Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/2332E938BD3811F0B9AC9752C4F9AE02.roa
File:                     2332E938BD3811F0B9AC9752C4F9AE02.roa (raw, json)
Hash identifier:          j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=
Subject key identifier:   49:FD:93:1C:5C:50:84:28:6A:52:47:BC:13:27:0F:50:A0:F9:93:91
Certificate issuer:       /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial:       3C
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/2332E938BD3811F0B9AC9752C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:04:44 +0000
ROA not before:           Sun 09 Nov 2025 06:48:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154335
IP address blocks:        2402:36a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
        Validity
            Not Before: Nov  9 06:48:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d6fb-67d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:84:3c:ac:ba:d4:a0:ca:55:00:8a:1f:76:
                    43:f4:de:5a:b4:34:dc:a5:f8:76:30:ed:8f:6d:f9:
                    39:5a:af:1e:fe:f5:16:cd:fc:28:f2:4a:63:9b:57:
                    7b:3b:53:b1:f0:66:3c:5d:cc:86:1f:e4:f2:06:02:
                    f0:53:b2:11:c8:72:3d:1f:be:eb:b3:b1:cb:01:3c:
                    52:36:e6:8c:e1:0f:6f:6d:b5:24:16:78:6e:80:e2:
                    6c:25:31:20:b2:b7:1a:aa:f9:c1:40:8d:4b:50:79:
                    36:48:82:86:55:6a:32:3f:8f:ab:02:80:7f:98:d6:
                    2f:2b:22:90:1d:f4:e3:13:43:9c:ae:55:ee:42:df:
                    c6:f4:89:68:83:2a:ad:d5:b9:1c:a3:71:bb:83:1a:
                    b1:5b:b3:80:57:ae:50:8b:28:26:b8:b9:1b:5a:0d:
                    ec:fd:23:bf:15:f7:18:eb:90:b3:18:04:93:e9:8e:
                    f6:36:7e:bd:2f:53:43:5f:34:d6:05:5f:3e:90:80:
                    47:f3:2b:74:4b:16:bf:08:5c:27:d1:c7:ca:0e:70:
                    ce:2c:57:1f:dd:dc:a1:e9:e0:90:a6:aa:09:fb:df:
                    f6:19:61:1b:48:8b:96:62:bb:48:25:4b:93:a5:26:
                    f3:b2:f5:c2:69:ac:67:f5:fa:a2:36:c4:04:95:83:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FD:93:1C:5C:50:84:28:6A:52:47:BC:13:27:0F:50:A0:F9:93:91
            X509v3 Authority Key Identifier:
                keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/2332E938BD3811F0B9AC9752C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:36a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:d5:b4:b9:0e:8c:e1:5f:cc:d7:a9:94:06:00:47:f0:0a:c7:
         94:eb:1a:26:49:35:c1:26:e6:65:87:40:22:ff:9d:4f:3a:10:
         34:0f:9b:d3:07:da:9f:ed:e1:33:5d:11:f1:47:7e:bf:80:88:
         4e:cd:ec:9a:4b:bd:a1:6e:d5:62:b4:7e:7e:31:30:70:c7:9a:
         46:36:31:92:26:75:79:a8:69:37:78:f9:39:3f:ba:b1:1c:d1:
         67:c0:81:45:af:22:cb:ec:1c:b3:a6:50:40:09:fa:e0:cb:3c:
         14:05:8f:cb:d2:5f:cb:29:40:b3:16:ef:4d:5e:ee:8e:e4:0b:
         55:c6:e4:3d:3c:d6:dd:b3:2d:b8:f5:1b:6f:8b:fa:71:42:1e:
         84:d3:ab:a0:c7:45:2b:fe:58:43:f2:90:ff:35:7b:34:fb:99:
         b4:88:37:9a:79:fe:66:7f:eb:f9:dd:85:9a:51:0d:48:7c:a3:
         3d:b3:9c:92:1a:85:c0:f9:26:40:db:e4:4f:31:d0:fc:bd:c1:
         3a:fe:07:bf:eb:d4:72:5c:bf:7d:ba:58:8f:60:ca:01:a9:8f:
         65:9d:53:a8:e8:10:47:12:ea:34:c5:13:19:68:17:f6:e4:8b:
         bd:f1:b5:74:ab:75:f4:fd:b9:f2:86:eb:15:cc:f0:0c:e9:1b:
         fa:68:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:19 2026 by rpki-client