Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/50548100855311EBBAE75616C4F9AE02.roa
File:                     50548100855311EBBAE75616C4F9AE02.roa (raw, json)
Hash identifier:          pI2AwrdFJF+ui/6T0h8pgJEuF3LQMhR1emsXoHd3acw=
Subject key identifier:   F2:BC:C3:AC:13:2F:BE:1E:9B:00:67:0D:34:7A:2D:EA:2F:0E:7F:0F
Certificate issuer:       /CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
Certificate serial:       06EF
Authority key identifier: 7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/50548100855311EBBAE75616C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:44:42 +0000
ROA not before:           Mon 10 Mar 2025 22:43:55 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139583
IP address blocks:        103.136.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl
                          rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168939, serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
        Validity
            Not Before: Mar 10 22:43:55 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40a8a-6cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:29:9d:39:74:a8:1a:6c:48:e3:6f:2b:e0:
                    4e:d1:9b:9d:e9:ec:c9:bd:bf:12:8e:c7:08:bd:26:
                    84:a0:bc:b1:8e:5e:a0:0d:ff:f9:6c:44:ec:28:30:
                    bf:84:99:c5:14:ab:8f:3d:7c:42:de:fa:7c:eb:07:
                    18:76:ca:5e:57:ef:27:a9:51:e1:c9:99:56:e6:fb:
                    19:49:c4:db:83:64:97:39:8f:53:4e:d0:95:15:9d:
                    1d:65:e6:4a:4b:78:0f:4f:89:58:95:bd:3e:ab:90:
                    0f:2e:2a:ff:50:b5:d8:cc:6a:00:2f:ed:63:b0:6f:
                    d7:71:da:5d:70:b5:01:c8:fd:5d:13:37:6f:4f:cd:
                    cd:96:c8:e2:c4:6a:ad:f8:e8:ca:43:13:55:67:a9:
                    cd:56:2b:48:41:fd:ad:d5:eb:2a:23:45:48:b7:24:
                    f1:ed:27:e5:37:b2:d4:fd:31:57:11:9d:c6:bf:83:
                    18:5a:43:89:bc:ba:d8:e6:40:04:23:b0:a3:f9:39:
                    b3:5f:71:d7:67:8b:9e:63:29:3e:d5:ae:54:84:bd:
                    1c:5d:26:82:e5:22:3b:6f:12:7b:b5:cc:94:66:90:
                    95:19:47:25:f7:f7:56:86:f6:0d:98:df:fb:05:98:
                    d9:f5:30:7c:15:84:e7:08:b4:22:8d:e6:5f:df:7a:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BC:C3:AC:13:2F:BE:1E:9B:00:67:0D:34:7A:2D:EA:2F:0E:7F:0F
            X509v3 Authority Key Identifier:
                keyid:7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/50548100855311EBBAE75616C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:f4:bc:ff:9e:22:0e:cc:a1:90:4a:a2:cf:0f:75:d6:d7:
         2a:a3:7e:44:30:bc:93:31:fd:ce:83:1e:56:0a:d6:cb:91:0e:
         76:22:3c:34:36:ca:02:a6:2e:64:90:63:69:8b:de:2f:19:f0:
         b3:fa:a1:c0:0b:f1:6a:67:09:1c:f8:d1:58:e8:6e:9e:74:cb:
         f0:88:d7:88:53:0a:6a:13:2e:72:aa:7a:0d:6a:6e:35:84:bf:
         46:d8:02:fd:af:af:1d:4b:a9:fd:55:f8:b1:35:6e:10:10:72:
         a7:8d:1f:b7:0d:7e:67:36:05:e7:59:75:23:54:8c:61:0d:c7:
         00:58:b5:cc:54:36:63:fe:73:53:19:96:f2:be:69:84:bc:4d:
         35:00:1f:14:ef:c0:0c:88:a5:4a:6e:2a:12:01:d7:9a:d6:21:
         71:32:de:05:3c:8e:65:e7:5d:b1:c7:2e:63:f0:36:5a:71:27:
         f9:07:d5:c7:f7:ed:69:8e:48:d4:97:01:ec:40:49:2d:db:f2:
         f5:fd:55:4d:5f:04:84:78:19:cb:cc:59:ea:5f:00:1c:86:77:
         ad:f6:d7:a0:c6:6b:d4:1c:b9:ae:21:50:45:1c:d3:e2:47:bb:
         31:4b:7f:0e:51:73:bb:c5:ca:3d:c7:5c:e6:4b:88:70:79:21:
         8d:c6:ed:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5MzkxMTAvBgNVBAUTKDdFRTRERENCMzg5M0M5Q0RCRkZGNzZCRUM1RTAzMDJF
NTIxOTI1MDEwHhcNMjUwMzEwMjI0MzU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGE4YS02Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA42MpnTl0qBpsSONvK+BO0Zud6ezJvb8SjscIvSaEoLyxjl6gDf/5bETsKDC/
hJnFFKuPPXxC3vp86wcYdspeV+8nqVHhyZlW5vsZScTbg2SXOY9TTtCVFZ0dZeZK
S3gPT4lYlb0+q5APLir/ULXYzGoAL+1jsG/XcdpdcLUByP1dEzdvT83NlsjixGqt
+OjKQxNVZ6nNVitIQf2t1esqI0VItyTx7SflN7LU/TFXEZ3Gv4MYWkOJvLrY5kAE
I7Cj+TmzX3HXZ4ueYyk+1a5UhL0cXSaC5SI7bxJ7tcyUZpCVGUcl9/dWhvYNmN/7
BZjZ9TB8FYTnCLQijeZf33pTdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPK8w6wT
L74emwBnDTR6LeovDn8PMB8GA1UdIwQYMBaAFH7k3cs4k8nNv/92vsXgMC5SGSUB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkzOS9FNjY2RTA4RTg1
MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHljMl9fM2EteGVBd0xsSVpK
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1VGR5emlUeWMyX18zYS14ZUF3TGxJWkpRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg5MzkvRTY2NkUwOEU4NTI2MTFFQjlEMTk4RjFEQzRGOUFFMDIvNTA1NDgxMDA4
NTUzMTFFQkJBRTc1NjE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4j/MA0GCSqGSIb3DQEBCwUAA4IBAQCkx/S8/54iDsyhkEqizw91
1tcqo35EMLyTMf3Ogx5WCtbLkQ52Ijw0NsoCpi5kkGNpi94vGfCz+qHAC/FqZwkc
+NFY6G6edMvwiNeIUwpqEy5yqnoNam41hL9G2AL9r68dS6n9VfixNW4QEHKnjR+3
DX5nNgXnWXUjVIxhDccAWLXMVDZj/nNTGZbyvmmEvE01AB8U78AMiKVKbioSAdea
1iFxMt4FPI5l512xxy5j8DZacSf5B9XH9+1pjkjUlwHsQEkt2/L1/VVNXwSEeBnL
zFnqXwAchnet9tegxmvUHLmuIVBFHNPiR7sxS38OUXO7xco9x1zmS4hweSGNxu3q
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:47 2026 by rpki-client