Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36BC5EE8059111F18984430E3F3D8C67.roa
File:                     36BC5EE8059111F18984430E3F3D8C67.roa (raw, json)
Hash identifier:          cs1rJxwhDt1ztWzmANIGeAle38Lf/vRTZxGe+gPQQCo=
Subject key identifier:   E7:3B:C5:7A:C5:99:02:CD:6A:B3:C1:90:84:17:C6:06:BD:21:1B:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DB0A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36BC5EE8059111F18984430E3F3D8C67.roa
Signing time:             Sun 01 Mar 2026 23:06:33 +0000
ROA not before:           Mon 09 Feb 2026 08:27:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134318
IP address blocks:        103.199.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56074 (0xdb0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Feb  9 08:27:47 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c679-76fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:04:5b:4e:be:8f:07:f4:6f:28:f6:ed:17:
                    f5:c8:33:5a:57:fd:84:89:0f:22:06:4d:92:86:19:
                    b3:d2:8b:11:5d:9e:aa:99:be:cf:57:2c:be:c4:36:
                    eb:87:75:cb:8d:17:70:04:58:ac:b1:b5:f9:67:5a:
                    01:da:58:bb:fe:0d:44:27:64:26:6e:55:ea:1b:0c:
                    bb:a0:f3:5d:79:8f:35:e4:28:b8:6c:4a:a4:a7:fa:
                    99:c0:cf:15:65:86:79:f7:b2:d1:b4:aa:44:9e:56:
                    3e:ec:33:d6:8d:91:60:07:f0:53:d7:70:3d:03:84:
                    36:e7:b2:cc:82:06:68:95:0d:d4:9c:2d:7b:57:e0:
                    17:2c:14:dd:a6:d8:df:67:fa:b6:b0:48:e4:f1:fb:
                    49:dc:2f:aa:13:7c:84:88:08:bb:54:50:6f:40:71:
                    ec:97:e8:4e:09:e7:72:4e:ea:70:6e:70:a9:6c:1a:
                    18:13:53:bc:7d:c5:21:73:5e:91:57:ee:98:90:5a:
                    95:c5:99:e0:2b:8b:de:f1:85:db:cf:3a:78:4a:79:
                    fb:ec:b1:da:49:89:00:27:62:b5:67:ce:b4:cd:41:
                    ac:24:eb:8d:a9:90:d4:b9:8f:42:b8:05:93:ca:75:
                    75:08:6a:7b:d7:9d:bc:7f:53:ba:0d:e9:90:5b:97:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3B:C5:7A:C5:99:02:CD:6A:B3:C1:90:84:17:C6:06:BD:21:1B:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36BC5EE8059111F18984430E3F3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:bf:36:6c:61:30:9d:ed:6c:58:ff:56:1c:80:e6:55:4a:69:
         e3:07:d6:e6:9f:43:fe:69:be:88:b4:1c:cb:c6:2b:19:b2:d3:
         cf:19:05:88:67:6e:28:f4:aa:53:e6:fb:8b:9f:27:80:05:f9:
         22:79:2a:58:b1:87:26:2d:c7:9e:39:b0:f1:fd:b8:a4:29:94:
         b5:34:f9:08:8b:c5:d8:ac:47:db:22:62:e8:b1:04:63:5f:a9:
         32:23:91:23:65:79:52:64:04:87:13:cd:ba:97:fb:73:37:08:
         8a:c2:09:a2:df:f4:4b:30:f0:72:42:db:dd:f3:7f:75:5f:a3:
         c8:93:c7:67:65:b6:b7:85:9c:0f:8a:94:86:a0:24:1e:41:23:
         da:de:c3:ed:e2:2e:f5:48:02:86:74:40:77:31:79:48:bb:e5:
         cb:79:3a:74:e7:5c:42:ee:5c:95:b9:87:0c:48:3f:56:00:80:
         e2:2d:db:0e:78:24:ef:cc:3a:55:d9:f6:92:72:d8:f6:ee:eb:
         e5:a5:1a:f5:b2:02:8f:17:46:01:c4:d2:c0:5b:af:63:29:a2:
         25:1c:6c:7c:27:e2:11:a6:72:6a:6d:d8:49:f3:00:8f:15:e0:
         07:db:6b:59:de:14:11:bc:7d:2e:72:2a:68:65:d4:0b:72:6a:
         29:b0:db:da
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANsKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDIwOTA4Mjc0N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM2NzktNzZmZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKd8BFtOvo8H9G8o9u0X9cgzWlf9hIkPIgZNkoYZs9KLEV2eqpm+z1csvsQ2
64d1y40XcARYrLG1+WdaAdpYu/4NRCdkJm5V6hsMu6DzXXmPNeQouGxKpKf6mcDP
FWWGefey0bSqRJ5WPuwz1o2RYAfwU9dwPQOENueyzIIGaJUN1Jwte1fgFywU3abY
32f6trBI5PH7SdwvqhN8hIgIu1RQb0Bx7JfoTgnnck7qcG5wqWwaGBNTvH3FIXNe
kVfumJBalcWZ4CuL3vGF2886eEp5++yx2kmJACditWfOtM1BrCTrjamQ1LmPQrgF
k8p1dQhqe9edvH9Tug3pkFuXJzsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTnO8V6
xZkCzWqzwZCEF8YGvSEbUzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM2QkM1RUU4
MDU5MTExRjE4OTg0NDMwRTNGM0Q4QzY3LnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfHnDANBgkqhkiG9w0BAQsFAAOCAQEAo782bGEwne1sWP9WHIDm
VUpp4wfW5p9D/mm+iLQcy8YrGbLTzxkFiGduKPSqU+b7i58ngAX5InkqWLGHJi3H
njmw8f24pCmUtTT5CIvF2KxH2yJi6LEEY1+pMiORI2V5UmQEhxPNupf7czcIisIJ
ot/0SzDwckLb3fN/dV+jyJPHZ2W2t4WcD4qUhqAkHkEj2t7D7eIu9UgChnRAdzF5
SLvly3k6dOdcQu5clbmHDEg/VgCA4i3bDngk78w6Vdn2knLY9u7r5aUa9bICjxdG
AcTSwFuvYymiJRxsfCfiEaZyam3YSfMAjxXgB9trWd4UEbx9LnIqaGXUC3JqKbDb
2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:53 2026 by rpki-client