Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/7B3252CC014911F1B56055C9516F56BC.roa
File:                     7B3252CC014911F1B56055C9516F56BC.roa (raw, json)
Hash identifier:          tBzjsuG6Lc6RhWea8/zSFmhSrzHWoDXSIIHH2NKoQH4=
Subject key identifier:   E4:E0:D9:04:E4:29:E4:70:08:AF:E7:F2:35:C9:85:70:77:3B:8B:4D
Certificate issuer:       /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Certificate serial:       099D
Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/7B3252CC014911F1B56055C9516F56BC.roa
Signing time:             Sun 01 Mar 2026 17:23:03 +0000
ROA not before:           Tue 03 Feb 2026 21:44:14 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     44273
IP address blocks:        182.50.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461 (0x99d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
        Validity
            Not Before: Feb  3 21:44:14 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a475f7-eb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:07:68:7f:96:f2:10:a9:a9:3d:50:12:9e:
                    88:2a:0f:97:a6:b5:81:3e:87:2a:42:94:4f:d3:aa:
                    60:8b:1b:c2:06:25:95:8a:bc:1c:f8:50:2f:4a:1a:
                    86:f8:da:18:73:1d:28:c1:de:2e:a6:58:64:d3:fe:
                    af:a4:23:5e:9a:fa:51:26:b1:fa:69:28:09:42:a1:
                    b0:42:2b:47:bb:3b:84:1e:78:fb:31:68:d0:1a:1f:
                    e3:f7:93:e1:a7:57:fc:2a:51:23:04:92:99:30:e3:
                    c3:48:dd:46:7e:cb:88:f3:67:56:8c:e0:8a:74:a5:
                    eb:03:91:93:84:8d:0e:3e:d6:d3:fe:39:4f:1c:d3:
                    36:20:73:55:d4:b0:a9:b5:2c:b4:d2:44:89:8f:b4:
                    1e:8b:f1:28:2a:ee:4f:da:81:0c:a1:ba:d3:37:97:
                    e4:27:9f:8d:27:af:80:78:79:97:6b:46:c3:38:3d:
                    9f:76:f6:b3:d1:bd:f5:66:66:42:12:8b:a9:30:7e:
                    b0:bc:06:52:ae:cd:c9:03:15:21:0f:0c:d8:89:16:
                    0b:98:bf:fa:64:be:92:fb:be:0f:e7:9e:12:29:33:
                    1e:37:38:8c:a9:32:bc:4a:f4:e3:3e:00:60:9e:13:
                    0d:1f:9e:e1:95:7f:33:2f:b7:35:dc:f4:4a:36:57:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E0:D9:04:E4:29:E4:70:08:AF:E7:F2:35:C9:85:70:77:3B:8B:4D
            X509v3 Authority Key Identifier:
                keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/7B3252CC014911F1B56055C9516F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:24:85:57:db:f1:61:1d:0a:5f:b7:b2:5b:9a:f8:77:eb:
         7c:a3:54:fa:d7:ce:9e:5f:58:86:0c:cd:f0:95:88:5c:bf:78:
         d1:09:c0:2b:d5:34:ba:0c:6a:f3:3d:59:2e:02:62:17:ff:a7:
         05:b8:fc:b0:72:f2:32:89:75:a9:29:ff:d6:12:fa:d1:31:8a:
         a8:33:54:46:85:fc:c9:93:88:4a:79:13:f0:5b:19:2a:75:92:
         ca:4c:b4:13:3c:b0:85:55:75:fd:2d:a0:67:c7:7a:ab:f6:3e:
         8f:1c:14:28:d9:68:7a:01:c4:62:2e:83:4c:bc:84:3a:29:a5:
         64:0d:b5:f0:eb:dd:32:7b:c3:c9:15:88:ca:d2:a1:66:ed:6a:
         0c:18:73:9b:48:57:33:61:40:1f:e5:ed:51:5f:ce:ec:1e:b1:
         5d:5c:65:a8:37:4b:20:cb:89:38:ca:ca:bd:46:76:40:a9:48:
         30:b0:6b:0e:3e:e2:1b:3b:c6:7d:f3:ea:9c:86:e7:a7:f8:7d:
         6a:ba:60:1e:d8:f9:36:0b:34:9a:b7:95:1d:a2:a5:7e:8c:f4:
         ca:0f:85:c2:8c:f6:d3:d2:7f:b0:38:dd:d2:5b:78:28:36:f7:
         72:6d:5e:65:60:2b:dc:75:2f:b3:7c:21:ed:f6:87:f4:45:45:
         bc:2a:d5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:40 2026 by rpki-client