Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa
File:                     3636BCD2937011EA8A795583C4F9AE02.roa (raw, json)
Hash identifier:          pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=
Subject key identifier:   AC:A9:DC:1A:0C:9F:E4:36:5D:AE:34:88:B3:11:52:12:67:AB:92:B3
Certificate issuer:       /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Certificate serial:       0A13
Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:31:53 +0000
ROA not before:           Fri 30 Jan 2026 20:16:45 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55361
IP address blocks:        103.6.4.0/24 maxlen: 24
                          103.6.5.0/24 maxlen: 24
                          103.6.6.0/24 maxlen: 24
                          103.6.7.0/24 maxlen: 24
                          113.20.20.0/24 maxlen: 24
                          113.20.21.0/24 maxlen: 24
                          113.20.22.0/24 maxlen: 24
                          113.20.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
                          rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579 (0xa13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
        Validity
            Not Before: Jan 30 20:16:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a469f9-5da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:f6:7b:8f:31:2e:00:fb:8e:57:30:ab:75:
                    a9:f2:83:ff:99:37:74:4c:6b:7e:95:d4:06:13:3a:
                    32:bb:3c:a6:3f:60:a4:e4:72:1f:e6:ab:73:2c:be:
                    91:c8:44:fe:cf:9e:a8:02:3d:87:7f:c7:55:83:6d:
                    67:13:6b:5b:0d:8e:3a:d1:d6:86:41:66:b9:bc:c0:
                    e6:95:bc:17:40:f3:a4:6c:12:14:f4:b2:36:f8:1b:
                    35:29:c2:d8:46:2f:58:a3:4d:56:03:28:7e:08:cc:
                    c2:0a:f8:00:36:41:ae:5b:8a:e4:eb:86:9a:d5:11:
                    68:06:d4:cb:0e:a1:3b:98:65:b1:1b:40:8e:9b:ce:
                    72:3f:bd:9b:4b:24:a3:6c:73:79:02:ad:ad:40:91:
                    15:17:56:6d:bb:38:48:ec:9d:ea:12:67:9a:c9:46:
                    b2:e2:5e:90:f2:bd:63:ea:63:75:d5:ea:eb:2b:18:
                    6d:37:75:57:5e:9a:31:df:2e:f4:04:56:c3:b4:8f:
                    63:8f:6d:90:86:15:46:b6:90:84:71:97:e0:50:fe:
                    ae:0d:a7:0a:26:e1:31:9d:82:1e:54:61:4f:a4:8c:
                    dd:f9:46:39:53:94:c0:4d:52:a6:e8:1a:dc:f7:22:
                    dc:f8:63:41:9d:21:a4:0d:34:b6:79:19:9f:3c:f7:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:DC:1A:0C:9F:E4:36:5D:AE:34:88:B3:11:52:12:67:AB:92:B3
            X509v3 Authority Key Identifier:
                keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/3636BCD2937011EA8A795583C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.4.0/22
                  113.20.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:de:94:0d:25:b9:20:f0:95:3f:0e:c6:47:89:6c:31:3d:
         8d:35:63:e9:4e:ce:24:dd:f4:76:a6:f5:38:cc:a7:23:94:de:
         47:e4:14:98:c6:fd:7d:e9:f1:28:73:5d:cf:bb:f1:08:1d:6c:
         41:69:48:76:82:33:72:35:e1:75:17:cd:a5:3b:41:6e:52:e3:
         a3:bd:31:8d:5e:00:81:f9:6c:1b:cc:19:a4:75:f3:47:8c:b6:
         2d:6a:23:ae:c9:02:9c:74:79:5f:e2:b6:c1:67:56:d6:fe:eb:
         6e:76:f1:36:c4:67:e1:ab:e3:0b:29:e6:f5:36:34:09:7c:95:
         9a:2f:d4:b2:35:1a:91:9e:45:9a:d4:5f:3f:d3:83:9a:35:9d:
         d7:75:23:70:72:e2:15:66:54:d5:83:25:cd:81:9f:c2:ed:5b:
         78:54:f5:4c:fe:2a:19:5b:1d:82:63:ee:0e:5a:44:38:23:1f:
         53:4f:91:ae:21:3b:40:1e:2f:c1:69:80:98:f8:7e:44:f0:e6:
         93:97:74:56:76:a4:dc:2d:1e:f9:d2:99:19:df:f3:7a:f6:97:
         16:d5:56:db:b5:a8:22:6a:60:2c:02:d9:5c:2b:96:57:87:77:
         21:a0:55:44:10:1e:05:0e:49:24:10:9c:60:e4:1d:ea:08:5b:
         cf:fa:bd:80
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF
ODlBRjM4MjkwHhcNMjYwMTMwMjAxNjQ1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjlmOS01ZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA39D2e48xLgD7jlcwq3Wp8oP/mTd0TGt+ldQGEzoyuzymP2Ck5HIf5qtzLL6R
yET+z56oAj2Hf8dVg21nE2tbDY460daGQWa5vMDmlbwXQPOkbBIU9LI2+Bs1KcLY
Ri9Yo01WAyh+CMzCCvgANkGuW4rk64aa1RFoBtTLDqE7mGWxG0COm85yP72bSySj
bHN5Aq2tQJEVF1ZtuzhI7J3qEmeayUay4l6Q8r1j6mN11errKxhtN3VXXpox3y70
BFbDtI9jj22QhhVGtpCEcZfgUP6uDacKJuExnYIeVGFPpIzd+UY5U5TATVKm6Brc
9yLc+GNBnSGkDTS2eRmfPPfmyQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKyp3BoM
n+Q2Xa40iLMRUhJnq5KzMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz
NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUNGRUIvQ0IyQzMzRTY5MzZFMTFFQUE1RTU2QjdFQzRGOUFFMDIvMzYzNkJDRDI5
MzcwMTFFQThBNzk1NTgzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZwYEAwQCcRQUMA0GCSqGSIb3DQEBCwUAA4IBAQBah96UDSW5IPCV
Pw7GR4lsMT2NNWPpTs4k3fR2pvU4zKcjlN5H5BSYxv196fEoc13Pu/EIHWxBaUh2
gjNyNeF1F82lO0FuUuOjvTGNXgCB+WwbzBmkdfNHjLYtaiOuyQKcdHlf4rbBZ1bW
/utudvE2xGfhq+MLKeb1NjQJfJWaL9SyNRqRnkWa1F8/04OaNZ3XdSNwcuIVZlTV
gyXNgZ/C7Vt4VPVM/ioZWx2CY+4OWkQ4Ix9TT5GuITtAHi/BaYCY+H5E8OaTl3RW
dqTcLR750pkZ3/N69pcW1VbbtagiamAsAtlcK5ZXh3choFVEEB4FDkkkEJxg5B3q
CFvP+r2A
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:46 2026 by rpki-client