Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/36256C16D96011F0BB00DFAC96D3641D.roa
File:                     36256C16D96011F0BB00DFAC96D3641D.roa (raw, json)
Hash identifier:          BZhp55139TaDhIi/iXNGDBndZI5iisOCsjZn6WgMrG4=
Subject key identifier:   C7:F4:FF:E3:66:29:35:4A:4A:3F:2E:0D:55:A4:18:E3:38:F4:2F:71
Certificate issuer:       /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Certificate serial:       2D
Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/36256C16D96011F0BB00DFAC96D3641D.roa
Signing time:             Mon 02 Mar 2026 14:56:03 +0000
ROA not before:           Mon 15 Dec 2025 02:46:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154170
IP address blocks:        202.6.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
                          rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
        Validity
            Not Before: Dec 15 02:46:10 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a5a503-dd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:b7:68:14:39:e7:ff:d5:8e:64:c4:b2:9b:
                    b6:ed:eb:f7:1d:4a:09:a0:fe:64:8d:41:3b:81:ad:
                    08:e6:75:ea:c3:63:82:84:9d:a7:4e:5b:1b:20:f4:
                    bb:81:0d:b6:6d:d6:b4:20:f0:2a:03:3f:1b:d4:79:
                    22:e4:3a:ed:64:76:a9:ff:81:5d:f8:0f:d8:60:6c:
                    e8:9d:95:58:12:4a:02:d3:67:e2:f3:94:b7:c4:04:
                    d3:9c:7b:ff:82:1c:e5:9e:46:a4:5a:cb:8c:9c:89:
                    1d:33:3c:c4:35:f7:8d:35:9e:76:55:53:28:5b:a4:
                    4b:ce:b8:42:5f:f4:33:8b:ff:52:ef:83:61:f8:7b:
                    0b:51:2d:c2:25:05:98:6b:cb:6c:9f:90:a3:4b:43:
                    15:12:4e:0a:7c:14:e6:88:22:72:59:8a:75:91:a8:
                    5d:b4:80:76:b8:70:33:34:55:f2:32:39:db:93:9b:
                    95:d6:45:dc:f8:37:f3:a4:e4:b8:95:1a:04:b5:a2:
                    97:e2:b6:33:f4:9b:06:f0:60:26:c1:4d:09:59:6e:
                    39:8a:d7:49:db:95:b9:3d:bd:cd:3d:b8:f1:70:03:
                    ed:89:f4:17:af:e6:f8:77:0e:03:eb:4a:13:18:20:
                    f6:9e:b3:45:2b:63:9f:26:c7:bb:da:d3:85:e7:18:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F4:FF:E3:66:29:35:4A:4A:3F:2E:0D:55:A4:18:E3:38:F4:2F:71
            X509v3 Authority Key Identifier:
                keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/36256C16D96011F0BB00DFAC96D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:15:b8:74:9b:45:15:ad:48:9a:78:5c:30:86:18:7e:fb:ff:
         3a:3d:de:6d:eb:4f:07:9b:13:8e:5b:03:d4:43:c6:8c:92:09:
         e0:32:b2:87:df:ea:1f:94:74:a9:5c:34:47:ef:f7:01:da:25:
         c9:7d:62:55:80:80:c3:77:5f:ba:48:5f:6c:18:57:ed:aa:c4:
         00:f9:e3:ae:e6:75:b3:b5:4a:18:d2:4d:99:d2:87:70:db:bc:
         a0:2a:04:af:9b:2d:de:15:81:57:a4:8b:ac:c8:9a:f0:41:2c:
         63:be:72:b6:00:85:9f:89:b9:49:43:1f:4e:fa:23:f5:bf:31:
         93:11:f7:f9:82:7b:c0:5e:bf:a2:0b:bd:e7:07:d5:df:bc:a1:
         d4:71:68:66:f4:78:ea:4e:33:c8:f6:ef:5a:62:ca:e6:91:21:
         60:12:d6:7f:08:d3:c3:ac:6a:c9:62:52:2c:59:b6:56:9f:ee:
         cf:75:3c:12:0d:97:0e:e3:78:55:e9:8c:c2:53:2c:dc:17:ca:
         e7:7e:f3:2a:2d:1f:75:ff:eb:60:74:dc:36:8b:df:c8:a2:f8:
         24:30:bd:d0:15:f8:7d:c3:e6:3c:b1:f4:37:f2:e2:45:eb:fd:
         97:54:eb:dc:c4:3b:9a:5b:44:06:69:7a:53:7c:92:a5:e9:62:
         ef:92:7f:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:58 2026 by rpki-client