Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/BCBA699CA2D111EE89C12A4EC4F9AE02.roa
File:                     BCBA699CA2D111EE89C12A4EC4F9AE02.roa (raw, json)
Hash identifier:          KrxtGQ6yO11/02qFy5rXfTDmn9HLGbG+hCojfXNvsGU=
Subject key identifier:   F0:C4:A0:7D:C7:EE:40:10:AD:36:81:EA:F7:EC:2C:0F:5C:D7:A8:BC
Certificate issuer:       /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44
Certificate serial:       019E
Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/BCBA699CA2D111EE89C12A4EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:29:45 +0000
ROA not before:           Tue 23 Dec 2025 03:24:03 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142539
IP address blocks:        36.50.6.0/24 maxlen: 24
                          36.50.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl
                          rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44
        Validity
            Not Before: Dec 23 03:24:03 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41519-93a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:8b:43:4e:d2:6d:62:4b:55:3f:ec:c8:6e:
                    7f:1c:ad:d3:29:58:c8:c9:35:3e:71:92:49:82:1a:
                    d6:e1:56:83:2f:05:1d:c6:8b:67:62:85:ce:b5:5e:
                    45:5c:bf:21:2d:7c:26:da:fc:be:65:4f:ac:de:4c:
                    a8:38:cd:8d:ea:00:39:ec:4e:9e:c7:2c:d8:b5:66:
                    2f:d1:b6:06:ff:c3:4d:f0:b8:38:9f:af:05:3d:91:
                    b1:09:57:23:39:80:6a:4c:7c:1f:ee:73:72:6a:27:
                    da:13:19:fd:16:59:d0:ee:d2:a2:ca:e9:77:48:7e:
                    d1:9f:26:d0:2f:6e:0f:7d:86:46:88:e5:48:0c:3a:
                    f7:f3:5d:d6:f4:3f:0a:8e:a9:83:3e:c2:eb:3a:09:
                    d6:eb:26:9a:b6:97:d8:54:92:3c:66:8d:c6:e9:d6:
                    b7:7a:ab:56:86:6f:a4:ef:f9:e4:2b:1f:d2:a6:be:
                    a0:7d:60:9e:85:f3:cb:4b:4f:5d:b0:91:e2:5d:8d:
                    fc:93:44:0e:e4:47:b7:8e:bd:84:5c:e4:8a:ed:19:
                    3d:94:a9:55:51:4d:78:be:f6:51:bb:30:9a:f0:79:
                    55:8c:00:2b:4e:80:46:f7:5f:8a:55:bf:70:17:7a:
                    7d:60:ef:c5:5f:b1:ef:ef:02:94:48:de:9a:9a:77:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C4:A0:7D:C7:EE:40:10:AD:36:81:EA:F7:EC:2C:0F:5C:D7:A8:BC
            X509v3 Authority Key Identifier:
                keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/BCBA699CA2D111EE89C12A4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:fa:5e:45:bf:07:c3:a0:85:99:31:39:e5:79:2e:e9:c7:3a:
         0a:c8:3d:65:bd:f0:9a:80:98:97:6b:32:60:fd:6f:ce:7d:1b:
         d4:3d:0a:a3:39:7c:d1:3f:9e:a9:94:bb:68:0c:ee:a6:df:0a:
         57:a7:8c:d6:47:bf:31:69:aa:16:c0:ea:ea:17:bb:df:83:de:
         75:a4:a9:79:72:2e:ea:12:2d:ec:a3:63:32:1f:62:e8:23:d3:
         20:22:ec:22:28:da:a4:73:e7:ee:b3:07:65:f9:94:25:68:49:
         fa:e0:6e:21:42:d0:b7:47:88:e5:70:9f:ce:e8:f1:c0:b1:80:
         a5:61:32:1b:81:b8:95:74:20:26:d4:8d:3a:47:67:e7:63:18:
         b3:22:75:7c:09:10:23:6e:47:1c:77:11:c3:de:a5:29:19:5c:
         3e:55:2f:df:07:1a:d5:34:3a:88:6c:ce:6c:02:3f:87:68:04:
         4d:94:51:6f:d3:bb:0f:43:32:f6:54:75:5c:c0:d0:20:da:38:
         60:e8:bd:31:38:b5:26:c0:81:4f:36:97:ac:ec:43:14:62:c6:
         33:26:f4:f7:fc:97:0c:c8:c9:ce:98:f7:d1:9b:16:60:99:4d:
         e5:6d:0a:18:7f:22:a9:54:65:9d:6d:c7:b9:c2:9a:3b:7d:40:
         93:90:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:42 2026 by rpki-client