Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/50B13360267F11F0A061882DC4F9AE02.roa
File:                     50B13360267F11F0A061882DC4F9AE02.roa (raw, json)
Hash identifier:          q+Fk5OYW4OPJjQrMQpqBnDqDYkC3Hdy8p8xXaPVB5cY=
Subject key identifier:   DD:7E:68:6E:AB:C7:4F:5D:C7:9D:7D:6A:32:3E:2E:2D:E5:05:73:99
Certificate issuer:       /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial:       FE
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/50B13360267F11F0A061882DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:13:26 +0000
ROA not before:           Fri 13 Feb 2026 05:24:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152181
IP address blocks:        36.50.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
                          rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
        Validity
            Not Before: Feb 13 05:24:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41f56-9017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:bf:e1:e4:32:b0:fd:75:e3:ee:20:53:d3:
                    27:ad:ca:b2:f1:f5:c2:b9:52:03:dc:d6:17:4d:d2:
                    a8:0e:6f:af:c4:f1:6e:2a:35:99:c9:5d:61:d0:87:
                    3e:ad:09:20:08:9f:90:23:22:f8:e5:3d:9d:c2:17:
                    a9:ca:07:49:f9:f4:65:56:85:05:e0:58:d4:48:ff:
                    67:35:5b:df:b6:fd:fb:a0:95:22:c4:4e:32:1b:76:
                    69:59:b0:77:64:06:f6:e0:9a:9d:f3:1a:34:0f:b4:
                    34:f7:66:e6:49:25:e9:ba:f3:b0:5a:8e:27:1c:4e:
                    78:96:8f:b1:ec:a4:af:83:7c:ee:c5:58:eb:9c:b1:
                    6f:80:6a:76:29:36:32:c2:03:06:8d:d0:9d:3c:6e:
                    c4:35:74:f6:9e:1e:6b:41:54:cd:b8:d5:da:da:c4:
                    ca:87:bb:e7:3e:b0:d0:53:db:17:10:4d:d0:fc:99:
                    b1:7b:45:a0:55:76:39:e4:c0:ff:c1:cc:de:6c:48:
                    9c:86:52:a7:42:a8:80:d4:b4:c3:c6:c0:36:92:b9:
                    be:45:cb:02:f1:c0:d0:c8:4f:23:9d:9b:8a:a8:1d:
                    c3:55:bd:99:05:c5:f7:02:0a:bb:eb:e6:70:c0:e4:
                    a0:ad:34:d0:09:da:f1:bc:88:d6:67:82:bc:94:15:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7E:68:6E:AB:C7:4F:5D:C7:9D:7D:6A:32:3E:2E:2D:E5:05:73:99
            X509v3 Authority Key Identifier:
                keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/50B13360267F11F0A061882DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:3e:3e:41:9c:fa:b4:b0:83:3d:79:ec:c9:58:ab:e3:47:ea:
         a5:e1:8a:67:25:55:be:7f:6f:47:04:1b:73:97:21:d1:c0:75:
         6f:db:60:73:b8:68:96:2a:48:c7:27:0b:6b:10:4e:3b:2b:ce:
         57:e2:18:84:7d:28:75:b3:3d:72:cc:79:65:1b:fc:b9:8f:5a:
         ab:ea:82:11:ad:e7:8f:20:61:80:bb:8e:3a:04:29:9d:f6:60:
         28:7b:e4:5f:2e:73:b4:3e:ed:e4:0b:ca:7b:ef:4c:9f:3c:7c:
         75:3a:c2:ed:f4:b2:71:cd:e4:90:ac:53:34:0f:b2:45:f3:70:
         3d:69:32:92:c1:fc:46:e5:56:4d:c8:3a:94:d7:1b:b7:3c:4f:
         1d:2c:af:17:fa:40:51:00:58:2a:6c:57:60:f2:ff:81:2c:ec:
         93:0e:49:da:41:7e:fa:2c:87:84:b2:58:7d:83:d3:f7:75:1e:
         84:b4:8c:00:ab:0c:a6:c4:c8:a4:ce:5b:16:d7:c1:7d:84:07:
         0a:07:25:37:eb:3d:b6:c9:76:e6:ea:b9:64:d6:04:19:c6:48:
         62:6f:b5:ac:b5:7f:4a:ac:8c:72:7e:24:b8:f4:e5:f0:57:d4:
         c1:ef:62:62:12:30:69:8f:0c:8b:f5:0c:fa:97:48:37:e6:62:
         00:16:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:56 2026 by rpki-client