Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/36333AA6928111F0AA95D96AC4F9AE02.roa
File:                     36333AA6928111F0AA95D96AC4F9AE02.roa (raw, json)
Hash identifier:          aKljY48TNAmDYgzUHTH7Yg9ZPBKBFIkH7Kz1QZqrLgc=
Subject key identifier:   E8:87:D0:2E:EE:8B:40:AB:A8:07:DB:56:A8:1F:21:26:99:F6:13:C2
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       020B
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/36333AA6928111F0AA95D96AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:43:53 +0000
ROA not before:           Mon 15 Sep 2025 22:13:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        103.115.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: Sep 15 22:13:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47ad9-3169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:8b:03:08:59:49:11:10:7b:03:a6:9f:1e:
                    ad:78:ed:e1:db:17:c6:04:8b:a3:77:10:08:a6:76:
                    43:34:6b:48:de:e6:1b:0a:a9:76:59:b0:5c:60:5e:
                    52:72:65:f9:e5:a6:0a:c2:ff:e5:e5:ab:e2:fe:d1:
                    b1:95:03:e8:09:04:73:d3:b8:76:43:81:b3:f4:b6:
                    32:29:6d:56:34:c2:2c:72:fc:94:30:e6:29:37:c8:
                    a7:b8:da:ac:19:ac:c6:b5:26:53:c3:0d:e1:a7:30:
                    eb:6e:2c:61:43:49:9a:3f:b7:0a:6d:24:49:ee:f0:
                    ad:00:b6:43:fb:a8:9f:fd:3b:74:21:42:b6:1a:d7:
                    9f:b8:01:32:b1:e5:25:2a:c6:cd:7d:07:c0:ce:49:
                    89:1c:4d:a5:ba:4e:62:35:5a:6a:ec:8c:af:e0:d5:
                    79:4e:82:59:2a:b5:5e:5c:7e:02:19:8b:e2:df:aa:
                    5a:fd:e2:1f:25:9a:59:87:22:8a:c4:a4:2b:4a:a5:
                    be:8b:bc:29:31:9b:75:dc:6d:28:aa:dc:3d:51:32:
                    a3:40:17:bd:67:cd:2a:07:ad:c6:bf:d9:fc:4f:0d:
                    9b:9d:64:14:02:b7:0d:61:2d:25:73:23:b6:5f:7a:
                    1a:ba:ba:46:8c:55:81:5c:a6:38:db:66:b7:00:b9:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:87:D0:2E:EE:8B:40:AB:A8:07:DB:56:A8:1F:21:26:99:F6:13:C2
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/36333AA6928111F0AA95D96AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:62:72:de:d8:4f:07:77:d1:2f:b9:55:f0:55:3a:43:f7:
         50:57:64:99:59:0c:6c:16:04:67:c0:ed:7d:e9:7f:74:4d:74:
         9f:7b:c9:d8:f0:44:81:b1:5b:6f:29:a8:a0:b5:f5:6b:93:df:
         72:20:70:15:91:3e:1b:c9:8c:e4:01:a1:b6:41:06:df:a1:79:
         3b:38:3e:cc:0c:ee:7f:89:92:c7:1c:52:ed:25:b5:0f:fb:7e:
         9a:b9:cd:70:fe:d3:70:46:c2:91:8b:83:39:7a:d7:21:6e:49:
         5f:4b:16:14:5c:29:a1:3f:e5:f8:fa:9d:ad:77:32:94:54:5d:
         4d:32:19:c3:71:4c:b6:1b:27:a0:6f:7e:32:bd:e1:bf:79:8f:
         94:e2:6b:01:e3:c5:6c:15:f4:1c:29:ff:61:49:8c:a5:a8:eb:
         c1:6b:10:bf:74:82:82:f0:d7:e5:2c:30:ba:b3:2f:2e:4e:81:
         75:84:bb:9f:7a:76:19:89:83:87:11:be:45:1d:7b:56:ca:3e:
         0a:64:5a:04:f0:37:c3:91:d6:54:a9:03:f8:e8:a5:d5:41:cd:
         c8:f6:dc:bd:25:57:d7:3b:d3:1a:97:27:8e:c7:45:f1:55:e1:
         72:6a:97:2a:ae:8f:5c:8a:34:d3:0c:64:51:c7:07:19:28:28:
         6b:ea:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:42 2026 by rpki-client