Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/3736866EA81B11F19B70C7FC6E11F970.roa
File:                     3736866EA81B11F19B70C7FC6E11F970.roa (raw, json)
Hash identifier:          Gy8zeWlYneBEMTPlG7Em3pA+12mNaAJULJr8YDWVCbA=
Subject key identifier:   B4:30:A0:D1:4D:AA:54:8B:5E:72:3F:12:F8:04:84:E4:C6:9C:DB:57
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       23A1
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/3736866EA81B11F19B70C7FC6E11F970.roa
Signing time:             Fri 04 Sep 2026 04:43:47 +0000
ROA not before:           Fri 04 Sep 2026 04:43:47 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152698
IP address blocks:        180.210.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9121 (0x23a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Sep  4 04:43:47 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a9a4c83-6779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:2a:1b:d9:69:a5:6e:39:16:b1:d8:c1:d9:
                    4a:61:e5:c9:7e:c7:c7:5b:71:87:fb:12:ce:28:84:
                    8d:71:e4:fd:05:b5:e2:d5:eb:16:ac:85:63:aa:b2:
                    a6:48:9c:ef:d2:3e:28:b4:36:8c:8d:77:01:ea:ca:
                    10:91:34:6c:61:b1:7a:3e:f9:b5:b2:2d:e2:28:72:
                    e7:6a:e6:ad:8e:4c:4c:d7:f6:d7:92:4e:a1:10:c7:
                    ae:47:d9:46:5a:ec:17:0d:82:31:66:b7:f3:2c:3f:
                    f6:42:f8:65:da:b1:ba:9f:14:70:75:05:06:8f:de:
                    8f:4d:62:aa:b9:21:45:9b:60:bb:5f:2b:97:a9:00:
                    6d:77:6b:75:07:e3:17:c7:02:0c:db:d3:75:dd:22:
                    96:01:88:87:3f:af:51:6f:27:39:2e:77:95:3d:90:
                    8b:9e:f6:6d:8b:5a:39:61:1a:7d:b2:fc:0c:0a:00:
                    d2:56:54:51:a0:77:17:52:78:da:b8:75:93:06:49:
                    ab:85:50:eb:eb:04:f5:ba:63:ae:0e:d0:9c:ea:a3:
                    45:88:54:ea:1b:e1:ac:d2:ff:48:f1:79:40:ce:82:
                    fe:93:ee:3e:83:a7:df:9e:47:97:15:0c:0d:2e:71:
                    12:ee:81:7a:1a:36:14:40:81:44:51:f8:91:bd:46:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:30:A0:D1:4D:AA:54:8B:5E:72:3F:12:F8:04:84:E4:C6:9C:DB:57
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/3736866EA81B11F19B70C7FC6E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:60:b5:08:fe:57:25:71:2a:25:80:8f:a6:cd:38:7a:02:
         1c:a8:72:7d:e0:be:ea:61:60:ec:f3:60:08:30:fa:16:27:ee:
         16:2b:02:96:8b:cb:48:da:a6:dc:3b:ae:92:ed:74:37:5f:df:
         60:91:9b:6c:77:fa:9e:04:19:ea:e3:81:c3:d1:25:51:4c:22:
         6c:66:21:bc:f8:20:b8:a9:27:92:98:90:22:d4:0e:d4:a2:c8:
         aa:11:2a:2b:ac:f4:1f:7f:d2:3f:53:b7:d1:31:a7:24:09:75:
         06:26:7f:59:8d:49:99:32:42:b8:b3:6a:93:69:f8:de:ee:98:
         06:d4:e8:18:0b:b5:f3:f4:67:a2:05:2c:28:3d:e0:18:4e:23:
         de:42:45:36:6e:c0:6a:c7:4a:2a:ee:a0:4f:5b:f3:d2:84:94:
         d5:df:2c:1a:d3:30:77:ea:3e:1b:10:56:7b:85:c1:b2:29:e2:
         4c:63:33:0c:98:ee:c5:11:ce:5a:4e:72:53:44:b6:70:29:32:
         2f:9e:d4:34:ed:87:5f:59:7a:8b:f7:8d:27:72:f8:d5:89:f2:
         4e:81:51:d6:36:b3:33:d8:c1:da:c5:9f:76:37:74:13:1c:a6:
         b5:e4:00:ae:d5:6d:f9:ea:59:07:01:99:92:94:92:90:8d:65:
         e7:f6:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:42 2026 by rpki-client