Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa
File:                     36F318D0890A11EE9F4C014DC4F9AE02.roa (raw, json)
Hash identifier:          cxuC5mt/lZwqNGffF4CA11kwoRK1UHDLlLVN+mB5XQU=
Subject key identifier:   35:FF:BA:D6:90:19:6B:09:DC:F0:46:3B:86:2E:1A:1A:46:37:D3:11
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       0737
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:30:20 +0000
ROA not before:           Mon 02 Jun 2025 22:31:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140543
IP address blocks:        2405:f9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: Jun  2 22:31:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4315c-c052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:ce:2c:d9:f8:39:8b:28:95:60:01:f6:5a:
                    fc:c6:18:7d:47:fa:3f:c3:f2:c2:17:74:a7:df:8d:
                    ed:c5:cb:a3:ed:9d:f1:87:4c:36:ed:36:7e:c5:19:
                    56:f1:0b:bd:cc:b9:fd:38:cd:53:96:7d:37:b4:cd:
                    40:d5:24:a4:25:be:90:c6:7f:4b:99:30:c4:05:17:
                    51:e3:ec:3f:05:30:7e:b8:dd:a0:65:8d:5f:64:0f:
                    bf:f5:57:76:89:4d:26:2f:c4:c0:87:78:8d:c2:1c:
                    38:c1:ce:bf:96:f2:c7:a0:d8:25:1f:ca:25:66:35:
                    92:75:0e:ca:cc:d6:c8:ee:fd:fb:07:3c:91:8a:ea:
                    f8:3a:78:0b:09:4b:90:93:e7:3c:77:0e:94:c1:40:
                    94:6b:6b:48:2c:3b:ca:f3:78:d3:f5:64:13:33:59:
                    31:e6:d7:c3:64:60:75:f4:38:5c:05:10:02:b0:37:
                    98:e4:e5:3b:36:0d:9d:bb:00:55:79:0c:cb:7d:e0:
                    13:76:2b:9c:c9:bb:7e:1d:48:8f:4c:e6:91:62:09:
                    98:6f:6f:a2:a7:24:e2:ca:55:4f:b7:16:36:f1:fe:
                    4c:d5:cb:71:04:c0:70:3d:b2:72:2b:bc:ee:34:b3:
                    e8:14:c9:a0:84:59:83:a9:a6:05:b5:46:b9:30:14:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FF:BA:D6:90:19:6B:09:DC:F0:46:3B:86:2E:1A:1A:46:37:D3:11
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/36F318D0890A11EE9F4C014DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:f9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:3c:97:06:8c:4d:62:26:8b:0b:30:7e:77:cc:3f:5b:82:7c:
         93:d2:aa:c2:73:bc:f0:e6:1a:01:4f:f4:c8:3b:93:c0:ca:e0:
         2b:b2:43:14:14:4a:86:e2:c2:23:00:27:c0:6f:aa:12:70:16:
         a6:7d:25:13:cb:13:b9:e6:c3:d2:0d:66:10:be:c1:f1:f3:cc:
         4d:61:e9:13:03:d4:ce:c1:e4:df:9c:b1:ee:28:60:ee:d6:4a:
         4d:cd:33:34:b9:cb:42:46:ed:a5:b4:51:1b:9b:08:52:7e:47:
         59:07:eb:0a:b4:60:85:88:b7:1d:0b:82:fc:a0:b3:ed:62:5e:
         d8:97:a2:d9:bb:b5:fb:fb:b8:b1:d7:34:04:f7:0c:6f:a6:5f:
         62:2c:81:91:f6:83:25:34:7d:14:73:82:8f:e6:46:25:c8:a3:
         fa:1d:cb:6e:25:8d:bc:53:b7:46:77:76:f4:28:59:76:c8:f1:
         34:97:e8:f7:16:a2:d8:c6:f4:e8:24:d8:0c:31:5a:80:96:ab:
         5f:9c:b1:b9:2e:3c:3e:3d:29:40:a8:d1:ea:3f:0e:37:33:50:
         fb:b2:61:da:66:64:61:83:7d:16:8f:2b:41:a9:20:0e:48:7f:
         d9:d0:1c:4d:73:c1:96:fd:00:95:28:db:12:34:cc:ff:4c:8b:
         d9:61:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:25 2026 by rpki-client