Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/50992BCE687511ECB6E9CC6FC4F9AE02.roa
File:                     50992BCE687511ECB6E9CC6FC4F9AE02.roa (raw, json)
Hash identifier:          GeWLVx1UogpOm4sMbLpshqn4M9UCVw2us5SbAr0bpwE=
Subject key identifier:   3D:D0:9E:1F:0C:BA:67:80:74:18:22:13:70:CD:A0:A2:61:98:B2:E8
Certificate issuer:       /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
Certificate serial:       04BC
Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/50992BCE687511ECB6E9CC6FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:48:24 +0000
ROA not before:           Sat 13 Sep 2025 00:36:23 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9653
IP address blocks:        202.3.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC75C, serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
        Validity
            Not Before: Sep 13 00:36:23 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45fc8-fe28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:8a:1a:88:90:8d:f4:a2:fe:9c:98:61:7c:
                    af:5b:da:82:91:60:72:27:bf:a5:e9:b3:22:78:af:
                    bb:7c:e1:ec:f5:d7:f0:fe:2c:01:f6:fa:da:0e:43:
                    9c:a4:27:40:93:d3:5f:36:b5:8b:b2:47:00:b3:bd:
                    75:da:cd:0e:aa:af:bb:e3:9f:51:93:b9:b8:80:ec:
                    f9:3f:96:70:26:a6:e4:f8:1c:d7:cf:80:23:4e:03:
                    3e:e9:c9:e4:4f:a0:3b:bf:91:d9:0e:eb:09:7d:0d:
                    a6:af:3e:c0:a7:a0:30:2a:df:4a:fe:81:c1:48:d3:
                    01:04:74:28:81:b6:8d:13:4f:3a:7f:38:60:71:fd:
                    73:77:e3:31:b9:92:e2:75:80:6d:d1:cb:15:64:49:
                    97:d7:14:75:16:3c:71:eb:d3:0a:2d:86:1f:6d:26:
                    28:3b:f9:c8:8e:71:22:ca:d8:1d:0b:f4:af:39:1e:
                    9d:5d:3a:21:17:b6:e9:38:a2:81:09:2f:71:e0:51:
                    96:c9:68:0e:a0:c0:d8:5d:f8:0a:8a:77:0a:17:f9:
                    2f:74:a9:fa:c2:30:d8:04:7c:fb:93:eb:86:93:97:
                    1b:65:c5:78:fe:69:4f:0c:cc:ed:1a:06:2c:56:9a:
                    df:72:cb:3a:aa:7b:05:0d:7a:fd:df:53:54:bd:43:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D0:9E:1F:0C:BA:67:80:74:18:22:13:70:CD:A0:A2:61:98:B2:E8
            X509v3 Authority Key Identifier:
                keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/50992BCE687511ECB6E9CC6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.3.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6f:d8:5a:4b:91:06:81:f8:75:60:0f:3c:0a:05:1b:1f:54:
         63:58:b0:17:d6:04:9f:ab:e3:46:33:cb:48:83:d0:e6:5d:89:
         52:66:b6:8f:54:31:a8:b5:46:70:82:ae:b9:42:dc:8e:ed:44:
         d9:43:21:58:74:81:fc:19:82:70:4a:1e:e6:fe:a1:9c:6b:ac:
         11:3b:1c:13:9e:0c:cc:b6:22:24:70:b1:30:2f:b4:3d:c4:4c:
         78:42:a8:d4:96:16:6f:cd:4b:91:c3:55:d7:a7:52:4e:e0:7b:
         7a:c8:68:74:97:d3:4d:09:e5:34:92:6b:56:4a:2b:f5:de:53:
         7b:38:3f:8d:c5:4f:0c:e9:28:92:ac:b0:0e:33:f3:f5:15:14:
         3f:c4:20:06:c8:6a:f7:4c:0b:90:af:6b:51:d6:48:68:b3:00:
         e0:f8:80:74:87:48:3f:b0:88:0e:67:d9:38:16:60:5a:0b:4f:
         e0:76:57:e7:25:1f:71:a5:8e:eb:a9:78:b6:06:83:f7:9e:5a:
         0a:6e:49:85:70:0f:3a:bc:f9:f9:c2:22:dd:2a:cc:0d:5b:1b:
         45:0e:c6:96:13:42:bc:8a:20:f4:6f:05:57:6d:74:f3:15:82:
         51:1d:d5:f9:d1:57:94:c1:a8:0f:b5:b7:6e:a9:8e:fd:e4:b4:
         83:cd:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:41 2026 by rpki-client