Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
File:                     A50523F43F5211EBB1B1701FC4F9AE02.roa (raw, json)
Hash identifier:          mfLPXcvsn2GPwPl0nmYTUbj8MnwQ+nd3JJseLaE/iN8=
Subject key identifier:   AA:7B:33:C1:B5:61:5D:D0:BC:3D:FB:0A:D8:2F:53:9D:D5:7B:E8:8A
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       07D3
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:46:58 +0000
ROA not before:           Fri 28 Nov 2025 20:53:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7474
IP address blocks:        2402:13c0::/48 maxlen: 48
                          2402:13c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003 (0x7d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Nov 28 20:53:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46d82-414d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:fb:55:88:76:e6:ea:96:da:ce:15:65:08:
                    8a:c7:44:d0:1a:a9:2d:88:75:26:4e:35:fd:d6:84:
                    4a:c1:eb:40:b7:8f:74:46:de:fe:b5:cd:8f:8e:ef:
                    4c:9f:20:02:b1:fb:07:30:d1:ab:c0:11:e3:1d:95:
                    62:1f:a3:f8:f6:a0:81:16:24:81:8c:8c:54:c2:ed:
                    ea:49:58:4e:67:98:83:47:e7:18:33:8d:fc:42:8b:
                    be:1f:2f:7d:3b:28:ce:11:b5:69:ef:d7:18:7b:14:
                    d6:c4:a3:b9:47:97:cd:a8:f0:65:c0:64:05:fa:cf:
                    18:8f:5e:f7:9d:8e:a0:0f:aa:c1:2e:51:5f:bc:ff:
                    01:2a:3d:c7:5b:44:07:36:12:da:25:9e:fb:e6:f7:
                    21:99:53:6e:c5:2a:05:6c:d6:de:fc:8c:65:7a:90:
                    1a:4e:1c:0f:15:d2:1d:85:c2:af:90:c6:1e:66:48:
                    5e:41:19:68:44:fd:74:0e:3f:20:32:a1:04:83:03:
                    42:17:12:80:4b:09:8e:2b:b2:69:f8:d2:91:93:37:
                    be:9d:4a:28:a5:d6:22:f0:6e:e5:3a:74:0a:9c:b5:
                    f3:41:1a:5f:9d:0c:24:ef:42:ad:90:38:02:3b:70:
                    de:c2:3d:0e:b7:c6:b1:b8:05:44:a7:c8:19:94:8f:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:33:C1:B5:61:5D:D0:BC:3D:FB:0A:D8:2F:53:9D:D5:7B:E8:8A
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:13c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         40:03:58:89:54:e6:9e:28:21:ed:5b:c1:41:bb:9f:11:74:02:
         82:c9:40:8a:65:33:39:55:44:26:4e:15:81:e9:b1:c7:32:bf:
         61:40:69:28:3d:09:e8:bc:d5:c6:20:d7:ce:c4:15:59:0f:55:
         5a:3d:29:8c:ee:5a:70:28:35:9b:9e:9e:4c:67:f3:f8:a0:c6:
         19:45:36:e9:a3:5a:1f:c1:bf:12:40:ea:79:94:58:20:ad:0f:
         a2:4a:e8:16:d9:34:8f:07:a9:f6:0e:5c:46:e0:05:1c:87:ba:
         e6:bf:e1:4d:e6:c7:83:88:96:f5:bc:1b:52:31:4d:44:bc:6e:
         4e:ba:dd:2f:bd:c0:1b:b8:78:86:8a:16:b0:15:89:9a:49:47:
         78:13:e8:00:ee:f6:cc:f7:d2:5d:1c:7a:ff:4b:2a:0f:ae:d3:
         de:d4:42:7c:04:12:15:ff:a4:65:91:79:70:db:a6:8c:9b:0c:
         ee:c0:3f:a8:d5:5c:af:73:15:13:78:c3:32:38:05:ed:b0:8e:
         23:40:a2:93:bf:d6:ca:0c:8b:b1:d4:63:64:a9:3e:46:6a:7a:
         96:98:c1:d3:bf:5d:47:19:5b:3f:d6:bc:f4:91:a9:80:4e:9e:
         40:21:16:32:ce:ac:71:4f:4c:ed:71:41:97:56:af:39:11:a9:
         2a:b0:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:53 2026 by rpki-client