Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/32E0DD6C08B711F093F40267C4F9AE02.roa
File:                     32E0DD6C08B711F093F40267C4F9AE02.roa (raw, json)
Hash identifier:          2ellNRlwY42MkXpWnmM+ozSlo+CKpxRxxIeyECBplIk=
Subject key identifier:   B6:69:48:66:F5:CF:2B:51:04:C8:00:16:6C:AD:F8:F6:B9:C9:83:4E
Certificate issuer:       /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Certificate serial:       0170
Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/32E0DD6C08B711F093F40267C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:24:22 +0000
ROA not before:           Tue 23 Dec 2025 04:24:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152148
IP address blocks:        36.50.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
                          rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
        Validity
            Not Before: Dec 23 04:24:45 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43e06-6e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:0f:fa:12:0a:93:8f:8a:22:06:84:fd:42:
                    40:b2:fc:b3:64:0f:a5:60:38:75:f1:2a:a3:26:b0:
                    7f:0a:62:0a:f6:11:f4:76:09:7c:16:1f:82:88:bf:
                    ea:ef:35:2c:f0:c6:cd:b1:29:a9:3d:0c:df:39:88:
                    da:71:ec:42:15:cb:4a:84:f8:f3:d2:51:25:bc:b7:
                    84:ba:27:8d:5c:78:f3:34:67:da:8c:50:50:b2:d9:
                    9e:4b:0a:44:88:21:49:58:0c:85:02:5d:7e:41:83:
                    c3:0f:f6:e6:ea:f3:2b:59:34:40:d6:e5:4f:b5:15:
                    81:9d:21:c2:2a:21:fb:c0:27:5c:89:0e:56:53:90:
                    d4:3e:f5:67:6b:c5:b5:85:2c:ab:cc:8a:dc:51:d0:
                    c3:bb:d5:bb:19:ca:a8:3e:30:29:04:75:d6:ca:cd:
                    9b:d5:b3:5e:29:19:d2:f4:0b:81:78:32:f1:5b:5f:
                    62:a0:b8:9a:f1:c5:85:43:2c:5a:8d:9f:f1:7b:17:
                    f8:83:db:7b:fa:3d:b3:b3:6f:f8:97:1a:2a:ad:00:
                    15:bf:08:ce:55:84:18:27:7b:93:b2:5e:e4:8c:80:
                    a8:bd:a6:25:eb:7d:39:9e:d7:64:4f:25:02:5a:ab:
                    62:ac:05:79:03:af:8f:f9:da:1e:cc:7d:c0:4a:a6:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:48:66:F5:CF:2B:51:04:C8:00:16:6C:AD:F8:F6:B9:C9:83:4E
            X509v3 Authority Key Identifier:
                keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/32E0DD6C08B711F093F40267C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:38:5a:a9:95:3a:6e:8c:8f:4a:70:30:48:4c:6a:09:7c:d0:
         fa:6e:1e:38:2e:c9:fd:db:34:19:01:01:24:b3:e8:71:69:88:
         07:5b:32:e9:51:4f:7c:62:85:6f:99:8e:77:2d:d7:e5:c9:39:
         47:82:62:9b:5d:ed:bf:63:f9:39:ae:dc:d0:fc:64:9a:26:1b:
         5e:44:d4:c9:6e:ef:ef:53:ac:3d:07:b1:dd:3b:ec:4e:8c:49:
         87:50:8f:f1:ab:13:ce:e0:1a:ca:d7:29:f5:5e:65:c2:6f:1d:
         d2:fe:a8:0f:06:12:d2:3a:1c:c2:b7:4d:dc:95:6d:34:8d:81:
         85:85:5e:1b:16:6e:72:e7:22:ff:ea:4e:d4:16:ec:9f:c2:1e:
         21:b5:12:19:c5:0e:76:ee:c9:07:c0:ef:3d:73:00:86:ea:dd:
         82:e3:55:e3:ce:1e:31:5f:39:51:eb:3d:40:aa:13:36:da:ca:
         79:f5:21:eb:86:e3:15:b7:8f:5b:7c:6f:72:07:db:52:2c:32:
         41:9f:d9:e1:ce:9f:b4:65:73:ca:70:9b:44:2c:b9:b7:5a:71:
         f9:a5:ea:94:2d:cd:7c:8c:32:a4:e5:24:d7:b6:2d:15:f8:99:
         88:04:8c:6e:8d:d8:49:0f:88:92:a5:40:d2:ff:30:7d:e9:79:
         87:55:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:33 2026 by rpki-client