Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa
File:                     2F14B290801B11F0989DCE76C4F9AE02.roa (raw, json)
Hash identifier:          2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=
Subject key identifier:   68:FE:FD:7C:76:0A:C7:6C:E9:2C:CA:79:57:D0:76:B3:CE:1C:0E:4D
Certificate issuer:       /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial:       67
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:13:48 +0000
ROA not before:           Sat 23 Aug 2025 12:17:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150142
IP address blocks:        49.213.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
                          rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
        Validity
            Not Before: Aug 23 12:17:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e72c-4ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:2a:de:bb:ba:af:c2:42:e3:06:a7:b6:f7:
                    fd:d6:08:e5:5d:fc:66:83:3b:b3:00:b5:f3:38:ec:
                    bb:24:28:7b:77:aa:7d:cd:c9:d8:52:09:83:fb:a6:
                    8d:18:49:6b:d0:75:8b:d9:7f:20:11:e5:e9:c0:89:
                    ec:68:ea:80:f9:6b:31:f0:cf:b2:ed:74:96:89:ff:
                    37:19:cf:4c:f4:3f:82:4d:c9:02:23:6b:b8:77:44:
                    dc:56:8d:b7:8a:4f:f7:11:10:05:1a:0d:a7:d6:34:
                    dc:b1:b0:68:84:ce:cf:08:a8:13:86:82:ce:b9:a9:
                    28:2f:91:52:db:d9:9a:44:b0:76:83:ae:64:13:11:
                    66:af:b1:1a:bc:fe:5c:72:6d:2c:78:92:55:33:90:
                    f4:bd:ca:a5:38:e7:82:ab:ba:d9:16:10:91:df:8a:
                    eb:f8:e0:58:ec:47:59:8c:f1:5c:54:d9:78:e3:d7:
                    c1:99:1b:f5:07:f7:0d:63:c3:ff:60:f8:0c:50:02:
                    56:f5:4f:92:ba:a3:ae:a6:b8:0b:b1:ed:94:1c:db:
                    7b:6c:7a:9a:e2:27:8a:d9:0d:cb:0c:89:ef:36:44:
                    a3:67:a6:f9:3c:63:58:9f:c4:c4:d3:2f:8b:6a:cc:
                    6a:a9:72:f5:c2:76:57:d7:45:5c:96:cf:61:6d:ef:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FE:FD:7C:76:0A:C7:6C:E9:2C:CA:79:57:D0:76:B3:CE:1C:0E:4D
            X509v3 Authority Key Identifier:
                keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0e:f5:65:cb:15:c1:2b:36:ca:16:a2:55:68:31:d6:88:f1:
         51:da:92:11:20:8d:4b:29:1d:7f:81:d5:91:17:ac:57:d4:4b:
         ca:cc:f0:3f:fa:37:77:97:f7:7a:89:98:d2:b0:9b:fb:4c:5d:
         6e:85:85:11:4a:a4:0e:b6:ae:91:52:ec:98:71:cb:d3:54:51:
         c0:72:b6:67:64:dc:bc:53:3f:ec:6d:77:c0:7c:a4:a2:22:27:
         30:51:9e:89:d6:22:ae:99:32:6c:c5:a5:e9:2d:19:b6:79:d1:
         fe:e2:9e:38:93:25:e1:0f:a6:6c:b0:56:62:a8:98:e6:9b:1a:
         cc:d3:d6:6a:d8:ac:ed:b3:14:8e:ef:17:33:23:e6:0b:ea:6c:
         01:d9:a8:3d:00:fa:b6:c5:62:50:b1:91:22:2c:4f:28:09:9b:
         4b:59:ea:e3:4d:cb:6c:3f:dc:54:c1:32:41:a7:96:ac:59:b8:
         8e:a7:b0:28:0f:dc:38:df:7b:8c:1a:aa:b4:1a:ef:93:22:f8:
         46:bc:7c:9c:0b:95:02:1c:69:cf:0d:11:aa:de:07:b0:6a:a0:
         ec:f2:03:70:e2:5e:90:b5:d2:21:04:33:61:4a:ac:ef:8f:2c:
         82:0d:a3:ef:70:38:34:8b:6d:f1:ef:11:d5:22:c3:e4:54:bf:
         00:c1:e4:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:56:20 2026 by rpki-client