Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa
File:                     80D77ED8D8A811EB85D5E456C4F9AE02.roa (raw, json)
Hash identifier:          eMjJNI89VuvQe2VIixwHrvRIUHpYBAcPbg9uXI8SsCc=
Subject key identifier:   08:A8:F4:93:93:AB:C3:30:57:27:21:31:AB:7A:C4:88:7B:A6:5B:29
Certificate issuer:       /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
Certificate serial:       0628
Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:37:58 +0000
ROA not before:           Mon 18 Aug 2025 23:35:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24110
IP address blocks:        202.41.14.0/23 maxlen: 24
                          202.124.206.0/23 maxlen: 24
                          203.55.35.0/24 maxlen: 24
                          203.55.36.0/24 maxlen: 24
                          203.57.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl
                          rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206
        Validity
            Not Before: Aug 18 23:35:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a43326-f0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:03:c8:ec:50:ca:44:c4:f8:8f:2e:7d:bb:
                    6a:0d:af:92:05:27:a2:bb:f3:50:8c:e8:f6:9c:c9:
                    70:f9:fd:5a:62:89:a1:01:4b:2b:76:f8:c2:f3:01:
                    b5:21:59:46:7b:9b:e9:3a:39:7b:63:d3:5b:39:2d:
                    a6:d2:b4:fe:8e:b3:86:5d:76:ad:94:60:e9:33:a6:
                    08:cc:a8:2f:b0:a2:16:16:f5:c9:99:ac:82:8a:dd:
                    1b:1d:3f:b9:a6:68:f6:de:d0:d6:06:f1:50:34:87:
                    9e:17:8b:05:4b:1d:20:57:2b:eb:02:c4:d8:8e:8b:
                    fe:ce:a6:44:9f:92:c0:22:b3:3a:d5:45:dd:63:b3:
                    05:b4:ee:d1:54:1c:43:1c:9e:6e:d4:01:e4:fb:4c:
                    aa:88:e9:4f:4e:19:de:29:5e:7d:22:f5:3c:97:d8:
                    79:db:81:ab:7f:d2:90:5e:70:b4:f5:0b:f9:b3:9b:
                    04:53:09:b5:54:79:7f:95:e1:ec:49:82:83:99:09:
                    31:df:91:79:f5:55:ca:b6:bd:e0:c9:07:80:48:05:
                    3a:28:3f:b8:5f:7f:fd:b6:99:cc:a1:20:14:f8:8f:
                    72:5f:8c:10:87:1c:97:c5:e5:3b:f6:0a:d3:99:45:
                    17:9c:02:25:5c:2c:1a:46:81:7a:9d:bf:cb:f5:b6:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A8:F4:93:93:AB:C3:30:57:27:21:31:AB:7A:C4:88:7B:A6:5B:29
            X509v3 Authority Key Identifier:
                keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.41.14.0/23
                  202.124.206.0/23
                  203.55.35.0-203.55.36.255
                  203.57.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:5e:68:7f:49:78:15:81:4a:bd:84:77:4f:cc:d8:32:cf:
         64:05:ed:af:13:59:42:09:34:bd:ee:71:cf:2c:82:31:ee:cd:
         a7:12:6e:32:94:43:67:45:11:87:15:91:e8:76:49:c0:2e:15:
         f4:12:ab:2f:90:fc:97:e2:f6:6a:35:b7:3d:d7:93:c4:63:e2:
         c9:f9:41:a2:6f:8c:06:94:35:54:ab:75:1d:96:da:2e:7e:44:
         93:b5:d2:57:46:dd:f2:6b:e8:cd:f7:cc:e5:cd:1f:51:53:b0:
         9b:6e:8b:ae:e3:f4:d0:c2:2d:1b:ee:14:3b:7e:66:df:78:b1:
         76:97:82:da:69:da:a6:45:4f:05:e8:e6:5f:9b:6f:d6:b4:46:
         9c:da:db:1f:02:ce:58:83:39:6a:e5:0e:b6:56:b6:44:04:0b:
         48:2b:54:02:03:2d:48:77:b0:94:35:49:86:b9:72:60:e2:1b:
         48:1e:4b:2d:21:34:52:b4:73:6a:64:12:5e:56:d9:7b:f4:1e:
         ba:9d:27:74:ca:92:4a:52:44:80:94:af:85:11:e5:61:1e:7e:
         58:2c:78:a4:c9:64:4b:2d:85:e9:c6:15:02:7c:70:19:4a:dd:
         d6:92:02:6c:c7:72:24:1a:e7:68:d0:00:dd:1b:42:e6:dc:be:
         33:b6:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:41 2026 by rpki-client