Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa
File:                     50CC42001E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          yNHgar4JwmjxweZj47GnadQHTimH7rSb2bggpyiy2kU=
Subject key identifier:   3E:69:5B:66:7A:21:5B:98:C7:2C:CB:80:CD:86:5E:49:4A:69:C3:6C
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B65
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:47 +0000
ROA not before:           Mon 14 Jul 2025 14:51:19 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45958
IP address blocks:        210.86.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15205 (0x3b65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:19 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4936f-fe52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:f1:af:24:29:2d:4d:7b:61:c2:b5:7f:28:
                    9d:67:ac:05:15:96:58:8a:83:bf:5a:8c:f3:26:f6:
                    c9:9a:f8:b2:42:fe:03:35:cc:55:fc:54:1b:5b:36:
                    c0:59:1b:38:a3:7b:cb:3b:43:d7:76:49:47:3b:0c:
                    f1:51:73:1e:c6:43:64:2e:34:19:e8:53:c2:4d:71:
                    3c:93:c9:3f:c0:4d:17:41:ca:bd:46:f7:d3:22:c6:
                    d5:32:b5:3c:ee:23:cd:b9:8a:60:46:ab:b9:e9:1e:
                    fe:f1:cc:ca:a2:14:0e:3d:65:20:77:6e:60:6d:5d:
                    a9:9b:e6:f4:4b:cd:49:71:d3:0b:66:9e:db:f5:83:
                    ae:7e:60:93:6d:69:12:d2:1a:b1:9f:8c:66:d7:57:
                    86:36:b3:4d:24:bb:ae:12:e9:13:f4:cb:9c:ee:9d:
                    2d:6e:2d:81:11:06:19:8d:9d:c3:3d:8f:1d:ce:aa:
                    f0:dd:e2:96:4b:25:32:f3:37:6a:11:8a:a9:ce:8e:
                    ed:d4:27:a2:46:ee:7e:4f:0e:15:f4:5b:02:5d:0e:
                    98:5d:28:bb:27:6f:12:e3:b9:0d:28:40:c9:3d:80:
                    2a:4b:a9:86:84:0f:65:06:b1:87:e6:35:47:5a:d0:
                    4a:b9:4d:60:65:01:7f:57:1d:4d:35:1e:cd:2c:8e:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:69:5B:66:7A:21:5B:98:C7:2C:CB:80:CD:86:5E:49:4A:69:C3:6C
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f3:60:b3:fa:c5:fd:3f:e8:d8:2f:92:72:46:a9:b9:06:00:
         0b:c8:03:7d:ab:27:b6:f5:f5:99:28:88:fb:86:a8:8e:33:13:
         39:d1:0e:91:4a:e1:e3:9e:c9:51:9e:c7:78:8e:96:c6:ed:ab:
         ed:f1:7e:1a:9f:9d:85:6a:9d:5c:24:b1:04:05:81:94:e8:72:
         0e:5e:e1:49:24:45:90:8b:66:f5:68:38:c9:59:9f:a9:61:d6:
         f0:43:cc:7a:0e:73:2b:07:bd:28:34:bb:85:c8:3f:2b:62:91:
         3b:74:5f:4d:1e:04:97:ad:b8:d9:6b:59:c7:d2:69:70:25:7a:
         33:ac:1e:e8:e3:4d:dc:dd:04:94:2e:6f:5b:9b:ee:21:29:22:
         ec:d1:2c:50:2a:fd:b2:f5:77:06:3d:58:0f:5f:b0:c1:f8:b7:
         c8:40:23:74:8e:af:61:89:ba:18:50:d4:fc:13:41:20:3f:23:
         d1:83:82:9e:27:13:1b:7b:71:d9:a4:54:17:1a:1c:cd:a3:76:
         5e:8b:ed:4e:d8:97:d3:8d:3d:57:f1:3f:64:76:3a:05:5f:0c:
         3b:7f:bf:17:b5:0d:85:17:30:27:ed:24:de:11:f2:68:7f:3a:
         cf:7d:85:df:3b:c4:95:e7:2f:b5:02:17:d9:6e:1a:03:c4:21:
         5e:b8:0f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:16 2026 by rpki-client