Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa
File:                     9A826D9059D611EF814F004DC4F9AE02.roa (raw, json)
Hash identifier:          HZDNvMXF2Ddy6vd2h5W5yFnu+C+QnMlW7ipSlMoj5As=
Subject key identifier:   57:50:27:6A:59:DC:C5:BB:BE:6B:AD:61:B7:A3:42:71:D8:38:E4:12
Certificate issuer:       /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial:       0138
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa
Signing time:             Fri 13 Mar 2026 04:42:20 +0000
ROA not before:           Fri 13 Mar 2026 04:42:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135065
IP address blocks:        103.208.36.0/22 maxlen: 22
                          103.208.36.0/24 maxlen: 24
                          103.208.37.0/24 maxlen: 24
                          103.208.38.0/24 maxlen: 24
                          103.208.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
                          rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
        Validity
            Not Before: Mar 13 04:42:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b395ac-9add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:c9:65:c9:36:99:85:eb:f5:e3:ef:3a:bb:
                    af:6f:05:8e:bc:fc:76:ee:09:67:ba:61:9a:ae:49:
                    84:71:0d:b4:e0:70:70:f8:94:95:28:28:eb:f3:04:
                    ae:1e:f4:f6:fa:58:19:ad:02:f6:0c:a4:16:7e:58:
                    ac:fc:db:96:90:47:ad:62:99:b7:6f:d3:7a:b9:67:
                    cf:12:d7:6c:00:f6:48:1c:aa:38:37:a0:a0:bd:f4:
                    83:6d:f3:9c:82:b5:c6:67:f4:1b:4c:5d:fd:a9:f4:
                    10:ec:37:e1:ed:c5:53:a1:22:21:d3:e1:10:b1:75:
                    59:b8:d9:54:1f:d1:c3:f2:0f:91:12:bc:ab:c0:d0:
                    1b:22:8a:f8:ea:0a:2c:5a:49:36:23:f1:7c:96:61:
                    4d:cf:a4:fd:09:8c:ae:af:89:47:6e:2a:19:be:15:
                    a1:83:dd:ff:ee:68:7c:de:bf:ff:42:ba:a8:0d:a8:
                    9b:68:83:05:ca:2b:6e:75:88:77:2a:a8:76:3d:2e:
                    7d:77:ee:54:4d:02:3c:8b:9c:ea:4b:aa:19:2a:0f:
                    fe:f4:7e:01:3a:d0:5b:b6:a5:48:81:23:d0:da:d5:
                    95:fb:36:d9:80:3f:eb:53:b2:9b:16:0c:63:c9:1e:
                    db:dc:9f:42:a5:91:36:05:a4:82:f9:7f:29:3c:9e:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:27:6A:59:DC:C5:BB:BE:6B:AD:61:B7:A3:42:71:D8:38:E4:12
            X509v3 Authority Key Identifier:
                keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/9A826D9059D611EF814F004DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:33:7e:d2:b6:b7:a0:60:0c:51:dc:a5:f9:c2:84:87:0c:90:
         a6:5e:a6:51:e4:bd:a7:60:79:c8:18:a6:59:96:ae:76:b5:bb:
         59:ed:4e:c4:8b:17:73:46:9c:a5:90:7e:43:ab:46:94:3e:2a:
         d9:e4:94:42:db:fe:61:d1:44:97:b0:f1:ae:6b:07:8b:58:21:
         ad:5b:47:ce:b9:66:a8:fe:39:e3:bc:9a:0c:0b:5f:c8:c0:27:
         20:99:8d:c7:57:45:6b:6c:ff:61:70:e8:78:68:28:de:d1:1e:
         08:5f:0e:8a:7b:01:1c:a2:74:f1:48:ec:ce:51:bf:a8:f0:77:
         88:e4:9a:2e:d9:f3:42:d8:74:62:9b:4b:0f:e0:9b:0b:42:61:
         18:36:d3:b4:48:fc:14:7f:13:4a:82:74:b2:f7:8a:69:01:6f:
         ab:61:45:65:17:a0:97:2d:b9:60:5b:1d:66:e7:b3:c6:dd:ce:
         66:f5:fd:8c:fa:36:00:94:7c:d4:2a:cd:d8:ba:4c:ad:6e:c7:
         72:11:36:00:00:9b:ce:f5:1c:f2:eb:9d:27:51:c2:24:b0:52:
         bf:e2:b0:cc:cb:d8:2c:b0:1b:43:32:46:b3:6c:e7:3c:c1:0f:
         fc:59:39:bc:47:0e:d5:10:f3:72:d2:c7:b5:1a:1f:cd:89:a2:
         06:44:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:52 2026 by rpki-client