Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/336DF8B28B0811F18D85AED87011F970.roa
File:                     336DF8B28B0811F18D85AED87011F970.roa (raw, json)
Hash identifier:          JB+3tqFVDLVL+fNG39cW33bCmFkKcUQfmjoHhla0fMw=
Subject key identifier:   51:13:A3:E3:A4:C0:95:8B:E0:44:CF:9D:73:F7:04:47:34:6E:9C:9E
Certificate issuer:       /CN=A9129F26/serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
Certificate serial:       03
Authority key identifier: EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/336DF8B28B0811F18D85AED87011F970.roa
Signing time:             Wed 29 Jul 2026 04:44:36 +0000
ROA not before:           Wed 29 Jul 2026 04:44:36 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154776
IP address blocks:        160.236.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.crl
                          rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F26, serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
        Validity
            Not Before: Jul 29 04:44:36 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a698534-2fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:00:00:e9:db:13:4e:ad:ca:ca:9f:c2:15:
                    ad:50:e9:3d:3e:87:6d:0a:85:03:62:f0:7c:c4:26:
                    6f:8f:e8:af:54:ea:f8:2f:14:5a:1c:bb:8d:05:3a:
                    0b:54:28:20:c9:dd:9e:44:55:f1:16:78:fd:5c:f3:
                    c8:d6:df:64:ed:73:6f:b0:f7:da:db:73:b6:c1:ff:
                    20:dd:48:45:75:70:59:0e:63:51:6d:11:58:f9:4d:
                    32:37:8f:05:4a:76:87:2d:0e:92:7b:f4:22:c1:aa:
                    48:d6:25:59:bd:5e:c0:48:c6:a4:77:f6:39:03:f9:
                    6f:a7:29:02:dd:79:b3:98:c7:34:b6:6e:ca:7c:5b:
                    a5:5d:94:36:07:91:9d:81:1a:71:fc:d9:04:dd:0c:
                    8c:ea:e8:b5:92:6d:61:11:c4:e0:3d:aa:12:99:8d:
                    07:44:ef:13:1f:f4:86:3d:c1:bd:64:56:4e:c9:9f:
                    cc:87:01:45:ee:f8:99:b6:b9:45:9c:ef:b7:90:bc:
                    7a:a9:60:0d:7a:f1:d2:8d:ca:4e:ef:2e:86:72:e1:
                    9c:20:12:a8:d5:63:63:1e:90:e5:c9:d1:a3:f7:44:
                    97:93:40:3e:94:70:4f:49:2d:0e:ce:74:3f:03:fd:
                    aa:3f:e2:69:81:da:d0:e2:d5:42:1f:96:c7:24:ba:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:13:A3:E3:A4:C0:95:8B:E0:44:CF:9D:73:F7:04:47:34:6E:9C:9E
            X509v3 Authority Key Identifier:
                keyid:EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/336DF8B28B0811F18D85AED87011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:da:9d:68:a1:1e:f2:c0:6a:14:0f:61:a9:88:df:b3:52:56:
         ee:f8:b7:95:cb:38:c8:8b:a1:f8:cc:1f:a3:14:01:48:bd:a7:
         5e:8c:f0:7f:d4:98:2c:0c:52:37:6a:85:89:a3:03:8f:a8:f8:
         8f:bb:e7:f5:ad:15:0d:4b:14:cb:48:86:0b:7e:75:d3:7e:1e:
         a9:ea:81:df:0d:fa:85:d1:11:e5:d8:8d:72:3b:bf:e7:2c:da:
         b9:50:78:58:1f:37:22:b4:b9:bc:f1:8b:1b:44:85:00:3d:8e:
         c5:18:ed:81:8f:df:03:cd:00:f4:4d:92:f2:2b:64:72:94:47:
         8f:74:db:76:7e:0d:2a:9b:61:cc:1a:6b:c0:ba:3f:16:53:6d:
         11:67:f8:f2:c6:c3:12:79:c2:5b:d4:da:ec:35:c3:ec:80:c4:
         6f:69:f0:b0:e9:43:ef:e3:d2:81:11:89:15:b0:2b:36:11:99:
         00:c7:39:4c:fb:53:b4:ee:31:3e:5b:d9:40:8b:9c:ec:38:d4:
         a9:36:35:69:05:e7:bd:fa:9a:22:6c:57:de:44:f9:6d:ed:4c:
         54:d6:9d:c6:89:9a:75:49:07:10:42:fc:3c:01:0c:c9:10:2b:
         c9:5b:71:2e:2e:cd:72:13:ce:94:cb:4c:3c:3e:b9:14:e7:55:
         a5:88:bc:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:10 2026 by rpki-client