Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/36E2673093A511F1A63A7D946011F970.roa
File:                     36E2673093A511F1A63A7D946011F970.roa (raw, json)
Hash identifier:          YQjNMHo8sTM3LQcrU6VgB0vtk3GGCVQb//8/KSSTf30=
Subject key identifier:   43:18:F1:82:29:C6:A6:C8:10:B3:C3:9B:83:A0:E5:96:03:A5:01:2C
Certificate issuer:       /CN=A9115A7C/serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
Certificate serial:       02
Authority key identifier: C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/36E2673093A511F1A63A7D946011F970.roa
Signing time:             Sun 09 Aug 2026 03:48:43 +0000
ROA not before:           Sun 09 Aug 2026 03:48:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        203.34.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl
                          rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115A7C, serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
        Validity
            Not Before: Aug  9 03:48:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a77f89b-5af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:0b:81:0b:77:6e:0e:7c:1b:9b:54:db:67:
                    94:ca:fe:80:3f:26:18:86:60:4b:83:01:a0:63:01:
                    50:4b:7d:3c:ae:86:71:ee:d4:a7:b8:ce:45:e8:c4:
                    4a:12:6c:fb:33:92:8e:74:e0:01:7f:5d:26:37:43:
                    8f:5b:55:35:00:31:b0:fa:fc:17:4e:e5:1f:25:8c:
                    4f:f2:6d:b8:7d:34:17:cd:84:e2:a0:67:5c:67:c8:
                    98:53:fd:54:fc:9c:3f:7f:a2:b2:8d:77:e1:7b:03:
                    24:f3:54:a2:76:70:4a:fe:56:f4:47:c8:9e:30:99:
                    5e:37:4c:af:cd:69:67:09:97:34:ec:ae:68:f5:69:
                    8a:91:e6:16:03:d1:30:14:f2:76:64:75:cb:46:18:
                    6b:6d:a5:9b:a9:ce:68:9f:7e:68:ac:5f:29:8b:3a:
                    9b:9c:0a:a0:bf:c4:dc:f1:55:a1:74:bc:30:1b:c6:
                    f0:03:9f:0c:8c:13:c7:8c:e9:0b:e6:0f:f5:f2:b4:
                    89:0b:f8:7f:69:fb:2b:89:72:dc:6c:fa:5e:1c:63:
                    25:9c:ec:d4:16:80:6f:3d:e4:19:9f:48:83:fc:6b:
                    fb:b4:78:7f:cb:13:a2:53:86:ee:07:d1:24:9e:6f:
                    04:72:aa:d9:ea:6c:68:71:d5:84:82:9c:62:59:d7:
                    72:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:18:F1:82:29:C6:A6:C8:10:B3:C3:9B:83:A0:E5:96:03:A5:01:2C
            X509v3 Authority Key Identifier:
                keyid:C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/36E2673093A511F1A63A7D946011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:64:f1:99:33:55:4f:ce:a9:e2:b0:30:23:1a:f1:2f:22:50:
         d3:3f:51:10:83:b9:f9:9b:b9:ba:7f:fc:69:1c:86:4f:7f:54:
         ba:79:53:ba:f9:cb:f0:ca:b6:86:c1:67:5f:61:c9:9b:26:d9:
         10:ed:d5:0e:a3:41:e5:2c:0c:8e:34:71:a9:9a:22:84:fb:f9:
         2a:20:2d:55:15:8d:1e:01:46:07:d9:cf:5c:e7:91:57:3c:36:
         54:da:0e:f2:75:1d:40:0f:0e:e1:55:0a:d0:25:23:04:65:17:
         77:1b:4d:f2:1b:91:8e:62:c3:bf:37:87:0c:a9:14:2a:9c:94:
         2a:a2:a0:6c:9a:74:f7:4c:97:56:25:1f:cb:a8:08:d7:c2:24:
         08:8a:e2:0d:0d:4b:a4:2a:fb:61:f8:d0:f8:62:8a:ee:77:3b:
         1f:d1:fd:02:52:b9:77:2f:77:7a:16:9f:ef:59:62:8b:87:4e:
         73:ce:2d:1b:85:e9:2d:c3:ac:ff:ec:46:4a:c2:a5:86:ae:12:
         bc:a2:90:73:ff:39:f4:1c:be:2e:4a:e5:c1:d4:b9:05:cd:97:
         0f:85:a6:2b:69:76:74:68:10:9a:00:ea:fb:1c:66:e2:05:6c:
         a9:37:aa:1f:1e:75:b4:98:f2:0a:07:26:36:1b:08:e7:9f:e1:
         69:7d:f1:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:36 2026 by rpki-client