Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa
File:                     9A4656B4487911F181BECDDBA9833773.roa (raw, json)
Hash identifier:          fErAjLmCx+yzqN/X17f78usD5MHzCXWT6FvX6ijj1p0=
Subject key identifier:   3C:0D:05:11:9B:1D:FD:16:53:9D:2C:DC:C6:8B:E0:52:3F:53:D3:C7
Certificate issuer:       /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial:       080C
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa
Signing time:             Wed 24 Jun 2026 22:27:04 +0000
ROA not before:           Wed 24 Jun 2026 22:27:04 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        36.255.196.0/24 maxlen: 24
                          36.255.197.0/24 maxlen: 24
                          36.255.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Jul 2026 21:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060 (0x80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
        Validity
            Not Before: Jun 24 22:27:04 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3c59b8-55e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:f0:5b:ad:f8:dd:4d:ce:c8:2d:1a:cd:cd:
                    b9:45:32:d3:0f:68:75:65:cd:b0:b8:7b:d5:7d:38:
                    66:5b:2f:6a:f0:66:bb:a1:25:6e:8a:a2:9c:48:25:
                    ee:32:93:20:3a:30:73:47:fd:87:ee:b0:e7:12:97:
                    72:28:0e:a7:ae:3e:fd:b8:94:b1:ad:90:42:31:23:
                    55:09:d1:d9:71:5e:f2:59:31:06:cd:11:95:19:96:
                    d3:b4:2a:fa:db:fb:94:1c:a8:9f:9e:44:17:a7:17:
                    90:c0:80:32:d6:f5:24:a6:6e:78:5b:09:21:ed:4f:
                    fc:40:e0:c8:ff:85:eb:3c:25:8b:57:5a:45:11:6e:
                    0b:c3:03:f7:f9:e5:89:f5:cf:8c:5b:34:7d:69:ee:
                    4f:fd:59:ad:17:fa:0f:c3:f0:17:71:d1:7a:88:39:
                    00:26:1c:cf:ed:a8:61:8e:93:27:5d:b8:9c:fb:ee:
                    65:28:24:46:9c:83:4f:93:9d:00:1b:bd:39:61:b7:
                    23:e2:d9:40:47:a2:25:2f:82:26:d0:91:49:3d:06:
                    72:37:a7:d7:03:d2:44:c8:ab:75:3b:b2:e1:53:16:
                    04:f8:86:5a:48:98:0f:3d:ce:9b:e5:76:1b:f1:eb:
                    ff:88:11:e8:91:2a:a5:a1:25:1d:9c:e0:4c:3d:2f:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0D:05:11:9B:1D:FD:16:53:9D:2C:DC:C6:8B:E0:52:3F:53:D3:C7
            X509v3 Authority Key Identifier:
                keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/9A4656B4487911F181BECDDBA9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.196.0-36.255.198.255

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:e3:58:51:40:ef:46:da:38:8a:54:a2:9b:5f:f7:bf:02:
         ec:29:44:88:c4:57:ff:95:4a:8f:3b:09:51:39:37:73:7c:92:
         c0:a1:b0:a8:6e:88:fb:b8:6f:a7:08:28:d4:cc:6b:e8:da:22:
         f3:bd:fa:9e:32:9d:ae:76:87:89:f5:1d:9f:79:a9:8e:58:9c:
         ad:31:9c:4e:e0:f9:03:5e:2e:e6:21:a2:f3:68:d2:5c:97:29:
         04:37:e7:c3:79:5a:6e:8a:7d:95:57:4f:73:1a:ca:36:e4:4d:
         dc:74:ff:2c:8a:2c:73:65:a9:a0:83:2c:43:0f:cc:5d:b5:87:
         44:4b:e6:1f:33:8a:a4:f7:25:b4:70:b0:02:9e:fc:35:6e:b4:
         39:a8:b4:f9:a6:e8:49:f1:b0:ce:73:19:f5:14:6a:c3:d7:83:
         f0:1c:20:ce:09:ed:34:18:f9:d9:fa:07:8d:a8:6e:e8:a2:3e:
         94:8b:ad:86:ac:bf:70:4d:61:61:9d:d3:f9:79:38:a8:02:cb:
         c5:8d:69:15:5e:ce:a5:d7:8d:e0:5d:01:6c:40:f0:75:89:d5:
         5a:1b:96:ea:ab:b6:ad:e5:fe:69:fe:08:e4:d5:7d:e5:3f:75:
         cd:44:6d:f3:df:17:8c:e9:80:c5:13:68:a7:95:49:fa:7f:6d:
         8f:ae:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:01:21 2026 by rpki-client