Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/36295E5A6E2611E8A01E307EC4F9AE02.roa
File:                     36295E5A6E2611E8A01E307EC4F9AE02.roa (raw, json)
Hash identifier:          GSGGF3AuGB/QM6bBG/sp1xCnDXBgAzAn3WU1QBS1xpA=
Subject key identifier:   2B:C6:D3:46:15:55:7E:67:A3:C3:C0:05:5D:89:04:AD:96:69:57:B7
Certificate issuer:       /CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
Certificate serial:       14EF
Authority key identifier: 57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/36295E5A6E2611E8A01E307EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:32:46 +0000
ROA not before:           Thu 10 Jul 2025 17:25:56 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137824
IP address blocks:        103.115.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl
                          rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5359 (0x14ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536D, serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
        Validity
            Not Before: Jul 10 17:25:56 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a423dd-8a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:15:69:d9:b7:5c:c0:42:b4:d1:a5:94:66:
                    78:4f:26:6e:83:c2:f1:4a:e4:a7:c5:45:14:84:c1:
                    29:79:c3:47:cb:a5:39:26:c6:79:8f:03:37:e3:a1:
                    a4:95:10:3c:99:31:d4:30:a8:5a:47:c4:6f:f8:e4:
                    80:c0:ea:dd:c0:d5:d3:47:7e:97:f1:d9:51:e2:d9:
                    5e:44:21:63:26:28:e2:d5:12:99:13:09:09:8a:aa:
                    f5:c2:a0:61:48:6b:cf:f5:85:ea:63:ad:44:8b:21:
                    cf:54:7e:c1:e6:7d:94:27:5c:a2:a0:f7:c6:e9:20:
                    cb:8c:2f:fb:0f:fd:2d:39:d6:32:a2:47:33:23:a6:
                    97:30:60:2f:3a:14:82:f3:aa:b1:ee:39:7a:cd:8f:
                    93:03:b7:5f:f2:ed:17:5b:c5:fa:c8:e9:90:a1:95:
                    b1:ed:59:93:b9:d8:ed:e8:0d:ea:d0:f5:7b:17:45:
                    30:48:29:79:21:a0:45:63:66:ab:0a:b0:da:f3:8e:
                    74:8c:4b:8e:13:84:2b:44:c4:8c:89:17:3f:63:6a:
                    9a:8c:2a:e8:f9:fd:e9:d3:e2:69:22:d2:47:db:59:
                    cd:4d:ce:02:97:27:0d:8e:45:cd:f6:95:9d:bb:fb:
                    8a:b6:59:00:e9:83:4a:8b:c8:1b:c3:2a:39:42:7b:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:D3:46:15:55:7E:67:A3:C3:C0:05:5D:89:04:AD:96:69:57:B7
            X509v3 Authority Key Identifier:
                keyid:57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/36295E5A6E2611E8A01E307EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:50:2c:55:7c:bc:11:9f:76:44:b8:ed:f2:95:a8:d6:1f:
         b4:26:75:49:f9:ea:85:cd:8f:6a:33:5a:25:13:91:7e:73:61:
         82:ba:00:8b:ac:42:01:6b:f9:fc:53:06:a9:c4:08:9c:56:0c:
         12:80:91:cc:9b:42:3d:c8:66:ec:d5:12:40:b4:bb:8b:70:91:
         f9:77:d3:9d:60:4f:02:1e:52:ce:78:ac:11:35:13:93:d6:a8:
         44:89:a5:a1:a1:32:4d:70:f6:51:dd:22:6a:0f:09:1b:8e:fb:
         0a:e3:cd:d7:ee:ef:57:29:ed:2d:88:89:0f:8f:58:16:fd:f7:
         f8:af:0a:04:fb:49:cb:fc:bf:e1:5c:ee:16:47:3b:68:19:e0:
         45:8a:12:98:b1:41:9f:c8:db:41:4f:84:59:89:90:3c:e9:b3:
         a8:83:72:06:02:d0:a8:2b:fe:27:4b:cd:fc:41:22:8a:3b:28:
         9c:60:3e:0e:6c:a6:65:ca:04:9e:55:e2:92:49:61:aa:aa:7c:
         44:05:64:cb:b5:02:e3:aa:e5:f9:76:f4:d2:3c:6f:02:c1:c8:
         9b:ab:4d:ff:3c:30:cc:06:4c:ff:f4:91:f2:6f:98:91:02:4d:
         b2:07:a0:4b:f8:18:0d:2a:79:67:3e:07:b7:f4:3a:4c:d7:6e:
         8e:9d:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:34 2026 by rpki-client