Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/34FC96E8CFE711EB93714D2FC4F9AE02.roa
File:                     34FC96E8CFE711EB93714D2FC4F9AE02.roa (raw, json)
Hash identifier:          tyh4MT4qSJmExqCrFnw0c2r/E9gHBqGfx9yaFDJlbgg=
Subject key identifier:   60:E8:3B:CC:21:E1:58:10:E6:E0:DE:B0:1A:B4:FF:77:BD:8A:00:60
Certificate issuer:       /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial:       262F
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/34FC96E8CFE711EB93714D2FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:39:09 +0000
ROA not before:           Sat 26 Jul 2025 15:53:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138965
IP address blocks:        103.36.16.0/22 maxlen: 24
                          103.252.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
                          rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9775 (0x262f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
        Validity
            Not Before: Jul 26 15:53:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4417d-f7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:d2:85:4b:85:a8:13:26:2e:f5:82:b3:33:
                    04:fa:f7:c7:bf:d5:73:37:e8:37:0c:fc:52:7c:4e:
                    2f:a9:b3:fd:75:f3:8f:70:48:48:9a:f8:a7:d7:0d:
                    53:ef:7f:a7:4f:5f:a8:c2:32:1b:b3:bf:22:69:42:
                    2e:4d:01:0f:da:e3:2a:be:b5:b2:35:68:a3:8a:a2:
                    ee:c4:c3:67:c8:e5:49:43:9a:52:14:91:92:2d:83:
                    7b:5e:9b:79:d8:48:4c:84:10:28:85:9e:af:a3:ee:
                    67:fb:36:c9:94:37:02:36:96:f6:18:43:75:cf:6e:
                    a3:5f:3b:e8:76:4a:8f:1d:be:19:45:d6:4b:43:c7:
                    df:f9:74:bf:4e:bc:d1:22:79:a7:06:2c:7d:a9:ca:
                    c7:57:0c:d3:9d:db:d1:53:a7:62:95:2f:36:e9:87:
                    97:7d:d1:94:8b:18:3a:9c:cf:8a:ff:63:d1:70:58:
                    ae:ca:9f:01:86:ab:ce:06:f8:12:82:56:dc:d0:c8:
                    ac:2b:d7:0b:73:f4:70:a8:93:fb:6c:25:94:cf:0d:
                    cf:c9:72:0f:11:b7:4b:7d:df:38:61:d9:5e:73:b1:
                    65:09:8d:05:65:ab:a6:d3:ee:a0:a2:f8:8e:bf:33:
                    c9:54:32:d2:76:97:4c:c2:33:76:f8:1c:4d:71:ed:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:3B:CC:21:E1:58:10:E6:E0:DE:B0:1A:B4:FF:77:BD:8A:00:60
            X509v3 Authority Key Identifier:
                keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/34FC96E8CFE711EB93714D2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.16.0/22
                  103.252.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:fc:18:b1:04:a5:84:46:73:00:86:e9:51:48:58:0d:16:
         d0:1e:13:e3:d5:d0:1f:31:a0:13:31:de:74:5f:e4:1e:70:fa:
         5c:71:76:8a:a5:ad:1a:af:f7:f6:96:1c:d1:e3:1c:19:d3:25:
         ff:5b:2a:16:54:9f:1b:2b:57:24:e6:fc:a9:48:1c:63:59:70:
         6a:64:d7:54:89:ec:4f:48:c0:bf:9e:d2:c9:0e:fc:60:6e:01:
         dc:2a:43:6d:c7:1f:31:f8:84:8a:28:33:67:f9:17:d8:49:3c:
         75:85:2a:cb:e0:4a:2c:69:7a:83:bf:8a:3d:68:28:21:00:a0:
         36:6a:fd:d6:43:19:66:b1:c4:7a:e1:68:75:bc:21:29:c7:03:
         1b:b6:09:14:56:ea:3c:6a:74:1e:7a:b1:0c:12:91:b9:37:a8:
         23:58:db:bc:5b:1c:8e:fa:b3:3b:b2:7b:75:dd:ad:56:25:e8:
         ec:ef:c1:16:77:83:0d:0d:84:72:15:a8:67:ed:63:42:9b:9f:
         7b:3d:b9:32:d7:db:d4:37:c8:fa:8a:81:26:ae:42:16:14:c1:
         6a:b8:65:e8:25:89:f6:da:cf:71:f8:40:48:17:65:23:37:b6:
         8d:c7:38:b1:21:9e:d1:45:9d:4e:62:f6:9e:05:c7:c1:8d:56:
         50:63:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:27 2026 by rpki-client