Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa
File:                     36E3783A1BA311F0985A7C2DC4F9AE02.roa (raw, json)
Hash identifier:          w9x6ex+eugipzBiKV6t1m+6mQ2AuaVk/w2nbhUiC89E=
Subject key identifier:   71:98:6F:8A:6A:4B:E2:9C:BB:64:26:29:FC:E8:E1:CB:6C:8C:7A:46
Certificate issuer:       /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial:       A5
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:03:12 +0000
ROA not before:           Thu 17 Apr 2025 15:47:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153667
IP address blocks:        163.223.34.0/24 maxlen: 24
                          163.223.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
                          rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
        Validity
            Not Before: Apr 17 15:47:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3e4b0-244a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:42:a7:e7:4b:4c:93:63:70:ba:24:a0:06:7d:
                    01:27:67:eb:2b:92:7d:b1:46:bc:a1:60:32:03:0e:
                    62:78:d6:98:58:f1:b3:8c:06:0e:a2:15:e5:e1:6b:
                    37:d0:11:0d:15:e7:df:24:7c:28:38:3f:33:46:c2:
                    32:be:58:91:2c:e4:ff:32:5f:cc:8b:15:47:38:f2:
                    dc:9a:d2:d9:ea:d5:dc:35:0c:f9:74:2f:b2:4e:23:
                    f6:9c:0e:2a:a7:c1:31:80:05:5d:b7:3c:92:0f:14:
                    47:e0:bc:fa:1e:b2:b3:03:a9:7a:98:e8:1b:a4:5a:
                    32:bb:c1:46:93:3d:b6:56:e7:b0:8a:6b:fd:a7:f5:
                    73:94:5e:8b:30:46:0e:a4:19:76:84:6b:90:87:da:
                    1e:2b:b0:c3:29:07:e2:3a:74:24:e7:b1:12:63:b6:
                    83:26:d9:9d:bd:39:79:fb:6a:3f:9e:48:19:30:1b:
                    7b:8a:6a:62:ee:26:e2:28:73:04:2a:ee:5a:69:d1:
                    bf:d4:67:5b:01:d0:46:24:cb:22:3e:e8:0b:e0:ad:
                    09:bd:d7:ea:0b:a2:b6:e0:92:58:a6:c1:87:e7:6c:
                    2e:73:fa:e7:9c:45:4e:3e:33:91:9d:06:39:d5:fb:
                    93:44:0e:d8:9d:5c:43:4a:f3:83:92:31:e4:e0:29:
                    4f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:98:6F:8A:6A:4B:E2:9C:BB:64:26:29:FC:E8:E1:CB:6C:8C:7A:46
            X509v3 Authority Key Identifier:
                keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/36E3783A1BA311F0985A7C2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:24:8e:16:f4:39:67:95:65:05:18:a0:59:54:e4:e8:76:be:
         01:82:a8:e2:8d:f7:aa:14:24:ae:45:a2:df:9b:b2:2d:41:6b:
         cc:4d:aa:2d:b0:da:a3:bd:87:f9:1d:f9:19:4f:76:8e:ed:b4:
         f5:a9:dd:05:4b:87:f5:db:bc:43:1d:8c:b7:76:33:38:14:a3:
         d9:35:4a:0d:ae:03:4b:9c:7a:99:7d:67:4a:c9:27:18:83:8c:
         4d:12:8a:62:cb:5c:52:5f:20:1c:84:ed:4b:20:65:b6:c8:56:
         81:37:39:87:dd:a6:9c:aa:0d:8c:73:e5:d7:ac:82:cf:79:b3:
         e3:01:50:8d:6d:60:77:de:49:06:44:25:7d:61:9c:5b:c7:45:
         fd:dc:f4:19:cb:48:48:d7:5e:10:99:01:b4:c4:91:d9:35:b8:
         74:e8:d4:df:88:d7:2c:81:c0:96:b2:4c:39:3d:d0:d7:5f:94:
         b5:1a:88:19:d9:99:91:57:24:64:dc:5a:e1:b7:af:d6:08:74:
         7a:65:cd:61:79:76:a5:92:82:89:6e:dc:de:33:83:c2:22:c0:
         34:fa:fb:a3:2a:bb:2b:a7:b3:84:f1:89:9a:75:9b:c8:d7:5d:
         4d:9a:0c:4e:5c:85:15:5f:d0:0b:b6:27:a2:86:4c:f4:1e:61:
         ef:3c:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:14 2026 by rpki-client