Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa
File:                     10EB474C730311EE9ADB6C46C4F9AE02.roa (raw, json)
Hash identifier:          XdnJ86Ju/TwvVXOQmiqEGcvtwxhflxDC56ut32TAjmE=
Subject key identifier:   1D:B9:4B:A5:E4:26:62:3A:00:5B:19:34:80:BC:19:EF:77:45:25:BF
Certificate issuer:       /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial:       01BC
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:24:12 +0000
ROA not before:           Sun 07 Dec 2025 02:11:57 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151955
IP address blocks:        36.50.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
                          rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Validity
            Not Before: Dec  7 02:11:57 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a413cc-eba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:e8:98:f4:14:92:02:dd:ba:ae:65:71:70:
                    50:08:a2:57:9d:3d:e7:72:85:36:6a:fa:d5:80:af:
                    67:9a:2b:d3:7c:91:c2:83:42:00:e4:b2:c3:6a:e3:
                    d1:87:e8:05:4f:02:7a:6e:33:2b:34:1b:73:cd:5c:
                    13:fb:90:85:73:78:61:8d:03:75:64:e1:91:20:bd:
                    24:f7:0f:7b:8f:1e:0c:d5:cb:f3:0a:fb:f4:4e:97:
                    04:4e:3e:ef:a9:b3:e7:ac:a1:93:60:f3:15:9c:e4:
                    c9:f9:66:57:3f:a3:90:11:87:1f:9f:08:e6:08:01:
                    13:de:58:84:9d:c4:65:b5:40:09:b0:cf:fc:01:0e:
                    c1:3e:77:81:36:98:dc:57:c5:49:ac:00:39:d4:af:
                    d7:df:34:55:72:9e:89:d8:58:e0:9b:70:9d:17:a2:
                    ed:a0:46:a8:6a:26:59:84:4a:d5:5e:27:fa:61:5e:
                    ba:3f:eb:e9:75:f2:8d:c9:4a:f7:81:aa:df:6d:3e:
                    54:e0:4e:76:72:e0:6d:c6:99:89:e2:ca:ef:25:c2:
                    66:cf:69:30:54:8f:16:69:d8:12:f7:4e:0d:34:15:
                    0b:16:f1:26:13:0a:ed:fb:5d:44:a1:ec:1c:d3:46:
                    56:b5:2b:ed:d5:5a:aa:2a:74:05:16:4f:7d:1d:f0:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B9:4B:A5:E4:26:62:3A:00:5B:19:34:80:BC:19:EF:77:45:25:BF
            X509v3 Authority Key Identifier:
                keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/10EB474C730311EE9ADB6C46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:85:b8:83:f3:7c:bc:ce:0a:80:ab:bc:17:45:76:57:2b:30:
         3b:62:bd:83:7e:32:c8:b4:b8:9f:3d:85:67:91:06:04:4e:da:
         dd:6d:a4:c0:c1:19:04:2a:cc:d2:bb:18:01:4b:66:94:ac:ec:
         20:2b:20:96:2a:d9:18:6f:cf:e6:11:1d:6f:04:a8:01:ca:b0:
         27:b7:ba:10:68:a5:52:69:f7:26:f3:e0:53:08:21:f8:11:3e:
         69:d3:26:bc:56:2a:4a:3e:70:d2:aa:73:45:fd:00:32:bb:9e:
         4d:1c:c8:79:68:07:b1:2e:c3:34:68:7b:b6:64:e6:c1:64:67:
         12:e7:20:c8:fa:78:0b:18:43:ef:46:ac:20:ea:28:e2:dc:61:
         32:3f:d2:2b:9c:3b:14:13:72:36:25:28:27:2b:b7:04:e7:1b:
         15:3e:a1:49:a3:1a:da:59:98:ce:0a:20:80:54:be:21:51:64:
         ca:2d:dd:b5:9e:c3:4a:a5:b8:28:6d:a9:df:c2:95:04:e2:47:
         f1:bb:cd:2b:4b:9a:0d:fb:f7:ad:f9:66:ac:e0:bd:ec:cc:ed:
         46:01:1a:cc:ed:9f:5b:d2:17:bc:e9:ba:73:6d:94:a0:7a:a5:
         9e:2f:07:51:5b:cd:3e:d1:7f:57:86:77:41:7c:04:ec:95:5b:
         9d:9c:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:28 2026 by rpki-client