Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/2E8796D201D811F1B1EB0BE0366F56BC.roa
File:                     2E8796D201D811F1B1EB0BE0366F56BC.roa (raw, json)
Hash identifier:          YVwgaI+huZA46nmcI9iYDdmV1kn72vAJet9xOxwjHqU=
Subject key identifier:   B0:6B:D8:4C:AA:BA:62:B9:BA:31:6D:CA:8A:B0:C8:E7:90:E0:97:EA
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       03B2
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/2E8796D201D811F1B1EB0BE0366F56BC.roa
Signing time:             Sun 01 Mar 2026 18:40:31 +0000
ROA not before:           Wed 04 Feb 2026 14:45:43 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     205759
IP address blocks:        36.255.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Feb  4 14:45:43 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4881f-cc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:f6:c8:03:1a:69:32:23:ca:c6:d0:cf:f3:
                    6d:64:68:6b:bd:e1:7e:01:e4:2c:c1:2a:cc:d3:09:
                    15:e9:ac:85:69:3e:c5:a0:24:1b:72:b1:ec:68:a4:
                    e6:55:b9:ed:76:3c:6e:d5:78:79:a2:29:ea:7c:9e:
                    2e:18:68:2b:d3:be:8d:89:3e:24:86:da:24:b3:64:
                    25:e8:b0:00:15:6e:19:e1:ec:df:0b:1d:68:8e:e6:
                    e0:97:70:45:8d:34:05:5d:c6:98:16:50:31:a6:84:
                    17:2e:13:d8:cc:06:a0:fa:23:e4:fa:f3:b8:fd:23:
                    fc:68:aa:9d:4d:e6:a3:2c:09:77:7d:0f:37:2b:92:
                    d0:51:7e:b3:e3:ad:17:9b:17:f6:d3:83:a4:62:0c:
                    2d:90:36:df:9f:0f:e5:71:5b:0d:fe:e9:9e:6b:3d:
                    2f:ef:32:1f:e3:0f:1e:5a:f6:1e:ad:ca:15:31:5c:
                    7e:6b:7f:53:51:e9:44:b8:b9:37:9d:cd:9d:da:60:
                    ab:41:84:c7:cf:89:bc:2a:31:f1:3c:5e:53:4f:6c:
                    d3:73:e0:78:98:c2:13:d3:31:dc:14:58:98:af:0a:
                    cb:8c:70:c3:c3:65:c0:8a:62:52:7c:ea:c0:cb:24:
                    c9:b5:81:24:bc:ad:ec:57:de:94:09:8d:15:59:e1:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:D8:4C:AA:BA:62:B9:BA:31:6D:CA:8A:B0:C8:E7:90:E0:97:EA
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/2E8796D201D811F1B1EB0BE0366F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:36:41:69:c7:e0:9c:17:77:47:30:cc:25:78:03:80:f9:fc:
         4c:67:fa:d8:b9:4a:10:a4:34:1f:da:37:17:ff:21:f8:e3:d2:
         27:7b:a4:eb:82:a4:f3:7e:b3:52:c3:4f:63:4f:4a:0a:2e:ba:
         5b:0b:90:73:ba:4a:fb:e0:dc:4a:2a:64:b7:78:dc:1a:a4:52:
         10:71:2a:66:68:16:55:93:fc:2a:b6:4c:66:e7:23:6e:17:76:
         41:d1:65:4b:ad:f1:67:88:59:47:46:01:75:e2:09:cc:2d:3d:
         9c:9e:61:6e:26:65:db:46:fb:01:b6:5d:bd:65:ce:a5:41:68:
         fc:45:ab:34:f9:57:0a:41:7b:39:03:7e:66:56:75:31:05:da:
         89:86:23:e5:a5:f2:ca:d7:23:0d:92:e6:dc:ef:dc:0a:b7:b5:
         e7:34:f9:f2:c1:f4:f0:b8:8e:26:d3:f7:a8:60:2f:f8:68:00:
         d3:81:6a:ab:c9:c9:4e:ff:82:ae:3d:22:99:d9:73:fa:d4:01:
         5f:91:22:6d:87:a0:64:33:04:f5:b9:af:9f:20:19:86:1d:fc:
         56:25:49:05:49:36:67:1c:87:33:8a:da:0f:61:87:7f:a6:57:
         7a:1d:6a:73:f1:4c:1d:97:1b:f5:da:11:d7:20:46:84:22:83:
         3a:9a:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:10:01 2026 by rpki-client