Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/3A00D342928511EB8B3AAC22C4F9AE02.roa
File:                     3A00D342928511EB8B3AAC22C4F9AE02.roa (raw, json)
Hash identifier:          DwLWbaH491LezXO/dRRlBiRkCK9v5uh/8b+Lh4o9bzY=
Subject key identifier:   C5:34:E4:98:A3:20:F1:F8:15:9C:2A:34:9F:54:3F:6C:7D:CE:D0:A8
Certificate issuer:       /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
Certificate serial:       06E2
Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/3A00D342928511EB8B3AAC22C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 22:28:34 +0000
ROA not before:           Thu 02 Apr 2026 22:28:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     17705
IP address blocks:        202.36.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl
                          rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E
        Validity
            Not Before: Apr  2 22:28:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ceed92-f071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:9a:5e:84:04:48:ff:0c:c8:86:80:15:18:
                    b5:bd:37:44:39:23:39:dd:66:ec:00:83:d8:d3:38:
                    7a:f5:82:66:d4:b5:d9:5a:68:48:db:76:e7:a6:b3:
                    4c:af:8b:aa:04:d0:14:b5:ba:13:0c:6c:91:10:b5:
                    3c:aa:c6:27:a6:41:65:35:0a:3e:77:14:fa:99:ac:
                    31:ac:fa:6c:8f:e1:06:c7:f0:8c:32:0e:85:2a:a6:
                    12:a8:c0:cf:7e:ba:44:4a:93:00:3a:5c:97:25:9d:
                    e6:1a:67:3b:1f:ac:2c:9c:f8:b5:b1:96:60:9a:4f:
                    bf:5a:58:d9:5f:d3:97:78:0c:3e:f4:c1:fb:6e:41:
                    0c:31:a3:2b:5e:3f:df:65:c8:20:bd:d0:95:e2:de:
                    ab:ca:a0:13:04:fa:7d:3a:34:c8:00:c9:94:c1:20:
                    02:9a:ce:f0:0d:8e:4f:56:b5:64:e5:d9:9a:6f:d6:
                    08:8c:49:cd:01:1f:c0:dc:b2:5a:ee:3b:8c:93:8c:
                    64:34:c2:23:19:a5:15:ae:cf:a9:f6:40:0d:0a:a7:
                    7e:47:5b:2b:e3:19:cd:a1:c7:dc:9a:73:95:18:d9:
                    ab:b4:cc:cd:ca:1e:c8:d4:ad:7c:af:02:c2:00:8c:
                    53:4b:68:6d:9f:6d:aa:1c:68:90:33:f4:bf:dc:75:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:34:E4:98:A3:20:F1:F8:15:9C:2A:34:9F:54:3F:6C:7D:CE:D0:A8
            X509v3 Authority Key Identifier:
                keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/3A00D342928511EB8B3AAC22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:22:9b:8c:47:20:01:85:23:d7:01:14:85:ed:c5:55:fc:bc:
         ab:04:9a:92:40:b8:a5:f7:b7:bd:74:d8:08:10:8b:28:78:62:
         9b:5f:6d:c0:c0:83:ef:80:b7:7d:cc:63:d9:f8:91:72:c7:d8:
         d2:57:c7:c6:e4:38:0a:0a:f7:08:20:67:9c:49:49:01:e4:65:
         33:21:14:65:9f:c1:11:39:92:e7:82:67:53:01:1a:fd:d2:1d:
         cc:4f:19:b1:33:4b:e2:e1:16:c0:f6:75:8d:72:dc:5e:53:f4:
         ec:aa:e7:7d:11:9a:9b:00:23:e7:03:af:70:07:e4:40:ca:eb:
         81:44:13:06:78:e1:80:e8:d3:12:03:ea:57:c6:ff:8e:e3:70:
         bb:21:e0:3b:a5:b0:dd:ee:b9:3c:c8:fd:22:33:88:a7:1d:73:
         07:50:96:7b:87:d9:17:d6:ac:a4:96:28:08:82:0a:ad:de:3f:
         39:e5:b3:00:ae:d9:26:be:08:74:8c:cb:3c:8b:a2:2a:d8:98:
         57:84:20:fd:1d:6c:94:d8:78:18:81:00:80:a7:41:c9:55:63:
         60:69:fe:6b:63:18:24:c9:12:e4:85:90:cc:c4:a0:bc:18:48:
         96:58:cb:c6:79:56:8a:15:8e:d7:4f:f3:2b:f4:8e:13:20:26:
         c8:60:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:35:43 2026 by rpki-client