Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa
File:                     9A4656B4487911F181BECDDBA9833773.roa (raw, json)
Hash identifier:          +2oc9IMIoRMKaYWaJMmtSakRscL+N50q6yL7CT1j1Mc=
Subject key identifier:   7B:3B:D2:56:A9:F3:5E:D4:BA:A2:17:9C:F6:4E:5B:3E:10:74:61:6C
Certificate issuer:       /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial:       07F5
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa
Signing time:             Fri 29 May 2026 18:28:53 +0000
ROA not before:           Fri 29 May 2026 18:28:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        36.255.196.0/24 maxlen: 24
                          36.255.197.0/24 maxlen: 24
                          36.255.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
        Validity
            Not Before: May 29 18:28:53 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6a19dae5-a35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:e3:0d:d3:bc:d6:89:95:8a:fd:e7:52:1f:
                    5b:23:f6:32:71:38:cc:62:80:db:4a:83:0d:31:bf:
                    be:34:04:66:25:a2:29:a5:5c:e5:53:f0:f7:37:e7:
                    bd:b4:6d:ec:ba:46:12:16:86:01:57:d2:f0:6f:9e:
                    f3:af:00:36:fe:86:fa:b0:02:84:d6:a7:28:b4:19:
                    1b:06:04:f9:db:f9:55:d0:e5:ba:15:a2:e4:71:50:
                    50:51:3c:18:43:30:7d:a3:12:2d:03:51:e6:14:c5:
                    f8:a6:f4:58:fb:55:bb:d2:16:5d:4d:19:30:5f:3a:
                    dd:3e:2e:24:95:a6:88:85:e8:d3:32:91:b4:ad:f1:
                    fb:74:ff:12:bf:b5:f1:cd:7c:47:da:22:63:f2:a3:
                    9d:6d:80:cf:a4:41:13:1a:8b:c0:4c:4c:d5:5b:72:
                    1d:0d:69:0c:c3:18:04:04:31:a7:81:ab:dc:e7:a2:
                    19:94:7c:54:b5:f5:1e:ec:49:70:5f:7d:f2:1e:a5:
                    15:49:1a:a7:06:76:00:6a:66:ff:82:d2:5e:a6:ba:
                    9a:7c:99:33:f0:be:23:8a:31:29:fe:0a:eb:6a:3f:
                    ae:95:b5:8f:46:f3:4c:ee:0b:c6:88:8f:1b:83:f1:
                    ca:3f:91:c1:64:43:63:7c:4f:09:7a:38:cd:18:2f:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3B:D2:56:A9:F3:5E:D4:BA:A2:17:9C:F6:4E:5B:3E:10:74:61:6C
            X509v3 Authority Key Identifier:
                keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.196.0-36.255.198.255

    Signature Algorithm: sha256WithRSAEncryption
         5e:00:c0:5c:1b:da:86:8c:ba:47:2d:57:57:01:30:21:d0:a2:
         5c:ce:82:9b:8f:df:81:6e:b2:da:d6:61:de:fd:6a:00:fc:74:
         5d:0d:dc:23:d7:bb:38:dc:0d:59:23:c7:cc:66:de:f0:b9:64:
         d4:42:c3:d0:95:bc:7b:50:86:bf:7a:bc:8c:52:3c:6d:10:54:
         51:2d:40:05:22:dd:77:8b:a6:7f:96:ce:63:36:5d:c5:53:c5:
         9d:47:49:81:eb:93:dc:8d:5a:a0:42:bc:4f:4e:f3:bf:60:dd:
         55:87:60:2e:96:2a:95:4a:72:c9:6c:98:f9:9e:61:65:43:a0:
         7b:2c:17:62:e7:01:48:c2:76:00:44:69:03:23:ed:9c:e7:0e:
         26:72:97:4d:fd:75:ec:c5:15:92:6b:b0:67:20:18:8e:e6:41:
         93:b5:8c:84:40:c5:8a:9d:06:43:b6:35:c5:26:e0:ba:1c:3e:
         b7:1e:ef:2a:9a:e0:c0:82:dc:6c:66:b1:e0:b0:71:de:6f:27:
         c7:b2:87:bf:75:a8:cf:99:45:b3:7d:e7:0a:db:4c:dd:73:0e:
         7c:ed:c7:8f:78:a6:21:3a:67:0f:56:ed:04:f4:a7:ad:b4:e1:
         40:79:85:09:eb:fb:48:27:57:0c:0c:d6:06:34:64:a2:18:0b:
         ae:e3:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:31 2026 by rpki-client