Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/36C13562946211F0A915C35EC4F9AE02.roa
File:                     36C13562946211F0A915C35EC4F9AE02.roa (raw, json)
Hash identifier:          1NX+V4nMdU0uu4W41gO+PJfYAkOiCjrRa6G9ZsWqv5c=
Subject key identifier:   B6:85:0A:CB:6B:3E:3D:6C:11:1B:3B:B7:B1:38:15:B0:E1:89:4B:51
Certificate issuer:       /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial:       0B19
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/36C13562946211F0A915C35EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:57:20 +0000
ROA not before:           Thu 20 Nov 2025 19:10:18 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     63527
IP address blocks:        2400:9380:801a::/48 maxlen: 48
                          2400:9380:801b::/48 maxlen: 48
                          2400:9380:801c::/48 maxlen: 48
                          2400:9380:801d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2841 (0xb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
        Validity
            Not Before: Nov 20 19:10:18 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47e00-5d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:5d:95:6d:5a:47:bd:94:40:b8:17:db:33:
                    d8:5e:c2:e7:aa:d0:35:72:b8:4a:38:7f:08:2c:a7:
                    ca:46:41:b7:53:45:ba:2f:5f:94:c4:ac:03:31:6d:
                    78:a9:77:5e:e0:df:f7:3a:47:72:54:b9:91:da:6a:
                    94:9c:83:bd:a5:72:c9:23:a9:f3:60:2b:d7:4d:b5:
                    ce:4f:c0:53:1d:4e:bd:06:07:46:41:9e:17:91:7c:
                    57:63:fa:09:57:86:1b:44:4f:83:b3:19:bb:a7:b7:
                    ff:19:76:19:4e:4a:bb:62:73:dc:0a:fa:98:df:79:
                    72:ca:6b:f1:4e:e2:d6:54:79:7f:4a:c1:95:2e:cb:
                    f5:96:49:c8:6a:8f:85:58:90:3c:0c:60:19:fd:1c:
                    e2:76:f9:98:19:a5:ac:6a:9b:62:98:06:28:08:82:
                    27:d7:b5:5d:f4:a2:e8:8d:43:8b:16:a1:1f:5f:b8:
                    1a:7e:46:af:a8:da:9b:00:83:e6:cc:e0:f1:65:89:
                    2b:d6:52:12:8b:70:28:28:62:27:60:fd:d2:22:00:
                    82:47:89:ba:66:af:a2:33:e8:3f:01:9b:0d:06:77:
                    1b:72:70:ba:2c:64:f7:f9:27:f8:76:ce:74:55:08:
                    94:70:36:19:cf:05:43:6c:06:f3:62:68:dd:e4:ef:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:85:0A:CB:6B:3E:3D:6C:11:1B:3B:B7:B1:38:15:B0:E1:89:4B:51
            X509v3 Authority Key Identifier:
                keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/36C13562946211F0A915C35EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9380:801a::-2400:9380:801d:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         91:57:cc:1c:f0:53:41:75:e6:07:13:4c:2b:c1:13:96:c0:a0:
         81:df:02:ac:17:a0:41:0e:f3:b4:6b:92:8b:c5:77:8c:bf:ef:
         38:0d:e5:02:f4:2b:6f:a1:4d:e9:c6:43:05:68:fd:6f:92:25:
         cb:1a:34:8d:af:25:d0:9e:2e:7a:0d:9c:61:40:c3:3d:69:6e:
         f7:58:b2:a1:59:47:ae:d2:57:bb:3d:74:45:6d:58:a8:3c:36:
         a3:0b:25:ec:88:07:09:16:7e:e5:90:c5:18:ac:50:b2:60:1f:
         c4:ca:77:45:69:32:00:3c:9b:71:0a:ef:f6:86:46:1f:d4:9e:
         d4:93:37:d1:e3:ff:47:ed:f1:a8:0a:bf:fa:fb:d1:90:99:c3:
         27:a2:c1:bc:2d:6e:75:3e:e0:61:6e:42:1f:7b:08:c9:38:14:
         4c:c3:18:cd:67:e8:21:fa:91:27:ef:de:fc:54:d6:d3:02:97:
         49:04:38:10:d6:7d:4f:7e:4b:98:ff:cd:dd:3e:71:2b:c4:f3:
         8c:5d:4c:12:03:f5:9b:e0:4c:96:94:c7:98:ce:5e:f5:46:67:
         f1:21:32:23:53:d2:a7:30:dc:e0:15:bb:ba:65:db:98:9f:f5:
         e3:4a:de:40:e4:58:24:27:c5:23:44:e1:13:1d:fe:56:7a:a5:
         0d:e4:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:16 2026 by rpki-client