Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa
File:                     036D9582D09611F0AF11A347C4F9AE02.roa (raw, json)
Hash identifier:          EU63Rpu1A2RahZbyGq4yx5lKbh4lqDGQlOsxErEVF1U=
Subject key identifier:   72:89:D1:58:AB:00:D0:B5:A6:31:1E:10:EC:9F:2D:E7:F1:83:74:EF
Certificate issuer:       /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial:       0946
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa
Signing time:             Sun 16 Aug 2026 20:41:13 +0000
ROA not before:           Sun 16 Aug 2026 20:41:13 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     14593
IP address blocks:        14.1.64.0/19 maxlen: 24
                          103.152.126.0/23 maxlen: 24
                          103.235.92.0/22 maxlen: 24
                          116.91.208.0/20 maxlen: 24
                          150.228.128.0/17 maxlen: 24
                          2406:2d40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
        Validity
            Not Before: Aug 16 20:41:13 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a822069-25c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:d7:dd:9d:dd:63:1d:59:00:a2:18:e6:06:
                    15:15:fb:64:d2:ab:9c:55:48:47:79:24:1d:c6:b5:
                    8a:f1:a6:2a:dc:92:a9:38:3a:d4:3c:36:e8:0e:45:
                    4e:af:69:c4:fb:72:b4:ce:bc:bf:5f:b9:99:2f:ce:
                    b7:ef:9c:24:8a:36:c2:63:ca:df:de:34:03:ab:31:
                    4e:69:98:7a:17:82:4f:97:e2:15:e4:15:4f:a4:58:
                    70:70:56:4e:65:d2:b3:03:d3:39:71:a4:a9:92:c3:
                    78:ba:33:74:44:dd:3e:cb:0f:56:6f:e3:cc:7f:37:
                    fc:cf:83:18:7a:b8:7d:71:d9:5a:85:21:27:88:a0:
                    30:dc:f7:62:7a:79:ba:38:44:ab:cf:2f:88:f2:a4:
                    2b:ea:de:08:fb:d0:bf:f7:44:af:db:3a:b5:44:b3:
                    ea:ce:32:e9:95:7b:b8:93:cb:89:b2:b0:d0:7b:bc:
                    62:1b:cd:3c:e3:14:90:39:35:16:95:2c:3b:4e:c7:
                    68:46:ed:25:b1:d4:39:d1:c9:91:c6:66:27:cd:21:
                    e3:a7:67:00:ab:8e:17:33:e3:d4:01:0f:48:9c:9b:
                    02:4c:6b:df:6b:41:ee:ca:e2:25:9f:7d:48:c8:94:
                    e8:e6:7f:a4:d6:31:c5:9d:d7:cf:6f:2d:81:51:a0:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:D1:58:AB:00:D0:B5:A6:31:1E:10:EC:9F:2D:E7:F1:83:74:EF
            X509v3 Authority Key Identifier:
                keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/036D9582D09611F0AF11A347C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.1.64.0/19
                  103.152.126.0/23
                  103.235.92.0/22
                  116.91.208.0/20
                  150.228.128.0/17
                IPv6:
                  2406:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:ce:d5:13:17:ea:23:5b:6e:d5:8f:e5:a6:fe:41:23:81:37:
         df:46:08:9f:8c:fd:f3:2c:2c:3f:9c:5c:5a:67:05:71:d2:cf:
         bc:d9:a7:86:84:be:2d:16:c6:9e:47:38:0e:cd:8a:58:ae:21:
         49:9c:57:2d:1b:f7:40:73:fe:08:e4:b4:3b:1b:bf:09:1b:52:
         0e:b4:8b:0b:f7:0c:8b:a9:ea:81:38:1a:8f:c6:50:ff:ee:ea:
         55:80:83:f3:63:d9:a6:69:25:d0:59:98:57:f3:77:be:a2:0f:
         05:d8:24:e9:38:a3:52:1d:54:64:ad:64:d3:9d:ec:9b:f8:8a:
         3d:08:af:72:e3:64:64:88:16:bf:0b:f2:b6:19:e0:49:e2:22:
         98:e9:ac:91:67:c0:81:d3:87:23:53:d4:52:12:22:26:0d:d0:
         0f:a5:94:6e:54:64:64:c3:c4:e6:4c:06:5d:dd:9a:eb:6e:54:
         da:b8:5e:24:02:31:92:fd:b0:0a:b7:96:48:ed:63:fc:ee:b0:
         fc:0a:e7:75:91:1a:ff:89:2f:14:eb:31:51:60:3f:8a:fe:f3:
         a5:ec:e6:cc:ad:45:d4:cb:a7:a8:31:82:57:e6:0f:86:2d:2f:
         7c:dd:89:30:9e:ea:5f:e8:28:a3:eb:91:e6:80:f2:aa:96:22:
         97:d4:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:10:40 2026 by rpki-client