Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa
File:                     DC50B57AE84511EB87AD6B49C4F9AE02.roa (raw, json)
Hash identifier:          WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=
Subject key identifier:   DF:D9:5C:E9:A7:54:19:AE:7E:A8:4C:87:FA:AB:A9:2D:82:E5:63:85
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       3552
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa
Signing time:             Wed 08 Apr 2026 15:12:45 +0000
ROA not before:           Wed 08 Apr 2026 15:12:45 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132890
IP address blocks:        182.54.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13650 (0x3552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Apr  8 15:12:45 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d6706d-5907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:f9:3b:49:a8:c2:a0:5f:55:80:6a:0d:b8:
                    b3:11:f4:50:58:09:9b:fb:d6:f9:14:15:86:c5:43:
                    3c:fc:a8:b9:6e:42:d2:e6:11:da:a3:8a:d1:66:b9:
                    e9:13:cb:0b:07:cf:50:e0:c4:e2:58:95:2e:c4:ad:
                    54:fa:83:dc:9c:ee:85:98:97:95:7a:12:0e:65:4a:
                    60:4e:fd:88:9b:e9:85:ad:a3:ec:c4:67:24:ce:0f:
                    c7:76:bf:a7:85:48:40:6a:af:49:c0:1d:51:f0:4c:
                    03:c5:42:13:b6:4f:91:87:23:a4:47:b6:4d:18:af:
                    1b:49:7b:e2:30:99:79:f8:a0:a5:d7:d8:9d:a4:ef:
                    b6:6e:94:c4:75:0a:f2:13:7a:44:8d:55:0a:b2:50:
                    86:a2:6a:0d:07:89:c2:21:81:e5:14:9d:3c:60:47:
                    57:88:9a:3a:13:44:3c:19:63:b9:4f:6a:c0:0f:e1:
                    95:0f:d1:b9:ab:3d:a3:89:aa:f5:17:8f:19:61:32:
                    1f:df:d2:14:2a:ab:da:9a:29:8a:c4:e1:f2:89:47:
                    e6:5b:51:2c:bf:25:d2:c8:7d:41:69:b7:a2:43:50:
                    c2:99:e3:29:e7:4d:c0:cb:c7:9c:88:92:43:1a:91:
                    ee:65:5d:49:7e:c4:96:24:05:7a:ed:ff:2a:d4:5d:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:5C:E9:A7:54:19:AE:7E:A8:4C:87:FA:AB:A9:2D:82:E5:63:85
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DC50B57AE84511EB87AD6B49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:31:1d:a2:a6:8b:01:c5:39:c2:f0:1b:f6:58:0a:0d:bb:
         ec:ef:86:ea:47:b6:6c:14:22:0f:73:b1:d9:95:44:0a:1f:a8:
         08:bb:e4:c2:5d:a5:b6:93:77:6d:61:4a:9e:96:f9:62:33:cd:
         1d:17:1a:da:9f:da:dc:a2:59:27:3d:05:66:3b:ee:cb:5c:b6:
         89:52:77:69:02:2f:e6:15:26:2a:1d:25:91:06:7d:36:de:a4:
         3e:72:a5:32:2e:7f:ad:7b:18:90:fc:2a:53:6e:33:6e:58:82:
         c5:6c:21:c8:71:4b:65:a5:4b:19:e9:20:bd:68:80:46:7d:67:
         91:37:72:48:a5:8d:60:56:58:95:c5:14:6d:8d:3e:cf:e8:44:
         66:55:71:40:b8:87:42:7b:02:fc:d1:c8:dc:d7:5d:fe:fa:ec:
         5f:0b:13:78:c7:b6:23:35:29:9e:f0:3b:a2:f6:de:80:20:87:
         44:76:34:fa:a6:1f:58:ac:87:f7:10:dc:91:8a:75:f1:51:cd:
         94:d2:3f:d1:b3:55:4a:ef:d3:09:2d:6e:7a:29:1b:10:28:fc:
         e0:33:3c:d6:84:a8:c3:e3:99:26:cb:39:0c:fd:ad:e4:33:18:
         5d:fd:9c:1d:54:13:fa:79:8e:60:2c:52:a5:ca:ef:77:56:7a:
         6d:09:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:12:07 2026 by rpki-client