Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9076C6D89D9E11EE98AAB564C4F9AE02.roa
File:                     9076C6D89D9E11EE98AAB564C4F9AE02.roa (raw, json)
Hash identifier:          DC28cmCDA84EE1A/Imh1rR+cddUQVoTxquLGRMypoZo=
Subject key identifier:   C8:D6:6A:1F:9C:AA:C5:B0:2A:EB:97:1E:C7:92:51:E2:F7:9E:E0:60
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D2B7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9076C6D89D9E11EE98AAB564C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:21:43 +0000
ROA not before:           Thu 08 May 2025 16:02:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134930
IP address blocks:        36.50.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53943 (0xd2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:02:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bbf7-168f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ef:be:95:bc:8d:b8:48:1b:20:d7:dd:b7:9d:
                    07:ec:c5:63:fa:f4:19:e1:4d:7d:b0:18:02:73:1c:
                    12:ff:72:89:26:0e:55:a4:ab:e8:9e:4d:51:8d:3b:
                    57:1b:0d:e3:12:3f:a8:87:16:c0:31:57:d6:26:52:
                    4a:98:90:bb:f7:c7:85:9e:b5:ec:aa:3d:60:6f:a1:
                    ec:92:9b:a0:e5:7c:6e:ea:3d:40:98:7c:04:f0:3f:
                    6c:97:09:8b:0a:92:b8:17:80:66:f4:26:ef:b8:b7:
                    ab:de:93:43:9c:fc:31:b1:1f:24:3f:33:5d:ee:43:
                    7d:63:9e:58:f1:fc:56:e9:ae:1e:bb:31:ba:2b:a6:
                    ab:22:60:30:55:a0:b0:1d:e7:34:ae:43:2b:44:02:
                    76:95:9b:35:ff:c1:b7:6a:5c:dd:bc:4f:bb:26:b9:
                    8c:22:5d:bb:ab:92:19:aa:3a:3b:40:7a:7a:dc:54:
                    d4:f7:52:44:7c:07:2a:71:07:3f:a7:1a:de:b2:00:
                    fa:2e:3f:6b:c3:5d:00:83:f4:b0:ed:2a:37:da:5f:
                    8c:9d:41:6e:9f:a8:f0:42:b4:96:b4:72:88:dd:96:
                    f4:59:c5:b2:54:dc:65:74:dd:ad:05:a5:19:c4:aa:
                    46:14:30:0f:b2:b7:4a:c9:68:46:f0:4a:9f:5e:05:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D6:6A:1F:9C:AA:C5:B0:2A:EB:97:1E:C7:92:51:E2:F7:9E:E0:60
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9076C6D89D9E11EE98AAB564C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:eb:76:bb:13:03:12:57:fc:63:ba:0a:fc:e5:bf:70:3f:1c:
         7a:ef:00:90:e8:d4:e2:59:e3:dc:14:35:30:ec:53:45:e7:ef:
         90:16:57:fb:b3:99:a4:b7:af:7f:36:15:f5:65:90:9d:2b:5a:
         0d:de:1e:49:0c:8e:0b:4f:e1:0a:bd:4e:47:ea:ba:90:b7:9b:
         41:3e:49:c4:bb:57:00:48:47:44:51:8d:9f:dd:45:03:a2:8c:
         5e:29:14:51:e7:01:00:c0:6b:57:77:5a:e8:52:7f:c6:29:ec:
         8a:8e:c0:43:78:34:e0:e4:14:90:a2:38:c6:1e:d8:da:48:5d:
         42:5f:58:03:67:96:4a:91:b4:37:06:bc:8a:bf:bb:c4:e1:fc:
         18:5a:12:75:e1:a3:4a:c5:90:da:f5:00:f3:cb:c8:b6:68:0e:
         de:2f:f0:3c:93:82:57:b2:5e:8f:ee:9f:e4:67:13:6d:45:d8:
         6c:3b:17:98:e3:1d:f1:c2:48:3a:f2:44:36:a5:2c:2b:bc:50:
         2f:0f:5c:79:54:73:a1:d3:27:a0:bb:45:4b:7c:80:5c:d3:38:
         36:7c:56:8e:91:1a:3e:f3:c4:34:ce:8a:83:4d:e8:ad:60:e6:
         be:d0:2f:31:dc:d8:3a:d2:4e:0e:4f:6d:12:d4:27:c7:2c:61:
         db:b7:6c:9d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANK3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDIzN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGJiZjctMTY4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOfvvpW8jbhIGyDX3bedB+zFY/r0GeFNfbAYAnMcEv9yiSYOVaSr6J5NUY07
VxsN4xI/qIcWwDFX1iZSSpiQu/fHhZ617Ko9YG+h7JKboOV8buo9QJh8BPA/bJcJ
iwqSuBeAZvQm77i3q96TQ5z8MbEfJD8zXe5DfWOeWPH8VumuHrsxuiumqyJgMFWg
sB3nNK5DK0QCdpWbNf/Bt2pc3bxPuya5jCJdu6uSGao6O0B6etxU1PdSRHwHKnEH
P6ca3rIA+i4/a8NdAIP0sO0qN9pfjJ1Bbp+o8EK0lrRyiN2W9FnFslTcZXTdrQWl
GcSqRhQwD7K3SsloRvBKn14F2xsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTI1mof
nKrFsCrrlx7HklHi957gYDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkwNzZDNkQ4
OUQ5RTExRUU5OEFBQjU2NEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEACQyAzANBgkqhkiG9w0BAQsFAAOCAQEAoOt2uxMDElf8Y7oK/OW/
cD8ceu8AkOjU4lnj3BQ1MOxTRefvkBZX+7OZpLevfzYV9WWQnStaDd4eSQyOC0/h
Cr1OR+q6kLebQT5JxLtXAEhHRFGNn91FA6KMXikUUecBAMBrV3da6FJ/xinsio7A
Q3g04OQUkKI4xh7Y2khdQl9YA2eWSpG0Nwa8ir+7xOH8GFoSdeGjSsWQ2vUA88vI
tmgO3i/wPJOCV7Jej+6f5GcTbUXYbDsXmOMd8cJIOvJENqUsK7xQLw9ceVRzodMn
oLtFS3yAXNM4NnxWjpEaPvPENM6Kg03orWDmvtAvMdzYOtJODk9tEtQnxyxh27ds
nQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:20 2026 by rpki-client