Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa
File:                     361BDEB6315011F0A08FB267C4F9AE02.roa (raw, json)
Hash identifier:          BQetgOKP2pwjUT6eChrwhwSjxzfMAqwXit73S7tCp/E=
Subject key identifier:   FB:2F:02:18:A9:08:FA:CF:D9:DB:6A:EF:9D:F6:87:5C:4C:27:F0:4E
Certificate issuer:       /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial:       1A41
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:55:26 +0000
ROA not before:           Sat 02 Aug 2025 16:55:07 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141109
IP address blocks:        43.255.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6721 (0x1a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
        Validity
            Not Before: Aug  2 16:55:07 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4616d-1fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:80:c5:0a:0c:5e:26:23:06:f9:96:5b:c6:
                    a7:03:df:6f:15:ed:2c:a4:2a:46:c6:39:a5:e6:b2:
                    86:00:ee:fe:bf:1e:e0:53:14:92:82:f9:e0:b7:5f:
                    d3:8f:fb:98:da:6f:e9:fb:50:01:f7:53:b5:f9:8c:
                    22:88:50:e6:45:5a:f1:7e:87:df:a8:06:fb:9f:92:
                    71:93:fc:ad:c9:66:3e:cd:72:35:c2:73:fd:e1:ba:
                    f4:7c:f3:31:5b:2b:03:4a:35:36:de:da:74:fc:2d:
                    82:a3:51:c6:3a:bb:28:89:99:57:1f:43:f4:29:b9:
                    30:bf:33:65:67:69:c9:0f:d0:09:6d:cb:36:46:ba:
                    29:5e:53:3a:17:7e:4f:bc:24:fd:8c:96:6f:7b:fb:
                    af:24:09:30:48:f9:bf:56:64:41:91:fd:c2:61:92:
                    53:4e:00:c5:d7:25:50:1b:8e:cf:78:a1:d1:75:f2:
                    1b:36:c8:de:b5:6f:93:7a:57:9e:9a:94:ce:30:8d:
                    d8:b8:02:69:91:05:31:c1:1b:93:ab:1d:0d:e3:3d:
                    e8:53:e4:a7:2b:58:e4:34:4b:e6:c3:16:27:0d:67:
                    cf:e1:09:6f:81:ff:26:7e:9f:8b:6a:0a:39:22:ca:
                    68:6c:f1:dd:c2:e7:10:63:1d:95:44:da:24:3d:87:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2F:02:18:A9:08:FA:CF:D9:DB:6A:EF:9D:F6:87:5C:4C:27:F0:4E
            X509v3 Authority Key Identifier:
                keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:3d:f2:70:80:57:7d:45:7e:1d:92:6e:82:0f:4d:9f:63:
         59:6b:61:73:3c:2c:19:54:99:b3:1d:01:67:c1:26:52:ad:2d:
         a8:7e:68:b5:21:c6:69:b2:f3:e4:44:e8:5b:94:a7:09:90:6a:
         5b:32:21:a6:ef:7a:ba:10:f1:1d:51:71:32:fa:5b:c6:39:bf:
         d7:56:22:68:4a:1a:8a:c7:fe:de:6e:08:1f:b3:f4:5a:6b:d0:
         ed:c9:c4:94:71:eb:17:5a:e2:08:ea:79:c8:b3:2b:57:c1:7c:
         c7:4f:e7:ce:b7:f0:38:fd:6e:2a:4c:10:ff:1e:30:9e:b9:98:
         0c:48:09:ac:e9:14:ba:bb:ae:da:a0:0d:cd:f9:41:bb:9b:b7:
         fb:07:c6:a5:59:c3:6c:e5:cc:ce:49:3b:36:00:43:a0:36:d6:
         6a:e6:b4:6d:33:b6:b2:dc:15:e3:de:ad:d2:07:ae:76:ef:be:
         b9:f7:45:4e:9d:c5:86:a0:f2:f0:4b:12:4b:7a:6e:15:7f:29:
         85:4b:14:2a:ad:4e:98:5b:fc:13:8a:47:a7:f4:2f:68:fc:af:
         50:bf:0b:07:86:0a:1c:56:36:6a:ce:b5:77:f5:ae:9d:00:0d:
         6e:d0:f4:e7:45:0b:52:19:76:1e:ff:8f:af:92:b9:ff:46:e1:
         7f:14:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:28 2026 by rpki-client