Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/C50D496ED01711F09F944781C4F9AE02.roa
File:                     C50D496ED01711F09F944781C4F9AE02.roa (raw, json)
Hash identifier:          uFv39uSSaT436HVJNG6HonRgD8h69dX/W5dSzZ3uUCk=
Subject key identifier:   32:A7:90:77:49:2E:82:A9:2F:0A:8E:56:5E:C2:FF:7F:B3:36:5D:E7
Certificate issuer:       /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Certificate serial:       33
Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/C50D496ED01711F09F944781C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:58:04 +0000
ROA not before:           Wed 03 Dec 2025 07:58:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136308
IP address blocks:        144.79.62.0/23 maxlen: 23
                          144.79.62.0/24 maxlen: 24
                          144.79.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
        Validity
            Not Before: Dec  3 07:58:37 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d56c-696f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:1d:67:67:f1:ad:da:c9:66:56:c1:e0:95:
                    9b:b9:ce:67:a7:70:61:87:c4:27:16:cd:19:3d:83:
                    7d:2a:b1:29:98:cd:00:25:d2:5f:43:c7:76:46:76:
                    e1:cd:ad:37:e3:be:76:a8:ce:97:64:19:72:fc:9f:
                    9f:5e:92:60:c9:ba:39:a3:6e:21:1d:c0:fd:bf:94:
                    fd:bc:12:eb:54:a3:23:66:37:67:90:f1:51:23:ed:
                    95:6e:66:f8:11:6e:b0:18:4d:7f:5f:bd:91:ea:7c:
                    9a:1d:c5:92:b4:be:dd:52:93:d8:f4:27:24:d3:7d:
                    b9:89:03:72:d2:22:e7:fb:69:60:ab:b9:4d:69:e3:
                    d5:5b:48:59:41:a3:a7:f9:89:e4:79:58:75:58:54:
                    e1:73:de:87:90:b9:eb:32:69:e3:17:27:77:44:f1:
                    19:a0:82:11:b4:67:84:b2:1a:b2:c0:76:c9:19:b2:
                    ad:c2:88:89:03:db:a4:a3:8d:22:fe:a0:bd:23:2c:
                    b0:ed:51:4f:b2:fd:d3:c0:fa:e8:97:40:38:da:9c:
                    ba:98:ae:2a:d3:d7:f1:b7:f3:d1:5c:b5:ba:e2:d5:
                    64:d5:46:84:77:74:92:73:5a:bf:11:58:05:d0:e7:
                    e6:5d:70:74:32:43:3b:5f:1d:c8:ed:2a:42:b3:60:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A7:90:77:49:2E:82:A9:2F:0A:8E:56:5E:C2:FF:7F:B3:36:5D:E7
            X509v3 Authority Key Identifier:
                keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/C50D496ED01711F09F944781C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:7c:03:98:7c:bd:11:49:15:35:37:8a:59:ca:f4:65:cd:
         50:49:23:a5:b7:c4:ac:76:dc:97:a3:59:47:71:08:85:11:35:
         2a:71:c3:41:bd:ff:47:bb:d6:37:56:52:fc:34:5c:5f:78:72:
         59:40:0c:80:84:2b:f3:d2:23:02:19:5b:1d:7e:ee:b1:09:9e:
         e5:1b:86:00:38:33:a5:7d:10:c6:7c:b5:6d:4b:93:f8:7d:0c:
         bf:82:b8:1e:39:43:4f:55:3b:37:4c:af:6c:a4:ce:96:d1:78:
         39:f5:f2:c0:7d:7c:fe:5a:0b:da:8f:76:eb:b2:3b:7e:d0:dd:
         40:27:fc:0c:65:0b:c4:46:ae:77:88:2b:a0:3e:23:79:34:ba:
         6d:62:39:53:49:57:f4:7f:70:fc:75:3c:4d:8e:87:3f:18:52:
         b8:94:bb:e1:51:92:d5:b5:5d:69:96:27:04:c7:91:ed:cc:78:
         cb:22:cb:52:4e:a4:31:9b:f4:af:52:5c:d3:98:65:09:1b:75:
         cf:2d:ff:57:74:f6:28:ce:8a:c0:41:a0:29:8d:70:37:42:f1:
         f6:03:b6:ec:d8:54:1e:fc:eb:a9:24:f5:d5:67:6e:00:e0:c4:
         5f:88:cf:9a:83:11:c5:16:88:c0:24:a3:45:c9:14:0a:16:36:
         9c:d2:39:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:41 2026 by rpki-client