Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/D47D55EEE5BB11EE8B36C249C4F9AE02.roa
File:                     D47D55EEE5BB11EE8B36C249C4F9AE02.roa (raw, json)
Hash identifier:          h980m9rwSzEfGimw9ECSvdBCi7yjysM2/fG9BEG81p4=
Subject key identifier:   5D:D3:2E:4F:A8:79:32:6F:DB:95:FE:90:1D:84:0C:18:9B:D5:5C:13
Certificate issuer:       /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial:       0175
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/D47D55EEE5BB11EE8B36C249C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:08:17 +0000
ROA not before:           Sat 03 Jan 2026 03:26:17 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152165
IP address blocks:        36.50.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
        Validity
            Not Before: Jan  3 03:26:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a43a40-1221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:65:03:eb:17:9b:4b:6c:2a:b1:0a:7e:c1:
                    50:09:7b:64:ca:35:60:fd:8f:8e:da:d4:78:a1:98:
                    25:cf:ef:6b:ea:5e:cc:5c:91:57:df:d3:86:ec:ad:
                    39:36:ac:e7:bc:80:9c:e2:83:d2:94:7a:ad:3e:7f:
                    75:0d:c3:f1:4c:82:f5:98:7f:03:93:32:1d:f1:62:
                    01:71:35:97:06:fe:aa:21:4e:25:80:0a:96:96:de:
                    56:b7:69:7c:4b:74:27:fb:07:25:5f:32:dc:90:cd:
                    ff:fd:b7:12:d3:f9:fc:9f:69:85:79:cb:2f:4a:08:
                    0c:39:bf:da:f8:e3:49:1b:5a:a6:1c:59:37:0a:4b:
                    ac:d9:bd:76:6b:50:22:5e:a1:55:7f:13:47:66:04:
                    c7:75:ea:dc:92:6b:ba:95:12:90:47:23:d2:76:6c:
                    f0:6e:20:e6:35:2c:76:70:c8:24:6d:91:01:92:ee:
                    c0:4e:65:01:94:2a:7b:73:40:ca:fb:3f:75:4b:53:
                    6b:07:1d:5f:78:16:ee:63:90:19:a0:31:4c:95:5c:
                    2a:70:34:7a:92:e4:b8:ea:a6:9f:f2:80:43:86:37:
                    5d:78:17:d7:65:75:49:8f:bc:60:85:07:84:74:9b:
                    2b:f9:93:7c:a9:28:d4:a2:07:9e:74:ec:9d:98:16:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D3:2E:4F:A8:79:32:6F:DB:95:FE:90:1D:84:0C:18:9B:D5:5C:13
            X509v3 Authority Key Identifier:
                keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/D47D55EEE5BB11EE8B36C249C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:7c:7c:b8:11:85:ce:43:5e:34:b2:40:a3:53:cb:1d:b7:7b:
         5d:a5:f5:35:3b:a1:60:6b:36:b2:2f:a0:e2:86:2a:86:70:15:
         80:27:7e:30:51:63:97:30:1f:e6:d4:b7:e0:9a:05:16:6c:2c:
         b3:c3:cd:71:08:c7:88:2d:e2:c8:d8:7b:32:92:2b:d9:5a:86:
         ed:7b:9a:2e:22:d2:94:d5:c4:a0:cf:0f:92:76:bd:45:f5:54:
         c5:5c:1b:2c:64:0b:d7:fc:bc:9f:64:ac:84:bf:92:84:4e:c6:
         96:05:c1:59:fe:f3:d1:e1:9a:5e:3c:99:14:ef:b8:53:d1:da:
         a2:40:ae:b5:77:e1:7f:37:24:4b:64:0e:4b:59:54:58:7e:9d:
         dc:63:53:0f:5b:2b:29:4b:17:08:9e:6d:05:fb:9e:62:0b:5b:
         dc:60:e0:cc:08:e4:07:67:95:8a:d6:bc:16:69:f5:5a:c9:fc:
         2f:a2:95:4e:0f:60:3e:7f:60:96:b1:bd:4a:d2:cb:82:63:c2:
         a8:2e:dc:ac:b5:bd:c7:f0:77:61:e6:f1:46:41:d5:f7:e3:19:
         42:7d:62:ee:26:06:66:f8:16:1e:43:e8:0b:f4:fe:39:8a:5e:
         69:3a:b2:ce:41:d9:aa:15:d3:64:8c:ed:23:10:2b:d7:28:78:
         6b:ca:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:43 2026 by rpki-client