Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/836865ECD0DB11F086463D52C4F9AE02.roa
File:                     836865ECD0DB11F086463D52C4F9AE02.roa (raw, json)
Hash identifier:          ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=
Subject key identifier:   D5:DF:37:06:33:C7:DB:D8:4D:B8:77:F7:EC:B8:05:D8:9C:06:0F:09
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       03F6
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/836865ECD0DB11F086463D52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:46:18 +0000
ROA not before:           Thu 04 Dec 2025 06:36:07 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     399870
IP address blocks:        103.26.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Dec  4 06:36:07 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4897a-2a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:98:6d:b8:71:35:0e:82:10:4f:1c:78:c9:
                    7b:80:5f:a8:60:55:33:72:bf:45:5f:13:88:a4:38:
                    52:d2:f2:30:f4:5c:60:1b:95:a9:18:47:b0:64:cf:
                    0f:63:4a:1d:35:d4:d9:da:1a:81:1b:8a:ab:41:37:
                    2c:67:91:14:17:dc:5c:7b:2a:b1:8e:d6:d2:38:65:
                    71:03:88:d5:5c:86:b4:7b:c3:89:17:90:17:80:6b:
                    e9:81:11:f6:e1:f5:23:a3:1d:8c:a6:35:89:10:bc:
                    76:99:4f:9f:04:a7:02:9a:c2:31:7a:ba:ec:a2:1f:
                    3e:2c:53:ca:22:04:6d:65:dd:06:54:3b:b7:0c:02:
                    03:ec:4e:93:93:9c:81:1f:7b:8c:dc:95:3b:2e:35:
                    28:c4:42:3a:be:7a:50:f1:2b:91:13:af:71:37:48:
                    81:3a:ed:b8:c0:48:53:98:25:19:64:8e:84:4b:1a:
                    32:22:cf:65:e8:66:9c:07:41:59:39:50:2f:0c:a4:
                    a8:12:56:80:a2:36:07:93:83:70:26:69:6d:51:6d:
                    8a:94:38:74:e0:a5:bd:c1:29:9b:94:a1:04:e5:0c:
                    55:14:81:b3:fb:b2:f2:57:ba:fd:c5:1d:a9:7c:14:
                    24:2c:4a:a2:8e:8c:9c:fb:8f:73:ca:00:bb:a3:e1:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DF:37:06:33:C7:DB:D8:4D:B8:77:F7:EC:B8:05:D8:9C:06:0F:09
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/836865ECD0DB11F086463D52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:78:f5:79:73:7f:09:03:22:d8:3e:2e:0f:d2:65:e3:f4:98:
         1b:1e:80:9e:e2:5b:ab:f0:ba:e5:0d:dc:41:9e:fa:59:7d:cb:
         57:52:09:04:a1:64:13:71:14:ac:25:22:b8:45:9e:0e:e2:02:
         72:68:8c:0e:f0:b6:12:4b:78:7f:99:82:c7:28:e8:21:5d:6a:
         51:f9:89:e5:c9:2a:6f:43:59:74:e0:90:19:a1:a8:22:9b:b6:
         ed:5e:a2:79:81:5e:9b:e7:ba:bb:c2:60:d6:da:87:cf:c8:cf:
         e0:bf:34:79:41:e3:7b:e1:a0:4e:22:a4:8d:53:f6:46:2e:26:
         82:f4:d4:bc:65:a7:ba:3e:33:ff:02:94:0e:d1:d0:36:d2:51:
         2c:32:81:09:75:10:1a:75:d5:4a:b4:7d:9d:1d:00:3f:3f:77:
         c2:58:89:33:88:61:3d:b8:0b:c1:94:94:4b:07:4b:74:20:08:
         dc:e3:b7:c7:d0:80:39:68:0c:55:f8:eb:93:5c:de:47:6f:41:
         5b:95:82:28:f0:97:cf:20:11:18:71:a9:5f:b7:5d:31:5f:19:
         70:6f:c1:48:e4:dd:7a:a3:11:59:02:0b:27:98:af:29:b9:c0:
         82:d8:47:1e:54:d8:6f:80:d0:c8:fd:31:2c:f3:5e:f4:f2:66:
         37:15:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:24 2026 by rpki-client