Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/1701D3A0F36B11EF87FE3725C4F9AE02.roa
File:                     1701D3A0F36B11EF87FE3725C4F9AE02.roa (raw, json)
Hash identifier:          TX+J7abBnuU/uCIH/IV3ubD2e5LCktkAj57+UDWn9JA=
Subject key identifier:   94:B2:E1:78:5D:EB:59:12:EA:00:A0:69:BE:7A:DF:93:D9:89:C0:16
Certificate issuer:       /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Certificate serial:       01B5
Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/1701D3A0F36B11EF87FE3725C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:25:55 +0000
ROA not before:           Fri 27 Feb 2026 03:23:16 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        36.50.146.0/24 maxlen: 24
                          36.50.179.0/24 maxlen: 24
                          2401:5ba0:a::/48 maxlen: 48
                          2401:5ba0:b::/48 maxlen: 48
                          2401:5ba0:c::/48 maxlen: 48
                          2401:5ba0:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
                          rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913731F, serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
        Validity
            Not Before: Feb 27 03:23:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a61c83-fc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:1f:e7:73:84:31:c5:47:d6:8b:15:16:f9:
                    f0:a9:cc:7d:2f:94:90:20:67:bf:25:9b:d1:26:fc:
                    7b:78:3f:1b:09:c7:26:49:45:b9:87:e2:fe:fd:7f:
                    5d:18:ab:a3:6c:a5:c0:1d:30:63:e3:b4:ac:64:60:
                    c1:82:fd:a9:15:2c:b7:19:0d:16:64:c9:9a:db:e6:
                    32:1c:44:6b:b9:0f:4d:e9:c7:1c:72:0e:b8:9f:bd:
                    8c:26:64:f2:4c:04:b0:3a:55:df:63:9c:eb:08:02:
                    de:79:1d:2a:30:6d:1d:26:f5:f2:e7:57:d9:67:07:
                    2c:2f:29:ca:ba:db:c4:5c:2d:9c:15:cc:a0:a4:d9:
                    f4:28:3b:62:d5:8e:61:01:5f:7c:7b:12:00:a1:30:
                    73:10:27:ba:dc:06:be:c3:53:48:7d:4c:89:a7:96:
                    73:c0:f7:96:d4:7b:96:b0:29:8e:61:a1:fa:6b:3b:
                    1a:b3:d1:36:d5:3e:44:86:f8:0c:27:d5:c2:fa:ae:
                    a0:36:90:61:6f:3d:dd:e7:2a:0a:2f:95:08:a5:da:
                    cb:fb:44:35:68:70:3d:0c:fb:18:51:df:35:24:28:
                    56:d2:a6:c5:88:62:40:83:26:a4:ca:62:03:2f:56:
                    57:dd:9a:ff:68:92:0f:e6:8b:43:7c:69:ae:b7:41:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B2:E1:78:5D:EB:59:12:EA:00:A0:69:BE:7A:DF:93:D9:89:C0:16
            X509v3 Authority Key Identifier:
                keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/1701D3A0F36B11EF87FE3725C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.146.0/24
                  36.50.179.0/24
                IPv6:
                  2401:5ba0:a::-2401:5ba0:d:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ac:37:6e:53:c9:58:be:8f:19:0c:19:7d:fb:1f:28:9c:c7:85:
         3e:20:53:de:6e:63:7a:8e:cb:25:5a:75:fc:fc:25:e8:d6:be:
         85:58:7b:3f:c2:0f:4b:a0:b7:ed:62:9c:fa:2a:60:36:52:24:
         9b:f4:3f:28:0a:92:67:44:7c:f5:ad:fc:a5:5d:a4:ce:a3:28:
         a8:fd:85:65:a7:bf:95:2f:ae:76:60:17:9c:ca:19:23:c0:20:
         80:33:9c:93:ae:08:8a:52:af:45:af:73:5b:2a:70:cc:e1:cd:
         04:78:22:0e:c7:13:8a:4a:7e:89:b7:c5:5d:41:21:21:6b:d0:
         7f:b0:c2:9f:e6:ba:45:be:6b:9c:40:ce:7c:b1:b4:40:c7:57:
         e0:07:11:1c:8d:39:e6:d2:70:26:74:b7:79:12:e8:1e:58:18:
         53:3d:a1:64:41:ca:83:fd:e8:0a:90:cd:3b:a3:c9:75:37:b0:
         8d:64:e0:94:18:a3:b9:f7:bf:70:06:0d:bf:69:2b:b6:c0:96:
         f3:ba:56:eb:f7:b6:be:a5:40:69:3d:60:cb:2c:37:a5:8a:29:
         22:0f:ca:86:90:a7:2e:a3:52:b5:55:15:ac:9a:af:cf:0c:5d:
         66:fb:2f:a9:a9:e2:4e:18:fc:65:f7:8a:30:ee:d3:a6:05:6c:
         84:fb:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:20 2026 by rpki-client