Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa
File:                     0BD4BBC2716911EDA03D4A50C4F9AE02.roa (raw, json)
Hash identifier:          YTV9GB7KILPT469xPemXqP45y5kol49OiFIqh8pEkW0=
Subject key identifier:   B2:51:8E:E9:C5:4F:17:24:43:4A:14:A4:C0:A3:84:29:1F:86:98:E2
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       0D91
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa
Signing time:             Wed 04 Nov 2026 23:45:46 +0000
ROA not before:           Wed 04 Nov 2026 23:45:46 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134927
IP address blocks:        36.255.200.0/22 maxlen: 22
                          36.255.200.0/24 maxlen: 24
                          36.255.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3473 (0xd91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Nov  4 23:45:46 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aebc3aa-5580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:8f:2b:93:7a:09:f5:94:31:ce:96:a1:02:
                    bc:ec:04:92:45:f7:8b:e0:88:27:17:d5:76:45:a4:
                    15:01:58:6d:6a:ed:74:e8:01:ad:5f:24:ca:85:5a:
                    c8:bf:6f:34:41:26:4e:cc:00:24:19:4e:77:d7:01:
                    c2:ca:c3:f5:d5:6b:2f:5f:4d:7e:21:21:35:b7:52:
                    1c:03:54:40:8a:42:d0:e2:bc:21:79:67:d0:50:0f:
                    90:fb:af:b0:59:ad:ed:a2:51:a6:77:31:9e:30:6c:
                    ee:9a:44:82:cf:e7:50:99:f8:6e:01:a4:23:e4:f7:
                    a6:fa:f4:c4:7c:fb:42:25:76:9d:7b:65:5a:55:06:
                    fb:97:ca:95:e0:de:8d:c0:1c:3a:70:41:bd:7a:bf:
                    76:8a:e8:1a:8c:08:a0:3f:09:f7:89:df:24:dd:7b:
                    47:3c:bb:29:93:17:ca:c7:e2:e4:c4:ec:51:b9:49:
                    cd:57:c6:a2:90:d8:cb:98:db:73:d0:5e:f5:02:b4:
                    b0:d8:76:e3:c5:a3:79:23:b8:ba:ea:e4:da:26:a6:
                    9b:c0:ef:81:29:4b:63:cb:1e:90:b0:8b:fe:fe:bc:
                    7b:a6:fb:6f:4f:78:4b:4c:4f:4a:9a:8c:e1:e7:b3:
                    98:9e:21:6f:b1:36:c5:cf:78:33:2d:d9:79:d3:4e:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:51:8E:E9:C5:4F:17:24:43:4A:14:A4:C0:A3:84:29:1F:86:98:E2
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:33:f3:de:0e:81:17:e3:22:81:cc:27:d5:3b:ee:ae:94:
         c2:97:a4:23:d7:3d:27:ba:b0:ae:30:51:76:2a:bc:af:ff:8f:
         e8:3f:14:22:57:76:85:ab:96:85:a7:bc:d0:9d:41:c3:47:73:
         dc:ba:99:2e:62:80:17:7a:8c:dc:b1:7f:17:0d:21:76:6e:dd:
         06:f0:9a:d4:86:5c:5b:db:69:ad:de:b2:22:78:db:95:55:0c:
         0b:b0:26:70:9d:34:fb:d6:a6:09:c3:db:5e:d5:ac:29:5c:6f:
         8d:cf:e9:03:7b:de:57:2f:8b:fe:d5:28:08:e0:d1:e4:ed:dd:
         4a:11:6b:11:b7:dd:e7:94:8d:2e:88:dc:9f:4e:19:41:1e:17:
         45:4d:de:83:c2:95:05:80:6d:58:e5:b1:b3:83:2f:0e:5a:f3:
         40:19:95:09:1f:f8:b6:a5:4d:8a:de:b3:e7:ef:a7:d0:a8:e6:
         a1:af:67:0c:ee:e6:00:a1:d7:09:3c:d4:29:e5:01:4b:33:35:
         47:43:f3:bf:c0:fc:ce:0a:ac:bb:12:57:64:3e:32:c1:e7:da:
         ee:54:a8:4f:e0:57:c7:08:7b:0c:2b:4f:92:eb:4e:98:7c:27:
         33:f1:86:f8:0f:17:17:b5:a3:f2:87:62:77:24:ba:87:a6:ac:
         6b:a8:75:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:51 2026 by rpki-client