Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa
File:                     A34995A0733611F08B36357EC4F9AE02.roa (raw, json)
Hash identifier:          P5GyR2UXuQcDXhg/Ux7PQeDmUE4U2dW3j3z+L2FqGmA=
Subject key identifier:   74:63:C5:8D:07:12:D1:2B:08:79:DC:A2:27:9B:E0:FE:01:0E:C2:2A
Certificate issuer:       /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Certificate serial:       8B
Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa
Signing time:             Thu 16 Apr 2026 16:40:37 +0000
ROA not before:           Thu 16 Apr 2026 16:40:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     23693
IP address blocks:        39.192.0.0/10 maxlen: 10
                          39.194.1.0/24 maxlen: 24
                          39.194.2.0/24 maxlen: 24
                          39.194.3.0/24 maxlen: 24
                          39.194.4.0/24 maxlen: 24
                          39.194.5.0/24 maxlen: 24
                          39.194.6.0/24 maxlen: 24
                          39.194.7.0/24 maxlen: 24
                          39.194.8.0/24 maxlen: 24
                          39.194.9.0/24 maxlen: 24
                          39.194.10.0/24 maxlen: 24
                          39.194.11.0/24 maxlen: 24
                          39.194.12.0/24 maxlen: 24
                          39.194.13.0/24 maxlen: 24
                          39.194.14.0/24 maxlen: 24
                          39.194.15.0/24 maxlen: 24
                          39.194.16.0/24 maxlen: 24
                          39.194.32.0/24 maxlen: 24
                          43.255.196.0/22 maxlen: 22
                          103.239.188.0/22 maxlen: 22
                          2400:82e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
                          rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
        Validity
            Not Before: Apr 16 16:40:37 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69e11105-078f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:5f:34:4f:46:9c:7a:2a:1f:58:3d:24:c1:
                    46:78:9e:49:86:f4:cd:6b:b0:c8:af:39:ab:a2:bb:
                    de:fa:7e:60:e1:9f:3a:63:33:66:6f:d1:53:e6:74:
                    f2:66:c6:56:8d:cd:cf:77:81:b3:73:a3:78:5f:af:
                    26:ca:57:ce:24:d4:e0:72:23:01:9b:fa:e9:2e:d5:
                    f3:9c:18:61:17:43:bc:e9:fd:31:8f:ea:f4:a2:6d:
                    b5:5d:2f:b4:12:c1:74:59:92:25:ed:08:9d:c5:ad:
                    f3:43:86:5a:1d:c5:d9:5a:b2:e1:7f:f0:df:c5:1e:
                    aa:c8:a9:2c:51:d5:f8:f6:69:f7:15:5c:02:a3:ba:
                    60:c7:61:8f:f5:55:7e:20:08:9d:88:90:50:67:d7:
                    98:ed:22:d3:bf:8c:aa:cd:96:ac:bc:07:df:2d:42:
                    94:61:77:5d:a2:97:ac:c8:cf:d1:cd:b3:5b:92:8d:
                    b7:de:a2:1f:de:4d:29:ff:e7:d5:a0:e6:f2:7a:14:
                    32:ab:22:51:f5:cd:cb:4f:7c:49:a2:24:5b:52:32:
                    02:c1:b4:60:d6:85:c8:ad:9b:01:48:b4:9e:3d:14:
                    38:df:b6:a1:c4:ea:9d:29:93:08:0d:be:ba:f4:17:
                    00:14:0a:6c:c6:a3:d6:62:41:34:91:c2:81:1e:99:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:C5:8D:07:12:D1:2B:08:79:DC:A2:27:9B:E0:FE:01:0E:C2:2A
            X509v3 Authority Key Identifier:
                keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/A34995A0733611F08B36357EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.192.0.0/10
                  43.255.196.0/22
                  103.239.188.0/22
                IPv6:
                  2400:82e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:09:ef:c0:bf:39:b9:8a:90:14:5e:8f:97:70:65:5f:08:
         88:a5:08:51:d4:fe:7a:cd:2a:7f:df:5e:9d:22:8d:1d:f5:4f:
         7a:6e:ab:77:18:d8:c2:2b:20:da:47:03:be:e8:12:a1:98:ba:
         0c:6d:00:63:5c:13:4b:d4:c0:0d:0e:68:a0:d6:e7:ca:fb:7e:
         51:30:26:2f:22:7d:1f:44:bc:d5:a1:6d:de:41:2b:4a:47:85:
         5e:c5:d8:2f:0c:55:82:6e:c2:49:40:eb:1b:84:43:cb:9c:82:
         fa:e8:9c:05:77:7c:58:23:91:50:2f:89:10:07:02:de:46:5c:
         72:b0:03:99:34:60:ff:7b:d0:1e:a7:16:4a:7f:f7:14:b0:47:
         d5:3c:8e:99:a3:27:a3:00:e8:7c:34:79:ae:c5:60:2d:da:80:
         c1:69:6e:0c:18:41:4c:14:52:83:bb:fe:b9:ab:f3:89:73:06:
         5c:13:23:f0:85:40:4c:e2:ff:62:0b:12:50:68:29:8b:49:78:
         61:72:b1:46:ca:3d:c9:5b:d9:c0:97:97:c4:2e:47:cc:d0:9e:
         f5:bc:ef:d4:ea:46:29:07:d7:23:2d:47:78:7e:c1:39:61:1c:
         0d:9d:ef:f5:bd:ab:c0:5d:fb:5c:9d:9b:78:09:56:3f:c2:69:
         e0:97:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:57 2026 by rpki-client