Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
File:                     D0D1D812FB0D11EFABB24730C4F9AE02.roa (raw, json)
Hash identifier:          XIXAdlf2Wapfr3aA+RYeScI/7J0gFTrDr34LwCofapU=
Subject key identifier:   8C:5A:BD:34:C2:36:C2:9C:26:45:3B:F3:0E:5F:63:1D:4C:0D:19:39
Certificate issuer:       /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial:       B8
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:00:28 +0000
ROA not before:           Fri 07 Mar 2025 04:37:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153669
IP address blocks:        163.223.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
                          rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
        Validity
            Not Before: Mar  7 04:37:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e40c-4adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:5d:07:ab:6d:02:78:ec:5c:91:3d:46:72:
                    05:76:52:bd:6d:0a:c1:ca:c6:1f:a8:5f:78:f5:26:
                    d5:38:16:2d:ba:2b:88:15:b6:3e:2e:30:dd:fb:e3:
                    ae:9f:7a:f4:27:55:91:2f:80:ae:a4:c7:19:10:93:
                    2e:6c:32:d6:5d:58:25:b9:1b:a1:97:c6:fe:24:c7:
                    a8:6b:41:a1:4b:c2:99:0e:30:e9:58:79:70:45:93:
                    ad:01:c7:e0:1e:f4:bb:06:15:5e:8c:5e:8e:a0:90:
                    03:83:95:09:83:57:25:1a:45:20:9a:1d:70:14:fa:
                    46:7b:0f:6a:cd:23:b8:fd:55:c8:c9:de:60:0f:b2:
                    00:c4:e3:ec:47:0a:3c:f2:e8:9f:44:db:0a:83:15:
                    53:fd:ae:be:50:61:92:e3:39:42:ea:59:1c:9f:1d:
                    45:d2:64:18:71:95:1b:c5:c3:c2:d2:70:53:a1:37:
                    9d:b8:57:e2:47:3b:43:a0:0b:fa:56:3f:c8:e3:d1:
                    4c:16:e9:8f:2a:cb:8f:18:9d:f3:1f:d2:c8:d3:2a:
                    c0:ec:d2:8f:54:da:48:9c:d2:cd:d1:75:4c:e6:0e:
                    a9:f8:0c:1c:fa:2c:21:0a:13:2a:d4:b1:5e:2b:5e:
                    dc:16:a9:75:18:e6:28:41:49:57:81:71:7f:f3:1b:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5A:BD:34:C2:36:C2:9C:26:45:3B:F3:0E:5F:63:1D:4C:0D:19:39
            X509v3 Authority Key Identifier:
                keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:71:75:25:23:95:ec:1b:5a:14:53:18:d8:97:40:38:3a:4a:
         8c:50:b7:bb:d5:ba:89:ef:c7:de:17:78:d3:97:8d:e3:e0:79:
         2b:8d:7f:6a:7f:de:a7:d4:1c:0e:09:d7:5a:f7:00:7c:fa:8a:
         6c:30:97:97:bc:8a:d9:59:5d:b6:00:61:89:53:d9:bd:b0:c9:
         3b:45:50:1f:cd:b3:b8:f3:79:03:f2:95:08:6b:04:63:5d:d8:
         33:e2:49:d0:c2:44:a8:94:87:81:1d:e3:28:67:04:cb:19:92:
         d5:f1:8f:65:1f:0f:67:ff:8b:6e:93:72:0f:31:97:a9:db:78:
         c2:05:cf:35:a7:c6:b3:ba:67:70:22:0f:b8:6c:41:d8:59:60:
         78:b6:c5:10:46:bc:53:85:b9:7f:81:95:95:7a:cd:39:09:64:
         06:4e:34:e5:14:7b:57:f6:c1:1b:e6:d2:0d:de:b8:63:72:96:
         2f:c7:c1:c3:2c:a1:b5:b7:b5:78:61:df:85:6e:a5:ff:db:91:
         87:e5:79:2a:bf:b2:a0:c4:4f:1f:2d:ac:1a:0d:d7:a2:94:c2:
         7d:89:2d:1e:69:c9:00:78:2a:12:83:16:75:17:33:55:c6:63:
         40:25:4a:36:2e:a8:03:99:28:50:1d:5c:a6:05:a1:e0:db:bc:
         57:a1:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:10 2026 by rpki-client