Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/262FD0CEFE5C11EFA373D67EC4F9AE02.roa
File:                     262FD0CEFE5C11EFA373D67EC4F9AE02.roa (raw, json)
Hash identifier:          cqGtRkyIvtI6VzYqSOXDeTVxWlR+pKo31+SsEOK5spw=
Subject key identifier:   0C:2D:CF:AF:BC:E6:F1:18:C0:F8:F1:20:61:0B:8E:CD:6F:35:D9:F7
Certificate issuer:       /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Certificate serial:       01AD
Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/262FD0CEFE5C11EFA373D67EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:29:19 +0000
ROA not before:           Thu 27 Nov 2025 02:20:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139672
IP address blocks:        36.50.8.0/23 maxlen: 23
                          36.50.8.0/24 maxlen: 24
                          36.50.9.0/24 maxlen: 24
                          2401:52a0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
        Validity
            Not Before: Nov 27 02:20:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a414ff-a88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:9b:ce:b8:ec:38:18:36:cd:80:a6:90:17:
                    6f:67:1e:06:80:8f:9c:d8:6c:79:44:67:44:86:c4:
                    b8:92:29:34:07:3e:4e:9f:ea:92:39:9d:7c:78:c8:
                    34:9b:f4:a3:43:e7:b3:30:eb:c6:9e:97:37:e6:a7:
                    36:6a:f5:7b:38:8a:01:5e:5f:f5:82:da:2d:01:52:
                    6a:b9:db:1b:c1:ab:81:27:c9:01:a6:ac:b3:5e:66:
                    ee:1e:52:43:44:d0:d3:84:15:30:47:7e:cc:b7:ae:
                    e4:cf:23:16:71:cd:0c:02:c2:03:77:bb:1e:ad:c3:
                    92:b4:de:c7:2b:f3:02:37:97:ce:d3:d6:da:2d:a5:
                    b2:e6:06:4c:e7:02:9e:50:c5:b2:a1:cd:78:e7:59:
                    a2:f2:72:72:ac:2c:28:fe:71:ee:2e:00:81:18:f7:
                    35:ce:7c:04:6e:fe:1d:d0:78:a5:59:5d:32:76:aa:
                    2b:6e:ec:f4:6b:79:31:0a:c1:0f:61:f1:3c:3a:35:
                    b9:d8:fe:8a:03:0e:f9:91:14:35:d8:8c:02:b6:10:
                    1f:46:70:3a:db:3a:99:18:c9:f3:5b:35:2d:26:95:
                    af:cf:05:6b:fa:1d:82:2e:8e:e4:d5:05:cb:23:c1:
                    44:b9:d4:67:a9:fb:41:19:3c:51:ae:0c:19:31:95:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2D:CF:AF:BC:E6:F1:18:C0:F8:F1:20:61:0B:8E:CD:6F:35:D9:F7
            X509v3 Authority Key Identifier:
                keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/262FD0CEFE5C11EFA373D67EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.8.0/23
                IPv6:
                  2401:52a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:34:3f:e2:27:79:8c:8d:26:10:c7:17:9f:a5:87:f3:41:6d:
         54:29:98:f0:4f:eb:87:c3:03:c4:88:cc:02:55:19:82:b6:1a:
         10:b2:cc:34:5d:9d:3a:ae:01:af:bd:f0:16:ea:ed:a7:48:9f:
         55:b9:6e:0c:04:5b:ce:8f:ff:fd:e4:fd:09:10:71:95:66:78:
         6e:83:99:ba:c4:1f:c0:24:fe:7a:c0:67:6f:db:27:fc:f3:c9:
         63:83:f7:71:f2:fd:cc:87:11:cf:ae:2f:51:e9:ce:f4:17:8e:
         9f:6e:3a:d7:4c:31:6b:1d:ba:e1:7a:b2:e5:47:03:d3:fc:f4:
         2f:19:df:0c:a3:e8:78:56:ca:ed:28:a5:8e:58:ad:8f:7c:20:
         da:e5:c3:9f:75:e4:83:17:e2:85:44:9a:d9:c2:c1:33:da:30:
         68:19:a8:1d:87:3e:72:6c:ab:61:fc:9b:dd:ca:66:0e:4d:10:
         f8:09:00:76:4c:6d:43:1b:f1:9f:01:9f:3d:95:36:ce:98:7e:
         ed:b6:30:9f:d0:ab:f2:80:62:bc:0f:1f:0e:94:25:2c:b5:d3:
         6a:59:13:54:ca:d0:db:dd:f6:04:68:c1:4c:38:8c:b8:19:87:
         79:a4:42:e1:31:b9:a4:5f:75:f1:a3:e1:c2:40:12:14:b8:0f:
         0a:0e:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:00 2026 by rpki-client