Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa
File:                     36477FF69D2E11E99A95DC2AC4F9AE02.roa (raw, json)
Hash identifier:          7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=
Subject key identifier:   90:23:70:52:3D:60:73:04:2F:0E:09:6A:0D:6D:BA:FD:7B:75:E2:75
Certificate issuer:       /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
Certificate serial:       0EEC
Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:38:06 +0000
ROA not before:           Sat 20 Dec 2025 18:14:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138468
IP address blocks:        103.126.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 17:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3820 (0xeec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
        Validity
            Not Before: Dec 20 18:14:58 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44f4e-bc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:b0:27:12:7b:b1:9f:1f:29:23:03:d9:62:
                    16:20:e8:bf:65:03:78:cf:49:04:ec:84:b2:ca:ef:
                    67:1f:34:cb:a9:8e:7d:ff:51:4e:92:e2:aa:9d:cd:
                    49:5d:32:90:ba:d9:aa:d4:63:be:96:32:93:87:19:
                    04:15:b3:08:5d:b1:18:94:cf:95:1b:e3:a4:a2:f2:
                    40:7b:6d:f4:82:7d:d2:2a:4a:f9:61:a4:90:02:c9:
                    37:a2:9e:f6:55:a3:84:4a:31:3c:f8:4e:b7:30:65:
                    01:80:a8:51:06:d7:a7:7f:75:f9:d3:15:2e:09:eb:
                    33:c5:4c:ac:81:74:6e:14:62:67:3f:a1:7a:7e:3b:
                    d7:6d:7f:ce:60:f7:11:6a:b6:70:39:94:f9:82:12:
                    74:05:fc:5c:a9:8b:b3:05:48:e1:26:1f:9a:32:7d:
                    0c:3c:55:e4:03:13:65:c3:e7:83:1e:ca:2a:f8:af:
                    6b:ae:91:f3:93:1d:6a:63:09:7e:c0:a3:5c:a0:ea:
                    06:9e:ac:47:26:08:e1:d8:ab:16:fa:a1:d8:be:22:
                    35:69:03:5e:4f:27:4f:ce:f4:ae:42:00:61:6b:5d:
                    0c:51:95:c8:bd:79:62:d4:25:fe:47:27:5c:38:89:
                    c2:9a:a2:1e:e5:42:c7:f0:68:90:d3:c4:a6:15:4e:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:23:70:52:3D:60:73:04:2F:0E:09:6A:0D:6D:BA:FD:7B:75:E2:75
            X509v3 Authority Key Identifier:
                keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:33:08:8b:0e:c9:a9:5c:38:b4:10:c8:3d:fe:00:d4:8b:75:
         cb:d0:2c:b9:57:9d:b1:f9:26:48:d8:05:09:a4:92:69:b4:79:
         ec:a6:1d:0e:b2:f4:0a:a9:f4:f8:87:eb:f3:84:fd:4e:e9:ce:
         f1:e6:74:9f:4e:cd:b5:4e:0a:f2:4f:41:d9:6b:55:7f:24:9e:
         fc:e6:3c:b8:a6:e3:dc:90:c1:fd:a9:89:cf:29:1e:1f:9b:9f:
         ad:ba:3b:f7:ff:63:03:b8:f6:bd:14:9a:96:b4:d6:80:a7:ed:
         78:52:14:ac:72:1a:55:09:51:7e:a4:ae:87:a5:43:d0:c9:82:
         e9:70:1d:11:a8:23:cf:41:27:1b:7b:97:17:98:fa:18:93:9d:
         9c:19:0c:a6:24:0a:e9:53:3e:7e:6c:a9:87:e8:94:2f:f1:34:
         30:b1:5f:76:cd:8c:bd:4a:45:fa:1d:df:c1:6a:67:a7:33:5d:
         4f:72:1b:45:3a:ad:5a:5b:b3:e6:9a:8d:ce:26:bd:e1:f1:66:
         2d:25:fe:4c:fe:46:cd:f6:d3:2e:5d:21:5b:c9:68:e9:ef:4e:
         3d:2a:ca:c5:8f:10:63:7b:4b:21:fb:72:ab:c3:6c:fd:eb:ba:
         1a:cc:81:89:71:35:f2:67:a6:6b:bb:af:e8:0e:a6:c9:89:c0:
         e2:0d:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:41 2026 by rpki-client