97:92:0b:37:75:1b:d0:43:b4:db:00:5d:04:8b:
                    13:fe:b9:60:7b:5d:41:22:8f:96:b3:bf:eb:62:47:
                    8e:36:c2:b2:b2:4d:89:28:3f:8f:96:87:05:f5:a0:
                    5e:b7:b6:a3:88:77:83:9c:a6:a2:06:fe:7e:32:18:
                    0d:f3:07:7f:6b:a3:2e:b1:6f:9d:50:51:c3:b0:d9:
                    ec:14:68:24:f7:b3:e9:64:02:8b:63:00:3e:ac:59:
                    bf:a8:6d:4a:71:9b:15:fb:c0:fe:61:b2:07:ea:fb:
                    ab:64:36:37:11:3e:f5:ee:da:7e:85:5d:ec:c8:33:
                    60:53:08:9a:1b:fc:33:04:9b:1d:26:74:d2:7b:33:
                    af:5c:3b:a5:d0:9c:f9:49:19:d1:6c:f2:6b:6d:40:
                    19:23:9d:79:59:f9:92:bd:c1:44:9e:50:cd:8a:4b:
                    25:1b:0a:04:10:c9:0a:36:46:0c:0a:4d:b6:86:05:
                    3b:0a:6a:d6:e3:73:92:09:f8:30:23:c4:72:86:f1:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AA:6C:F6:C5:DA:1B:8B:51:55:03:2D:14:C1:46:46:23:62:4A:75
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/56EC4CB4927911EFABEC2D46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:3d:f3:e9:08:fc:08:35:4d:0c:bb:a0:b4:fc:08:a1:be:7c:
         41:4b:50:5d:1c:f6:a2:bb:df:25:db:06:56:4c:4f:d8:7a:da:
         b3:0d:ba:a6:dc:32:24:4a:25:c0:c6:62:05:47:b5:68:95:51:
         48:ce:54:f4:c3:45:14:ff:8a:55:84:41:05:a4:a2:e9:f2:aa:
         d8:d4:8d:17:19:ee:d0:55:49:54:d2:14:85:9e:a4:12:5e:52:
         7a:80:75:6e:fe:9a:cf:9f:ab:b2:a3:04:46:95:4c:5b:d2:e6:
         70:43:2d:10:56:5e:84:a4:79:c3:7e:b1:bb:c4:4b:df:ed:bc:
         c4:4c:f4:6b:0c:35:20:af:ce:ad:3f:05:3d:8f:cb:bf:5b:84:
         98:e1:74:58:6b:ae:f9:a8:1c:c5:d1:f2:c1:d8:51:c1:ca:67:
         e8:d5:d9:c8:d0:7b:98:eb:d1:ce:47:5c:58:b7:1b:65:4f:4e:
         0f:61:54:03:e2:4e:b6:b4:23:48:37:d2:44:48:65:61:53:8b:
         33:ac:e0:c8:ff:2b:9f:70:81:be:ab:9b:29:11:42:d2:33:32:
         cb:67:69:f7:b9:87:7f:e6:7c:38:47:35:52:f8:7b:9f:c4:2e:
         92:b6:d2:22:28:8d:8a:07:70:0b:52:24:49:36:d6:e9:2c:d4:
         c1:66:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:08 2026 by rpki-client