Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa
File:                     836FCA52168411EFB6BDB96BC4F9AE02.roa (raw, json)
Hash identifier:          PLsQDHdj3DGO3SEr4adGKcuqVZJnHWy78MOs0TAp70Q=
Subject key identifier:   36:16:5F:B2:F4:1F:D1:D3:D6:21:58:AA:1F:4C:05:1C:63:5F:A1:FF
Certificate issuer:       /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial:       01AC
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:01:24 +0000
ROA not before:           Sat 21 Jun 2025 04:33:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     400619
IP address blocks:        83.229.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
        Validity
            Not Before: Jun 21 04:33:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59834-efab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:bf:7b:ac:c7:01:d8:82:9d:84:3b:b6:c1:
                    4b:6b:64:e9:65:eb:05:b0:fd:fc:27:6b:e4:37:65:
                    98:fd:24:4a:b9:32:16:44:d6:64:18:94:56:cf:bb:
                    b8:dc:16:fb:f3:78:e2:c2:24:17:11:bb:93:79:f0:
                    9d:90:6e:e6:73:50:7f:11:c9:69:a5:59:83:a6:3c:
                    0d:07:1a:04:1d:05:36:e7:09:76:e3:84:0e:bb:d6:
                    11:c4:26:76:72:37:a8:92:21:4c:13:1f:a9:07:db:
                    26:24:a7:95:e8:e7:d3:52:f2:c8:a2:f8:d4:62:f3:
                    55:9e:75:de:d0:12:02:8b:98:1f:68:ba:21:28:2a:
                    ab:40:d3:79:7b:e7:39:18:39:80:22:bb:f4:f4:44:
                    84:bb:0f:ae:29:eb:94:d3:d2:48:b8:da:66:be:07:
                    09:b1:4b:1f:8c:da:19:33:7d:5c:ec:b1:94:65:6b:
                    f5:96:28:5f:2a:f1:ba:86:82:e0:c9:d7:52:da:62:
                    6c:4c:48:75:f9:b7:8e:cd:36:9b:27:88:f9:95:08:
                    cc:4c:a0:9d:1a:b6:53:aa:0e:51:6e:40:87:e0:8a:
                    2f:62:b9:f8:60:93:1d:e4:e4:b1:6e:61:75:b7:36:
                    5f:f7:eb:be:7c:99:63:05:f8:eb:4a:a7:bb:73:bd:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:16:5F:B2:F4:1F:D1:D3:D6:21:58:AA:1F:4C:05:1C:63:5F:A1:FF
            X509v3 Authority Key Identifier:
                keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:99:43:c4:64:09:9e:22:00:8e:a2:f3:0f:dd:a7:69:64:21:
         b5:b6:f6:c0:39:47:b6:52:85:6a:2f:f7:58:92:22:07:76:fc:
         f7:46:35:da:77:9e:8c:83:c4:9a:bd:ef:33:1a:a6:e7:ca:4f:
         3c:3e:f8:19:4d:5a:61:8e:93:59:08:e0:45:29:3b:15:48:64:
         04:80:19:b1:98:e4:cb:27:da:f4:8f:10:9d:7b:c3:78:45:05:
         e1:4d:81:e9:18:1c:78:1e:d8:be:cc:f1:15:ad:3d:d6:2a:9a:
         b6:d1:54:ed:6a:96:ad:a3:b9:83:3f:83:5a:e9:f8:44:51:54:
         54:a1:f4:9d:4a:e8:4e:e9:df:cc:ef:86:25:6b:fc:cf:99:bd:
         86:04:36:26:90:2e:cc:48:ef:de:64:96:10:45:61:40:27:79:
         95:98:dd:b4:ad:2a:0f:36:22:9a:f2:70:04:2a:09:2d:9f:9b:
         4f:9f:4e:bf:47:ef:4c:98:2b:74:31:4d:71:0f:fe:47:15:32:
         9d:5d:9a:91:aa:8f:30:0b:7b:12:e8:4a:ae:49:44:32:38:d9:
         e3:fc:21:1c:2e:be:3d:b1:c5:08:f9:33:68:57:dc:a4:70:07:
         d4:08:5f:cb:b7:39:be:63:1e:ec:1c:44:ea:0e:4e:54:09:e8:
         29:55:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:14:45 2026 by rpki-client