Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5E40CDC83D2311F0BC3F7332C4F9AE02.roa
File:                     5E40CDC83D2311F0BC3F7332C4F9AE02.roa (raw, json)
Hash identifier:          k9umQ1RrYcv8365f4tIhKh7e1bb5+VgQHWE5DLSbuQk=
Subject key identifier:   8C:C7:67:9B:DA:1F:2E:2F:E1:FF:2E:EF:50:18:45:E5:21:2F:77:B9
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3B8B
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5E40CDC83D2311F0BC3F7332C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:23:23 +0000
ROA not before:           Thu 20 Aug 2026 16:23:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138077
IP address blocks:        36.50.46.0/23 maxlen: 24
                          103.137.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 15:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15243 (0x3b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:23:23 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a8729fb-3b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:12:53:de:76:46:4d:7d:25:77:48:b6:54:
                    a7:65:b6:a6:45:76:e9:f1:af:73:0a:8b:15:8e:eb:
                    24:e7:16:8d:46:e5:95:6d:21:da:45:71:0c:a0:22:
                    f4:15:80:ce:45:5b:0e:36:e0:10:81:f3:8d:80:59:
                    66:b5:0d:ad:36:92:7c:5c:97:b5:eb:8a:29:87:af:
                    ab:e9:55:81:ce:8f:3f:45:fa:0f:fa:75:35:7c:b1:
                    00:1e:33:28:8d:42:1f:bb:06:fb:cc:20:a0:e5:7d:
                    1f:dc:34:d2:20:1b:f1:47:8b:72:64:73:07:f3:74:
                    87:99:e1:21:36:86:8b:fd:db:35:b2:14:ac:b8:9e:
                    e5:f7:cf:ad:42:72:63:63:7d:0d:9f:03:d7:26:eb:
                    8e:3d:72:5c:da:99:73:ab:8c:66:eb:df:74:d1:ec:
                    de:23:6c:10:c6:45:2d:be:04:d9:8d:e2:3f:ba:24:
                    3d:f9:cc:cd:fb:a3:58:cb:80:61:ea:6e:4f:bb:62:
                    78:b9:63:af:f9:93:27:41:9c:7b:4c:e7:05:29:9a:
                    7d:a1:bc:50:4c:22:3d:af:a6:e1:f4:38:8a:26:7f:
                    63:eb:d1:f0:00:92:f0:b7:f0:c2:09:d2:3a:77:b0:
                    42:f6:6c:38:c5:13:a7:3e:58:e8:2d:3b:bf:66:59:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C7:67:9B:DA:1F:2E:2F:E1:FF:2E:EF:50:18:45:E5:21:2F:77:B9
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5E40CDC83D2311F0BC3F7332C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.46.0/23
                  103.137.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:9f:0a:90:24:6f:55:a9:cd:bf:d0:d3:df:59:d2:a0:e0:
         68:d4:e5:2c:5b:c5:b5:08:01:6a:77:37:8f:07:ac:4a:66:e4:
         1c:1a:b5:b6:14:b8:f6:40:71:68:1d:43:75:c8:bf:0a:67:df:
         35:ce:e3:d4:9b:db:15:eb:ee:12:8b:0c:cd:73:5e:38:a3:1a:
         48:67:49:40:22:ee:e2:4b:75:03:73:3b:70:e2:75:e2:a7:40:
         ba:ac:46:f3:37:c6:d6:17:03:e1:40:e2:cc:7e:74:08:1b:6e:
         79:9e:18:fc:45:82:a8:65:ad:96:08:13:5b:20:1c:e1:ae:21:
         0d:c7:75:f4:de:c1:ef:05:c3:5a:7b:da:77:38:9d:08:5d:51:
         e3:e0:5f:45:f5:e7:a7:d2:8c:2a:8e:5d:2e:a1:e2:34:4b:6d:
         8c:e9:0a:7d:13:93:ca:ae:4c:b3:28:6c:a5:a7:97:aa:dc:30:
         6f:e4:99:84:fc:07:80:cc:f4:44:80:41:a8:43:66:70:19:0c:
         bc:87:36:e3:3a:27:c5:ba:44:0b:73:4e:e5:86:53:bf:0a:78:
         b4:70:b4:33:29:8f:d3:11:48:3e:8a:f2:63:3e:81:14:f2:40:
         84:10:1f:08:fd:dd:9a:dd:c3:7d:36:4c:f1:13:83:e6:f8:11:
         84:26:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 04:18:55 2026 by rpki-client