Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/62BBFF4A046A11F081D54156C4F9AE02.roa
File:                     62BBFF4A046A11F081D54156C4F9AE02.roa (raw, json)
Hash identifier:          RN8WupoNcOClyYuYNIwdHNJdvolRCPOBGKtwfS/HNdM=
Subject key identifier:   03:89:52:66:55:54:5F:4B:BE:F3:AD:25:A8:47:00:10:57:FC:46:A5
Certificate issuer:       /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Certificate serial:       BC
Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/62BBFF4A046A11F081D54156C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:17:57 +0000
ROA not before:           Sun 25 Jan 2026 06:24:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152724
IP address blocks:        202.49.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
                          rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
        Validity
            Not Before: Jan 25 06:24:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69a42065-67e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:86:c8:a1:79:1a:51:32:ef:2a:e6:31:2e:
                    a9:45:08:da:fa:f5:81:86:7a:63:0d:b7:4f:ed:f1:
                    14:33:cd:6c:80:9f:96:06:13:d9:b6:6d:dc:f2:d1:
                    6d:c1:5f:42:2f:f6:99:09:a8:ff:3a:0f:90:c0:82:
                    a5:d0:ce:de:73:b1:e2:38:2e:8e:38:4b:65:e5:8b:
                    02:01:85:4b:89:99:5e:05:ef:1d:89:27:32:2a:e6:
                    0e:f1:28:07:72:21:cf:df:0a:69:2f:c3:aa:99:50:
                    84:ee:13:dd:6c:e1:fe:f0:ca:ce:ab:0a:2d:6c:bc:
                    65:fb:e8:69:0c:e2:fa:95:23:4b:09:05:ed:e3:37:
                    e0:b8:f1:a2:b2:7a:e4:e2:a2:67:9e:40:3d:22:91:
                    e2:66:3b:fd:95:df:a2:26:77:ee:35:f6:a7:c3:fb:
                    79:d6:66:c2:70:92:69:94:d2:1d:b7:a2:67:c0:55:
                    9b:50:70:a6:a2:a1:7e:44:bd:55:ba:93:10:0e:b5:
                    59:61:7f:37:c0:7d:1f:e3:10:66:13:8b:7d:87:d8:
                    e4:5d:d4:df:89:a4:99:34:24:5a:91:6b:64:07:e8:
                    bb:f1:ac:90:b0:98:dd:05:68:b3:df:72:20:5f:2d:
                    93:21:af:6b:5f:d4:63:a5:a8:e0:2d:66:59:4d:c3:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:52:66:55:54:5F:4B:BE:F3:AD:25:A8:47:00:10:57:FC:46:A5
            X509v3 Authority Key Identifier:
                keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/62BBFF4A046A11F081D54156C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ac:01:89:5e:cb:cc:f4:05:c2:89:a3:4e:d0:b3:f5:4f:36:
         b6:5b:97:2c:c8:68:0c:6f:b2:e8:f6:b3:74:12:6a:ab:51:21:
         92:e4:ac:6d:0d:df:d0:ad:59:6c:1d:fb:8a:dd:aa:33:6b:85:
         36:47:bb:a2:b1:a1:a2:52:6c:37:97:89:b5:3d:20:3d:93:d5:
         da:13:75:58:59:a8:84:2c:62:6b:1f:16:53:4e:5d:81:10:55:
         c8:d7:34:6a:a5:25:d0:05:82:36:b2:c8:fc:2d:bc:47:a8:93:
         18:ba:1a:be:4e:1f:74:5f:3b:2b:90:53:41:e4:37:54:7d:32:
         da:02:4c:af:96:88:be:5a:c0:cf:50:62:51:ad:dd:78:3d:da:
         8e:74:af:02:eb:17:5b:a6:01:65:92:5f:59:0b:e4:90:19:fb:
         54:fe:6b:d8:15:ce:30:3f:3c:aa:ac:bf:0b:8d:25:aa:a3:86:
         bc:0d:17:6b:f6:12:91:27:9d:b4:16:87:b1:4b:f0:9e:8a:e9:
         58:56:0f:5b:42:6b:3c:29:ec:d4:88:69:e4:79:d2:fe:16:22:
         49:a8:15:12:18:b5:02:82:98:cd:4a:46:f9:ae:f7:5d:30:99:
         c8:8b:e0:f0:22:bf:29:2d:31:0e:f0:b4:da:14:44:d8:c2:ce:
         0f:a1:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:56 2026 by rpki-client