Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/89526C82036711F18D03459D2E3D8C67.roa
File:                     89526C82036711F18D03459D2E3D8C67.roa (raw, json)
Hash identifier:          qoSLWi+s1xt3zb9lEF7MZa8mn9B3D29yYE0n3kEekRU=
Subject key identifier:   36:D6:6D:B7:F9:6D:09:3C:E6:FD:3F:33:C9:20:11:D6:1B:F9:B7:D4
Certificate issuer:       /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial:       B9
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/89526C82036711F18D03459D2E3D8C67.roa
Signing time:             Sun 01 Mar 2026 18:10:18 +0000
ROA not before:           Fri 06 Feb 2026 14:24:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     402158
IP address blocks:        103.50.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
        Validity
            Not Before: Feb  6 14:24:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4810a-914d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:15:52:a6:2b:cc:3a:d6:8e:1e:2e:9e:0b:
                    26:5e:50:3a:c2:34:f4:95:34:34:0a:12:ff:cb:9d:
                    69:2e:00:bf:68:25:d5:ae:7b:43:5a:cf:b9:65:22:
                    2a:f6:5f:ec:b6:98:52:e9:1c:4d:9c:b7:75:aa:7d:
                    b5:ca:db:14:95:95:0d:66:88:35:2d:01:8a:f5:d9:
                    e6:13:6d:d0:ce:03:7c:1b:01:63:77:29:6a:36:5f:
                    8d:86:7b:17:a9:f8:8e:44:2c:bc:5a:3b:e8:f1:fe:
                    5a:78:1c:df:eb:c1:23:0b:01:b3:0f:5d:bf:1d:6f:
                    76:30:52:b6:da:8d:d7:92:71:72:13:ca:6d:f4:2d:
                    6c:35:17:9e:66:79:cd:1b:1e:db:90:0d:4e:75:f0:
                    5a:15:5c:5c:bf:48:5c:26:8d:9b:5c:d0:d0:d3:a0:
                    c5:58:bf:c2:d7:b8:ed:e8:0d:e1:5a:12:39:c7:39:
                    5c:d2:38:9e:4b:83:04:6a:ca:4a:a0:47:49:d1:6f:
                    de:bc:fa:e9:cf:7a:f8:e1:a7:b8:89:5f:3e:5b:99:
                    40:a3:a5:0c:fb:73:22:3a:e9:24:72:3e:4a:ab:c7:
                    28:5c:2b:54:58:63:09:fd:cb:03:07:3c:af:1d:5b:
                    2a:af:d1:6c:9c:53:e6:5b:34:23:64:74:32:8a:9e:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D6:6D:B7:F9:6D:09:3C:E6:FD:3F:33:C9:20:11:D6:1B:F9:B7:D4
            X509v3 Authority Key Identifier:
                keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/89526C82036711F18D03459D2E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:1d:8d:2c:f5:48:99:cb:04:f1:e9:ab:63:2d:1a:91:b6:
         97:3b:af:44:ae:14:b7:fe:ca:05:0b:7a:4b:72:38:f3:d6:23:
         28:db:fe:cc:12:13:dd:7d:a7:56:bf:fc:9e:89:9a:4e:e9:12:
         e3:cc:7a:37:e2:bb:69:06:43:3c:f6:70:a4:98:b7:01:d3:39:
         04:c7:85:b8:f1:e5:30:1b:ea:65:ad:25:56:cd:35:ea:08:cb:
         06:54:c8:6a:34:05:db:bd:1c:ce:dc:ee:ea:5e:9d:92:fc:ad:
         f6:ce:56:c9:23:0c:04:31:3f:ad:99:2e:c5:a5:7f:2a:2e:fb:
         ee:df:d5:57:27:2d:e8:69:d3:0b:ca:e3:ed:bc:bf:75:bd:60:
         58:3c:be:9d:5b:2e:31:bf:68:d9:0c:f9:37:4f:31:b4:f1:4d:
         c5:97:ef:cd:19:6c:66:84:4d:87:eb:ec:3b:70:89:4b:23:db:
         aa:b5:7b:f5:c2:fd:31:26:a9:44:a2:da:ae:b7:df:d9:9a:cd:
         f9:29:35:61:e9:c5:74:7c:a3:9d:3e:a0:81:92:a0:39:40:8a:
         c0:e1:df:b1:0d:b9:e9:02:f0:ef:8a:93:f7:c8:aa:8b:d8:c7:
         2b:ed:17:1e:aa:01:75:f0:91:57:80:dc:34:ac:8d:f4:f0:ee:
         2b:94:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:55 2026 by rpki-client