Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/8FD5A938522911F0AECD911AC4F9AE02.roa
File:                     8FD5A938522911F0AECD911AC4F9AE02.roa (raw, json)
Hash identifier:          9yyOlJOhdq5a9n8HjUs77Doecig0wOxCg0TdaMSwGMQ=
Subject key identifier:   D8:5F:79:68:94:09:01:DE:9B:6F:26:3D:96:78:3A:21:CA:6A:F2:2B
Certificate issuer:       /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Certificate serial:       93
Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/8FD5A938522911F0AECD911AC4F9AE02.roa
Signing time:             Thu 19 Mar 2026 06:44:33 +0000
ROA not before:           Thu 19 Mar 2026 06:44:33 +0000
ROA not after:            Sun 30 Jul 2028 00:00:00 +0000
asID:                     153862
IP address blocks:        165.99.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
                          rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
        Validity
            Not Before: Mar 19 06:44:33 2026 GMT
            Not After : Jul 30 00:00:00 2028 GMT
        Subject: CN=69bb9b51-fea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a5:b2:48:53:b7:95:f7:d9:26:f8:be:45:3f:
                    b4:1e:30:bd:8a:93:ce:03:f9:11:2b:9a:37:d9:42:
                    34:c8:11:f1:7b:56:84:70:6a:79:d9:85:5d:ef:2a:
                    e9:6b:d0:32:bc:05:7f:71:68:96:a8:94:b6:98:f6:
                    ab:9b:f7:b5:14:2d:db:bd:ca:c7:17:5a:fd:3f:9e:
                    7b:53:a3:14:61:34:af:03:17:0a:b8:0d:0d:32:7f:
                    30:c6:cb:a6:7c:39:36:f1:6b:d3:8e:1d:7e:bb:f3:
                    6d:47:bf:b6:ec:76:47:0e:1f:93:4a:85:a3:8a:32:
                    03:f4:95:a4:e3:b6:75:01:00:00:8e:56:61:81:08:
                    d3:08:3c:f9:78:b2:1b:ac:f2:96:f9:96:5f:4e:33:
                    6d:a1:bd:59:f5:b8:f1:70:a4:42:a1:8d:e9:cd:94:
                    79:a9:86:7c:11:79:54:d3:b4:53:a0:ca:04:ef:ff:
                    60:da:d9:24:22:8f:cd:a8:c9:e8:3a:10:d8:21:d0:
                    d6:2a:c7:bb:52:86:ec:71:9c:f3:6d:3f:d1:a5:a2:
                    49:7a:1e:3b:4b:c3:bf:fa:bc:ee:71:19:93:96:b8:
                    04:20:fb:c6:02:d6:7f:6c:58:a8:b1:cf:82:f1:90:
                    be:a4:cd:41:7b:28:cb:cb:90:18:8a:1f:fc:b0:a4:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5F:79:68:94:09:01:DE:9B:6F:26:3D:96:78:3A:21:CA:6A:F2:2B
            X509v3 Authority Key Identifier:
                keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/8FD5A938522911F0AECD911AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:5d:9b:36:c3:5e:fb:6b:6d:ed:5f:24:0e:2a:6c:24:81:
         fb:9b:c7:cd:8c:26:59:9f:7c:33:73:6e:98:c0:ea:92:5b:d7:
         f9:b5:1c:78:da:b7:93:2d:06:c0:5c:a7:91:e0:56:fa:3b:0e:
         0b:66:ba:d4:d1:36:03:43:1e:94:57:7e:fe:27:c9:e5:f8:d7:
         a9:a3:b5:c2:33:c8:72:9f:9c:68:27:77:1b:ed:77:ac:4a:c5:
         67:ea:59:98:3a:43:2f:d8:19:7c:66:f9:b1:53:b6:4c:43:fa:
         a9:41:13:e5:bf:1c:2e:23:53:d7:11:45:42:19:9f:cd:04:06:
         4b:5b:ab:c7:b6:69:31:5d:34:9b:65:8a:29:cf:29:a4:10:a4:
         a0:29:0b:02:e7:3b:6c:22:db:c1:32:ec:2e:a5:26:d4:07:ab:
         7c:c6:47:e3:17:0f:11:3d:b5:24:f8:95:40:87:0a:09:e7:c4:
         5c:29:3e:3d:0e:8e:bb:45:ce:74:5c:1c:b7:21:ee:ab:61:e1:
         1a:df:83:f4:1f:1d:d1:3b:52:d6:67:27:80:67:0b:35:3f:cc:
         63:b5:fc:b3:34:67:a7:cd:68:92:56:2b:b2:3b:f1:79:21:89:
         95:02:29:90:e3:fa:3a:1b:c4:02:d1:e3:53:ce:39:7c:af:c5:
         e3:68:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:45:50 2026 by rpki-client