Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa
File:                     1A760026E06311EFB6B86F0AC4F9AE02.roa (raw, json)
Hash identifier:          0swXKHMDnsmEHrEhlIvVGr4GAqGyFdN/XP+tmD2AwoI=
Subject key identifier:   EF:93:C1:52:31:22:68:8C:78:05:E7:0F:BC:DD:EC:C7:8F:AE:D3:92
Certificate issuer:       /CN=A91B1AE1/serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
Certificate serial:       012E
Authority key identifier: C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:09:32 +0000
ROA not before:           Fri 09 Jan 2026 05:26:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152172
IP address blocks:        36.50.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1AE1, serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
        Validity
            Not Before: Jan  9 05:26:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41e6c-ead3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:22:90:65:c5:10:2a:92:70:cf:1d:82:66:
                    27:ee:81:8b:bb:ce:6c:97:a7:8a:36:0a:dd:ff:c5:
                    54:60:bd:8f:2e:b6:dd:f0:28:41:bb:8c:d2:93:6b:
                    8a:d2:07:61:f7:66:3c:ca:a3:6b:13:c5:f2:69:6a:
                    9f:ac:c0:a9:e5:1f:bb:0c:47:94:02:a4:11:5c:49:
                    dc:b9:0f:2e:65:8a:8b:e5:76:2b:2a:7f:28:22:6b:
                    1c:3f:73:5c:93:86:75:f7:e5:e1:30:05:ba:ca:cb:
                    f8:54:51:25:f3:94:f0:46:cb:17:48:bf:83:97:93:
                    67:58:a6:e8:4f:7e:7a:63:10:7e:f2:d2:66:8b:cd:
                    72:bd:c6:a1:d7:0a:4c:1a:f4:61:f8:a5:97:49:87:
                    ae:41:e2:be:08:67:5f:da:db:64:41:35:da:75:5f:
                    57:66:a4:be:5a:1a:04:31:e9:36:ae:82:0f:4d:c0:
                    54:89:e7:5e:db:63:0e:ab:66:53:8e:f2:53:f9:0b:
                    3e:f3:ed:8a:1e:c1:de:be:42:0a:23:06:15:fa:5b:
                    0c:8f:d5:33:10:08:6d:64:17:1e:0f:ed:7c:00:59:
                    e0:07:31:b8:ee:8a:4c:f0:29:73:72:b2:05:1e:40:
                    9b:59:d2:83:88:d5:f0:34:74:fb:34:29:9c:bf:f1:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:93:C1:52:31:22:68:8C:78:05:E7:0F:BC:DD:EC:C7:8F:AE:D3:92
            X509v3 Authority Key Identifier:
                keyid:C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:16:e8:97:9a:1e:f2:7a:dd:ba:31:ff:7c:a7:93:9d:8e:dd:
         46:63:2a:0a:ab:4c:6f:78:c9:ab:41:2a:a3:94:02:73:49:86:
         da:bd:1a:9a:23:bf:b1:1b:26:b2:36:93:c8:2c:5b:99:b3:5b:
         13:67:be:ba:81:10:e9:c5:7a:18:6c:2b:33:3b:da:d6:dd:7e:
         83:ca:da:91:06:d6:fa:09:c4:2d:b5:b8:b3:93:ce:12:02:27:
         35:b4:d9:c9:ff:33:62:c7:b5:e3:ad:8a:45:70:e9:b1:e3:61:
         f7:a6:d9:54:3d:ea:a3:c5:b1:0e:73:4a:bd:a8:5e:87:62:b7:
         b3:71:32:bf:4a:21:a7:0a:c2:2d:3b:b5:d3:9c:5b:5d:3e:ac:
         77:5c:29:3d:f3:06:92:68:61:1a:f3:bb:c0:93:d8:33:73:ba:
         e2:41:33:a4:73:b0:7f:29:03:d5:54:26:e8:67:a9:0c:3c:c4:
         d0:b6:d1:80:67:77:77:c5:fe:e0:2f:47:13:d4:18:9b:5b:45:
         cd:4a:67:83:92:32:31:75:a1:f9:f8:08:0e:5c:3c:fc:ec:fb:
         f8:98:28:7f:1e:a7:5b:41:2e:e5:3d:c0:4d:3e:19:fc:98:a1:
         57:c1:dc:58:b2:2e:79:e2:80:a0:0f:48:00:94:22:f4:cc:45:
         01:ca:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:58 2026 by rpki-client