Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa
File:                     F2AB0C4A68C011EFB9196160C4F9AE02.roa (raw, json)
Hash identifier:          N6u8lktiSuz53pP54cFitasaAX+N1ZG30viqDycFfZ8=
Subject key identifier:   AE:03:EF:06:FF:F6:BB:04:C8:E9:50:5F:C8:CC:3D:71:1F:E3:F9:33
Certificate issuer:       /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Certificate serial:       01AB
Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:28:37 +0000
ROA not before:           Sun 15 Feb 2026 04:24:36 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     56264
IP address blocks:        36.50.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
                          rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
        Validity
            Not Before: Feb 15 04:24:36 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a414d5-3dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:00:98:50:4a:83:2c:25:83:48:ff:61:97:
                    ad:a6:a3:4c:a8:00:32:69:39:c7:fe:d5:27:a8:be:
                    7c:91:e4:3e:66:a2:12:18:db:e4:e4:b8:2f:cd:d6:
                    cb:59:3d:04:70:6f:04:fc:60:a4:01:c4:37:d1:4b:
                    1b:4d:0a:e5:6b:4a:25:68:d6:0f:d0:fd:89:d2:2e:
                    29:03:07:2f:91:88:c3:e4:27:20:74:a7:2c:c6:83:
                    de:24:fa:72:9a:ff:a1:e3:3e:7e:cf:2e:72:fe:00:
                    d4:90:f3:92:73:f8:43:0e:14:11:df:31:52:b5:da:
                    5a:54:e8:b3:51:e9:4d:af:15:29:49:79:df:7f:55:
                    db:f5:8a:b0:b7:9d:83:20:96:ff:3f:22:92:35:b5:
                    10:b4:04:be:e9:c1:f7:6d:1a:d3:92:1b:ca:43:06:
                    b8:ca:0d:94:43:f4:69:c7:30:fa:f0:7e:53:24:71:
                    7e:94:7f:10:fe:4b:1a:8d:5d:6d:cd:c2:6e:64:b6:
                    32:84:9c:92:3e:06:d3:1b:fd:ad:9b:08:f2:86:70:
                    2f:c7:0f:98:f5:b9:84:3c:ed:21:07:19:2a:0f:7e:
                    94:3f:7d:53:ed:b5:de:d3:b8:89:fe:e9:5c:aa:82:
                    cd:41:96:19:95:ec:83:55:8a:d0:9e:93:c7:d8:56:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:EF:06:FF:F6:BB:04:C8:E9:50:5F:C8:CC:3D:71:1F:E3:F9:33
            X509v3 Authority Key Identifier:
                keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:2d:8a:4f:0e:7e:7b:4f:91:5d:20:da:49:d0:37:90:a4:eb:
         23:83:9e:76:d7:d0:18:a7:73:50:3a:fb:f4:3f:92:5e:bf:02:
         ec:3b:df:04:59:6e:c5:7f:f4:36:cc:95:14:30:5c:85:2b:8e:
         87:99:dc:66:38:b5:06:43:ff:6c:8f:3c:61:63:6f:82:7c:4d:
         fa:60:f4:0b:aa:a7:2d:1a:4c:ac:7f:cd:b8:9a:3f:24:e9:b5:
         0f:68:e3:7b:3c:26:ae:46:2c:54:f8:7a:a2:fa:11:e8:49:36:
         3e:56:94:fe:6f:a4:30:de:2e:d3:f3:ab:7a:6a:17:b1:c4:f0:
         07:56:3a:bc:05:82:a5:0d:7c:b8:e1:24:e4:83:b1:75:39:fb:
         4e:89:22:29:ef:cc:ed:e6:14:c1:bc:14:bf:a7:ab:17:a3:d5:
         ed:03:06:aa:a6:f6:7b:e7:ae:de:8e:52:17:9b:5e:9d:cc:f2:
         61:f3:c9:af:d5:9f:82:27:00:91:fd:38:eb:e4:50:fc:e7:0e:
         5d:44:6b:83:cf:38:f2:b8:9d:31:88:06:f1:b7:11:23:5d:de:
         e1:59:a1:bc:4d:44:69:bd:fc:95:8d:05:17:5f:9a:0e:4e:b2:
         a4:9f:70:dc:9f:53:fd:cb:dd:25:bc:37:83:b5:23:ce:a6:f0:
         4c:98:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:06 2026 by rpki-client