Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa
File:                     7E08719E390311EF9DD1A882C4F9AE02.roa (raw, json)
Hash identifier:          lN+Yig4ktb2IRRkSds0TAyhAANJ0TrEtkfnkXcROlAM=
Subject key identifier:   AC:4D:8E:61:33:4C:00:A4:3C:70:C4:8D:30:DD:5B:FC:17:8F:8F:03
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       08EA
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:53:59 +0000
ROA not before:           Fri 09 Jan 2026 02:41:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     131646
IP address blocks:        36.255.192.0/24 maxlen: 24
                          43.229.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 22:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Jan  9 02:41:51 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48b47-c1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:e6:a2:7a:7f:d6:63:fd:0a:e5:43:fe:36:
                    52:f2:96:cf:c3:32:73:45:16:54:9e:f9:0c:c8:76:
                    4e:ed:df:db:d5:44:cb:23:26:7c:30:18:58:6b:c4:
                    03:ae:60:57:db:f4:2d:43:5a:bd:24:e0:bf:77:c0:
                    a9:56:58:5f:da:90:37:96:ab:38:1a:3e:59:a8:fa:
                    2f:f9:02:69:2c:64:53:f7:7f:8c:7d:dd:0b:3c:11:
                    e9:99:e2:6e:59:56:d2:7e:50:dd:59:43:c0:71:76:
                    97:ab:5b:a1:d5:5b:8a:fb:d7:de:3b:7c:99:09:1a:
                    7a:cf:53:55:f4:89:1e:f3:71:be:1b:8d:72:6a:30:
                    b0:8a:24:b0:f7:cc:e7:cc:cd:20:98:46:8b:88:08:
                    b7:00:cc:2e:1a:0a:75:93:4a:3d:4a:c7:d0:68:ae:
                    66:4e:75:53:9d:6c:40:83:13:76:7d:de:f0:9f:0d:
                    d7:d5:0e:ef:07:29:ee:51:d7:99:58:a7:a1:65:22:
                    c3:9f:ee:e5:cb:02:f5:9d:09:48:1f:1d:46:83:70:
                    70:f1:70:39:47:cd:9a:f9:75:0d:0e:fb:c3:03:dd:
                    55:47:23:c7:e1:4c:8b:a3:fb:82:ea:77:0e:6c:bc:
                    57:44:72:c0:3d:58:7a:58:a2:b3:28:c2:51:05:4d:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4D:8E:61:33:4C:00:A4:3C:70:C4:8D:30:DD:5B:FC:17:8F:8F:03
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.192.0/24
                  43.229.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:9d:38:32:79:d7:ce:da:a7:9a:d6:40:cc:1f:0c:ed:3f:4c:
         c5:5a:d1:c9:6d:0d:02:c9:e3:bc:02:5e:5d:f4:d1:6b:ac:f0:
         92:27:6e:61:cd:04:f3:91:59:52:45:a2:2f:30:21:a3:d9:2f:
         3f:ea:59:5e:f6:2d:d7:80:dc:8b:0e:b1:9b:7f:25:ef:ef:2f:
         e2:b5:58:cd:c7:3c:36:27:76:cb:59:63:c3:de:82:1f:7f:92:
         20:fd:79:ad:9e:30:e1:2e:a4:66:fc:7b:67:0d:3c:8d:e2:45:
         57:88:48:34:53:a8:c3:10:7d:75:65:3e:a4:40:07:fc:32:cb:
         39:92:86:90:c3:4f:2e:d9:d5:3d:74:1c:d5:bc:ab:c1:b5:a7:
         bd:7f:cb:3e:ab:20:33:40:7a:76:87:c5:fd:89:66:e3:0f:8f:
         7f:7a:c2:87:2d:a4:e6:b0:08:0c:06:45:56:b3:95:74:c8:83:
         0b:c2:c0:d9:fe:c6:9b:fd:58:9b:19:a9:ae:11:ea:1d:5c:98:
         3c:6b:29:76:12:09:8b:48:6c:53:a2:66:0d:83:58:bb:97:4d:
         e1:c0:13:29:cc:4c:c9:ed:f0:d8:bd:ab:57:d2:70:9a:f9:7b:
         8b:17:22:c4:26:e0:a7:27:4c:3c:cd:01:27:d9:8b:f5:3f:fd:
         c2:28:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:44:01 2026 by rpki-client