Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/50B86BE40BE411F1BD6D7437333D8C67.roa
File:                     50B86BE40BE411F1BD6D7437333D8C67.roa (raw, json)
Hash identifier:          QFwXm5LgnQBWOl/6IqW37SOmW7TOlLZtTt8RxXnukJ4=
Subject key identifier:   0A:69:F3:12:E2:0C:7D:0B:8F:DC:C6:30:B7:40:23:D1:11:63:D7:42
Certificate issuer:       /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
Certificate serial:       0A
Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/50B86BE40BE411F1BD6D7437333D8C67.roa
Signing time:             Sun 01 Mar 2026 05:33:57 +0000
ROA not before:           Tue 17 Feb 2026 09:37:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9790
IP address blocks:        202.0.84.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl
                          rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
        Validity
            Not Before: Feb 17 09:37:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3cfc4-067e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:37:07:e5:63:de:86:ad:a2:0d:18:59:0a:e8:
                    76:d3:a3:df:9d:d2:d7:6b:11:bb:13:26:dd:30:76:
                    25:9d:bc:e2:11:03:b1:d2:a1:f1:5b:c2:97:e7:80:
                    f1:88:62:0e:2a:7f:23:12:97:cd:46:85:d7:40:eb:
                    14:3e:b6:26:35:ac:ba:5d:d7:33:a4:65:82:4a:42:
                    89:d7:4d:65:bd:a7:a2:c5:ad:89:b4:18:8a:ea:bc:
                    5d:8c:c8:94:a0:68:47:a8:a4:26:03:27:ac:df:bf:
                    0d:66:81:bb:e6:ca:40:1b:98:e0:80:70:6e:a3:21:
                    60:70:ad:99:3e:a3:64:6a:04:5d:41:4e:a7:79:b0:
                    75:62:48:4a:2f:e9:f8:10:61:3b:7f:e2:02:98:1a:
                    af:31:a3:3d:12:4f:fc:0d:67:8b:70:1e:43:cc:e5:
                    c9:e8:81:4c:48:0d:65:5e:12:4c:80:4f:b2:5f:85:
                    28:f5:48:78:aa:b0:82:1e:58:84:b1:68:26:ed:92:
                    cb:10:21:79:68:26:7c:ac:41:0d:4d:10:d5:87:07:
                    94:6d:75:cd:69:ae:ed:21:cf:a5:b7:97:f7:f5:ef:
                    ff:a6:ca:c9:f6:75:74:cb:90:17:d9:26:7c:f6:91:
                    4c:94:55:eb:b2:30:9f:fa:1a:32:ed:6f:f0:23:79:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:69:F3:12:E2:0C:7D:0B:8F:DC:C6:30:B7:40:23:D1:11:63:D7:42
            X509v3 Authority Key Identifier:
                keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/50B86BE40BE411F1BD6D7437333D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:94:66:be:e7:3d:f6:9b:1e:1a:9b:1e:e6:81:5f:b5:0e:46:
         8e:31:e0:64:ee:12:8a:6d:d0:1b:6d:3a:9d:e1:73:4e:f5:4b:
         24:06:5e:86:d3:86:51:35:ec:82:f2:31:64:61:c9:cf:eb:35:
         be:7f:e0:0e:2b:9e:e3:fb:a4:93:18:5b:c8:70:ac:23:2e:e8:
         89:69:44:b3:89:04:ad:2b:0b:93:7c:cd:80:f0:16:5b:d4:81:
         29:fb:0d:05:43:ed:83:21:4e:80:25:b1:3a:f5:be:d5:93:6b:
         0e:5c:56:4c:70:0f:bc:de:55:51:3b:fa:d7:c4:bc:d0:07:57:
         b6:89:0b:f4:ce:59:28:7d:cd:0c:6d:ac:04:6b:2b:45:cf:69:
         02:73:f6:0a:97:f5:65:d2:18:ab:47:3a:20:ee:c6:95:23:8e:
         c9:b0:a7:54:5b:dc:ba:cc:2a:de:59:ae:2a:74:c9:21:82:09:
         8c:73:f9:42:59:dc:53:94:50:40:b0:d8:b9:b0:9a:10:fd:0a:
         81:48:68:4e:26:e8:c8:03:98:cd:a1:e9:f6:31:81:4d:f9:e5:
         06:af:e4:ce:5c:f3:21:33:17:1f:37:81:77:b0:24:98:21:e6:
         33:17:0a:90:15:27:c8:8f:40:df:88:27:80:db:87:b9:8f:b0:
         f8:e7:70:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:23:49 2026 by rpki-client