Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/36A429EE2B3611F0B7DC5A48C4F9AE02.roa
File:                     36A429EE2B3611F0B7DC5A48C4F9AE02.roa (raw, json)
Hash identifier:          jlSTHiZ+rPM4RBOxDf2B0tiBPfuYAy8YiuqRGdcgbxg=
Subject key identifier:   4B:A8:E9:B7:9A:03:55:5C:62:FC:A0:56:01:51:DD:84:2C:CE:F3:9D
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3A68
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/36A429EE2B3611F0B7DC5A48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:22:30 +0000
ROA not before:           Fri 16 Jan 2026 16:13:38 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     45287
IP address blocks:        103.31.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14952 (0x3a68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:38 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4ae16-b68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:b5:02:a5:b9:10:b5:62:26:fa:db:3d:db:
                    04:11:03:14:41:39:ed:ad:3a:ab:4f:28:3d:7d:32:
                    4e:86:1f:9c:d9:19:4e:cd:b3:8c:9f:3b:4d:ca:f3:
                    20:46:f4:4f:bb:38:c9:8a:f1:59:8a:ed:20:e2:58:
                    de:45:ed:bd:4d:17:a4:9d:1e:a7:16:e3:f2:bc:29:
                    71:12:30:77:8a:0d:95:4d:02:e5:4b:4d:e0:04:bc:
                    28:95:bd:c0:25:df:9a:0f:f8:9d:16:d7:65:78:a0:
                    23:b7:c1:4a:d9:ec:38:33:8d:bf:10:2f:43:0e:6f:
                    16:f0:8c:ef:d1:9e:0f:3e:96:47:47:09:76:ac:93:
                    ed:95:df:9d:fb:6a:67:d9:fc:03:83:d9:14:e2:3a:
                    11:52:ea:76:f0:b2:f4:b5:5c:0b:7b:33:82:2a:b2:
                    d4:54:28:6b:c8:a8:28:b4:e9:25:36:0d:38:52:86:
                    0f:f2:fa:41:4f:da:ec:39:59:dd:32:af:96:a8:e3:
                    9d:37:46:60:e0:4f:f6:63:75:92:10:6b:f1:35:88:
                    ee:9d:2f:54:b7:d1:db:d8:c1:ec:c2:de:07:3a:97:
                    b6:85:49:2b:9e:67:f1:3b:9e:23:39:33:85:84:3a:
                    c1:d4:e9:07:e3:c8:6f:8c:82:04:0a:2a:f0:e1:84:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A8:E9:B7:9A:03:55:5C:62:FC:A0:56:01:51:DD:84:2C:CE:F3:9D
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/36A429EE2B3611F0B7DC5A48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:31:4f:62:6c:a5:b4:6b:37:06:ca:42:cd:6f:87:ae:91:
         69:43:ec:07:47:dc:80:89:87:10:f8:65:a5:55:cb:39:c0:07:
         44:b9:42:db:a2:cf:59:6b:dd:7a:71:b5:2e:e2:b2:12:c8:60:
         1f:fa:87:bc:3a:da:b9:0f:fb:ef:0d:48:12:28:08:17:4c:ed:
         e0:aa:b0:73:ac:86:4e:f0:e7:0f:ae:46:52:57:8f:a2:f2:71:
         e2:77:a2:fd:0c:83:b8:04:a3:21:7e:bb:39:6b:2e:ed:2f:22:
         af:82:f0:e1:96:22:c3:07:da:c1:10:b5:b1:ca:d1:39:43:34:
         9a:f6:cc:17:9b:54:6d:43:33:ea:68:d0:e7:b1:8e:d8:57:8d:
         7e:f2:55:df:0f:17:98:ec:8c:5c:e3:39:05:a4:bd:2a:e2:52:
         7c:d7:dc:8e:80:64:ac:30:a8:9e:de:56:f3:29:21:dc:30:3b:
         94:3f:16:e3:49:47:95:69:fa:f7:50:c1:64:00:4e:08:b8:58:
         3c:3c:47:25:c2:51:e8:50:e7:7a:d1:0e:77:6b:6e:d7:ce:5f:
         4f:b6:58:25:e7:c8:a2:a5:24:e5:d2:3a:c9:bf:a4:14:d7:e8:
         59:7f:c6:31:16:8c:d6:2a:c2:0f:68:a8:2f:13:e7:42:5b:81:
         55:76:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:14 2026 by rpki-client