Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa
File:                     37BC67B4B18711EC9F9FA058C4F9AE02.roa (raw, json)
Hash identifier:          +Zo+GE47nCPsv695fxIYNrfynlrU+h6qSwc2Ij1ieLg=
Subject key identifier:   B8:70:E4:CA:59:04:14:F1:E1:F3:32:75:4B:90:09:D0:B1:98:AD:A8
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       1242
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa
Signing time:             Fri 20 Feb 2026 17:15:36 +0000
ROA not before:           Fri 20 Feb 2026 17:15:35 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133043
IP address blocks:        103.206.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4674 (0x1242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Feb 20 17:15:35 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=699896b7-9f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:63:4a:19:ee:e0:99:e6:47:0e:ab:57:c4:
                    e8:56:ba:82:83:12:eb:64:7a:d2:ec:98:44:3c:f9:
                    4d:41:ea:1d:61:28:69:10:a0:3e:e5:ac:aa:f4:83:
                    45:6e:96:81:c3:57:c6:d7:ab:57:ca:6c:ba:f1:a6:
                    2b:be:e5:c7:ab:63:70:f1:24:20:ed:a0:8d:42:3d:
                    68:85:68:95:f2:d2:44:54:48:a6:21:d1:96:c1:e0:
                    b3:f1:e9:ee:63:41:c4:0c:cf:32:62:a0:ac:7c:13:
                    36:46:f1:6f:82:de:23:b3:18:10:3d:80:ba:de:52:
                    39:5e:5f:33:87:d6:34:be:bd:83:ca:07:41:34:70:
                    48:83:09:ca:19:6f:df:f7:48:3a:70:24:87:28:5d:
                    71:56:13:cb:7c:a6:88:6d:20:8e:b9:4a:bc:d6:55:
                    34:0c:3c:50:24:ff:1c:b6:ff:5b:91:3b:ef:b1:4b:
                    db:d3:97:ef:55:76:86:7f:f3:ed:96:a2:74:77:7c:
                    20:f7:26:cd:96:3e:5f:14:5b:28:64:95:33:d8:1a:
                    ca:48:4f:e5:bd:36:96:41:6a:ec:c3:98:2c:44:b1:
                    c9:46:99:6c:7d:fd:38:af:7e:b7:47:13:e2:a5:ed:
                    1d:25:90:e6:41:d1:42:77:c1:b6:9b:b1:14:c0:58:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:70:E4:CA:59:04:14:F1:E1:F3:32:75:4B:90:09:D0:B1:98:AD:A8
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/37BC67B4B18711EC9F9FA058C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:e7:cc:9d:9d:5e:b9:5d:36:76:d1:6b:27:11:de:9b:07:79:
         b6:88:64:71:1f:5e:4f:69:58:cd:6b:54:dc:ee:d2:80:cb:6a:
         34:09:3a:fd:de:a2:22:9d:c7:d9:25:07:ee:67:83:8a:3b:4c:
         c2:96:f3:df:0d:c1:67:eb:6e:76:39:07:a9:60:1c:7b:a3:72:
         24:e8:97:f6:3d:5f:49:df:8f:a9:8f:32:ce:73:a5:27:fa:21:
         8d:6f:96:6f:9a:f0:46:b6:dd:08:f3:b0:02:77:9e:a5:ce:f5:
         ae:5a:85:72:6a:da:1c:84:85:5c:c7:10:05:68:2b:f1:dc:1a:
         d2:59:7b:a0:33:b1:9e:2c:d5:bb:2a:ed:ad:1f:b2:89:16:b4:
         f7:d0:d5:f0:0e:2a:32:af:1f:c3:2a:75:48:73:6a:d4:a0:f6:
         b4:d6:23:81:be:ed:cb:d4:4a:74:12:78:b9:a0:b2:76:58:77:
         00:44:95:ef:ee:05:38:85:ca:c3:b1:cb:10:fd:d6:9f:8f:9b:
         dd:7d:78:1b:65:94:ba:5e:c0:ae:d4:e7:d0:a3:0f:1f:f2:12:
         ea:77:49:cf:bb:68:cf:87:4a:9c:d9:6f:66:49:2a:f4:55:1d:
         ff:aa:5e:89:cd:39:f5:14:9d:10:e5:77:40:19:91:c4:87:3d:
         db:32:eb:c5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC
MjFBNDMzRUMwHhcNMjYwMjIwMTcxNTM1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTk4OTZiNy05ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj65jShnu4JnmRw6rV8ToVrqCgxLrZHrS7JhEPPlNQeodYShpEKA+5ayq9INF
bpaBw1fG16tXymy68aYrvuXHq2Nw8SQg7aCNQj1ohWiV8tJEVEimIdGWweCz8enu
Y0HEDM8yYqCsfBM2RvFvgt4jsxgQPYC63lI5Xl8zh9Y0vr2DygdBNHBIgwnKGW/f
90g6cCSHKF1xVhPLfKaIbSCOuUq81lU0DDxQJP8ctv9bkTvvsUvb05fvVXaGf/Pt
lqJ0d3wg9ybNlj5fFFsoZJUz2BrKSE/lvTaWQWrsw5gsRLHJRplsff04r363RxPi
pe0dJZDmQdFCd8G2m7EUwFiohwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLhw5MpZ
BBTx4fMydUuQCdCxmK2oMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD
RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODJGQkMvQTMzNUIyNThGQ0U0MTFFODkwRkMxRTM3QzRGOUFFMDIvMzdCQzY3QjRC
MTg3MTFFQzlGOUZBMDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnziIwDQYJKoZIhvcNAQELBQADggEBAMfnzJ2dXrldNnbR
aycR3psHebaIZHEfXk9pWM1rVNzu0oDLajQJOv3eoiKdx9klB+5ng4o7TMKW898N
wWfrbnY5B6lgHHujciTol/Y9X0nfj6mPMs5zpSf6IY1vlm+a8Ea23QjzsAJ3nqXO
9a5ahXJq2hyEhVzHEAVoK/HcGtJZe6AzsZ4s1bsq7a0fsokWtPfQ1fAOKjKvH8Mq
dUhzatSg9rTWI4G+7cvUSnQSeLmgsnZYdwBEle/uBTiFysOxyxD91p+Pm919eBtl
lLpewK7U59CjDx/yEup3Sc+7aM+HSpzZb2ZJKvRVHf+qXonNOfUUnRDld0AZkcSH
Pdsy68U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:04 2026 by rpki-client