Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa
File:                     5B3369383DC911EFAFD59635C4F9AE02.roa (raw, json)
Hash identifier:          EAWL9NZSuTju6NfVudhsfaA4jlo6nMFHcqC8fwI/PJY=
Subject key identifier:   93:2B:99:AD:E7:25:AC:54:E7:FD:FF:38:F9:8A:AA:C5:9C:C6:1C:2E
Certificate issuer:       /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial:       01B3
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 21:41:29 +0000
ROA not before:           Fri 02 Oct 2026 21:41:29 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     138995
IP address blocks:        185.203.36.0/24 maxlen: 24
                          185.203.37.0/24 maxlen: 24
                          185.203.38.0/24 maxlen: 24
                          185.203.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
                          rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 21:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
        Validity
            Not Before: Oct  2 21:41:29 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac02509-6ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:f0:14:45:a5:12:ed:00:6d:e1:ca:c5:66:
                    22:53:98:ae:49:ba:fc:07:dc:d8:15:37:d4:61:4c:
                    00:c7:c6:9f:e3:08:34:a2:58:2e:69:3b:b7:6e:82:
                    b2:21:59:44:ce:01:e7:2f:fe:b5:cf:93:80:75:c3:
                    9e:43:10:8e:7b:a2:ca:cf:cc:94:ad:d3:87:4b:f8:
                    9a:23:4d:31:84:eb:03:d0:58:00:2c:2f:20:07:4e:
                    77:a7:87:11:67:1c:ce:f4:bc:58:8c:c0:33:e0:84:
                    b9:a8:99:63:0d:bc:bf:01:2a:24:90:14:ef:65:1f:
                    6c:ab:f9:47:a4:54:70:ed:85:6f:d9:06:db:ee:7e:
                    bb:48:23:15:20:4e:83:25:13:b9:b7:23:ab:15:f4:
                    fe:38:a9:76:60:b7:f6:f1:c5:93:e7:69:cc:c1:54:
                    c2:22:91:04:e5:fd:4d:f1:9b:94:dd:e6:bd:9b:d6:
                    3f:f4:c5:80:ba:5d:b3:f4:49:70:06:1b:9b:d9:1d:
                    ef:d2:e9:5a:a6:6f:f1:8f:00:30:68:af:5a:4b:63:
                    e5:ee:f8:de:2a:d3:c4:2b:dd:ba:11:31:e4:4c:6a:
                    82:04:9d:56:d1:e0:c8:7c:2d:cf:5b:b2:49:79:8f:
                    f8:ae:2f:bc:1d:f3:07:db:a0:3d:52:03:e7:ff:3b:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2B:99:AD:E7:25:AC:54:E7:FD:FF:38:F9:8A:AA:C5:9C:C6:1C:2E
            X509v3 Authority Key Identifier:
                keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:4c:47:1c:be:b1:8e:f4:fa:2d:e7:49:e7:57:e0:b1:2b:19:
         25:fe:10:9c:62:72:46:cc:af:db:d4:33:bf:ba:d0:bf:89:b8:
         26:a5:5d:69:6b:e8:5f:48:3d:ba:f6:b5:29:4d:ea:da:84:c9:
         5b:a6:2c:fc:c3:a1:ef:47:5a:33:f9:54:f2:08:a1:96:11:78:
         00:be:56:b6:a2:49:f4:86:34:d6:c8:da:e2:9a:6e:0e:bf:e2:
         c8:ae:5c:76:bc:82:cd:5d:0e:3c:00:6d:2e:7d:03:e1:b8:f6:
         cf:4c:70:20:15:ea:6b:b8:68:32:34:0c:ab:41:37:de:35:90:
         58:d2:58:e0:5f:43:cc:8e:a9:98:a1:78:3b:c3:ae:1f:b9:d0:
         ee:79:61:f8:1d:6f:21:e4:3c:d1:e8:93:fe:8f:d0:31:26:a9:
         71:7c:cd:3b:45:b0:74:62:24:4d:7b:98:45:c8:55:27:40:e1:
         b5:a4:fd:7a:f3:a7:9f:15:1a:a6:eb:ae:dd:b1:db:8c:78:fd:
         d7:10:d2:b6:b4:1a:5d:a1:f5:22:78:fa:86:ce:23:94:21:f2:
         b0:d9:ee:6a:27:71:18:30:24:22:40:8a:92:89:25:0b:8e:21:
         58:9e:e4:65:80:57:8a:b5:fd:c8:9e:49:ae:34:e7:8d:f6:74:
         0d:cb:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:46 2026 by rpki-client