Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/1416035CD22C11EE891B4A44C4F9AE02.roa
File:                     1416035CD22C11EE891B4A44C4F9AE02.roa (raw, json)
Hash identifier:          /cSCN1DIVwqL8VIQYWe0+chL4x5nDKfpZnIWJqQZ2fg=
Subject key identifier:   4A:3B:2D:79:0B:11:27:95:30:05:40:BE:A8:46:E8:D3:54:ED:DC:3D
Certificate issuer:       /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial:       019F
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/1416035CD22C11EE891B4A44C4F9AE02.roa
Signing time:             Sat 11 Apr 2026 04:37:05 +0000
ROA not before:           Sat 11 Apr 2026 04:37:05 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152107
IP address blocks:        36.50.58.0/24 maxlen: 24
                          2401:9160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
        Validity
            Not Before: Apr 11 04:37:05 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d9cff1-d5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:62:76:e8:7d:82:9d:eb:f7:56:31:6a:1c:
                    94:0b:0d:b6:72:f6:a6:77:29:79:9d:41:a0:f6:e6:
                    a4:1d:4a:6f:95:ff:8c:24:b8:f8:29:91:a2:53:f0:
                    21:b3:3d:63:f9:fc:b8:2a:6f:0c:b4:d2:75:dc:08:
                    28:aa:ed:fb:03:ce:07:93:3d:46:5e:cb:57:55:b7:
                    2b:49:ad:54:6d:cb:66:c7:b4:3c:d7:95:48:89:b8:
                    53:51:ac:f2:d3:a8:f8:33:99:87:df:f6:aa:2a:2e:
                    41:c3:ac:3f:03:d5:34:5d:3c:33:df:9e:45:9e:33:
                    a6:3c:e5:68:b3:4c:18:0f:ce:fd:97:eb:12:8a:fd:
                    b9:91:e5:68:8d:b3:25:b3:e7:8f:41:79:d1:99:7f:
                    81:53:dc:52:d2:0c:c8:61:a7:7e:c9:71:e8:3d:49:
                    1e:f6:55:98:da:cb:c3:b0:33:7d:b5:b2:c8:ff:3c:
                    61:4e:50:da:1b:ed:96:e0:e6:d7:b2:8d:70:88:17:
                    99:22:2e:c5:eb:08:2e:ce:f2:81:db:c4:7c:96:c9:
                    ac:ae:a9:11:21:24:75:ed:d3:9a:00:4f:95:03:d4:
                    e8:07:9b:0c:a6:eb:a2:f0:d6:3d:a6:67:33:e2:24:
                    06:35:5e:c8:ac:e7:d0:20:24:fc:88:e2:e9:66:84:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3B:2D:79:0B:11:27:95:30:05:40:BE:A8:46:E8:D3:54:ED:DC:3D
            X509v3 Authority Key Identifier:
                keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/1416035CD22C11EE891B4A44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.58.0/24
                IPv6:
                  2401:9160::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:14:0c:9c:c0:b8:6b:a0:21:bf:11:da:a7:8b:90:c3:da:0a:
         1b:65:82:4d:fe:84:17:d9:23:3c:27:a1:f0:34:27:ba:1c:3b:
         25:83:60:94:c7:3b:e8:bd:c4:24:85:c9:14:69:c6:25:de:64:
         f5:9c:62:4b:8e:9c:0a:47:5c:53:fe:64:de:11:a9:26:b6:a1:
         25:97:7a:b6:9c:7f:ba:5f:b4:76:22:7e:4c:c9:fc:12:8a:41:
         98:70:48:4c:30:bc:48:fa:01:bc:88:08:80:b8:e2:41:81:a8:
         a4:06:36:eb:88:a3:55:51:66:64:e9:6a:a6:e2:00:f8:e4:64:
         02:9f:b1:4e:52:bb:69:fa:02:e3:43:93:ac:05:a6:2d:08:98:
         fd:f5:a1:2e:58:7c:25:9b:bf:87:ed:de:10:01:32:11:49:36:
         64:49:73:cc:6c:ac:19:97:0d:9c:49:e5:ba:17:0c:c8:fd:cc:
         04:db:eb:88:fb:2d:75:42:74:73:6d:99:f5:1a:af:01:77:66:
         d3:a7:4c:0d:2f:35:13:b2:2f:a0:6e:1b:8d:65:37:68:36:56:
         61:2d:5d:39:0e:8e:67:49:0f:8a:06:95:89:52:20:f5:90:0f:
         26:cb:d8:a3:45:dc:3c:c4:f3:a7:f2:e8:44:39:c9:f4:59:78:
         3c:d7:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:35 2026 by rpki-client