Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/36660EAE679E11EFBAD37686C4F9AE02.roa
File:                     36660EAE679E11EFBAD37686C4F9AE02.roa (raw, json)
Hash identifier:          Alo6+mbXK5hudm6qXf9m/rE0ehCEvCvCk+3HnA1lEJ4=
Subject key identifier:   F0:F2:4B:2B:AC:6E:65:29:39:E0:A7:51:8C:01:81:0D:A5:17:E2:D0
Certificate issuer:       /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial:       035D
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/36660EAE679E11EFBAD37686C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 01:34:45 +0000
ROA not before:           Tue 03 Mar 2026 01:34:45 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140952
IP address blocks:        103.209.253.0/24 maxlen: 24
                          103.209.254.0/24 maxlen: 24
                          2404:5d80:6300::/40 maxlen: 40
                          2404:5d80:6800::/40 maxlen: 40
                          2404:5d80:6800::/41 maxlen: 41
                          2404:5d80:6800::/42 maxlen: 42
                          2404:5d80:6800::/43 maxlen: 43
                          2404:5d80:6800::/44 maxlen: 44
                          2404:5d80:7400::/40 maxlen: 40
                          2404:5d80:9000::/40 maxlen: 40
                          2404:5d80:9400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
                          rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 00:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
        Validity
            Not Before: Mar  3 01:34:45 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a63ab5-0887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:d6:4f:13:ad:b8:94:c4:fc:07:1a:3c:43:
                    dd:86:90:88:06:eb:f5:bc:3b:b3:59:92:ce:e6:92:
                    9b:97:a0:59:3e:8f:82:51:bb:01:c0:6a:89:27:b6:
                    9d:ab:1b:8f:60:75:be:1e:ec:fd:74:90:72:a9:15:
                    27:e4:2d:a0:e7:14:81:74:f9:ab:ad:f6:85:66:db:
                    ac:e1:cb:57:5a:8b:4e:fa:cb:ec:65:2f:a5:0a:6d:
                    9e:bd:33:01:c1:9f:7a:79:81:ac:4b:fc:06:7d:b4:
                    b3:4e:6f:85:6b:b3:fc:28:5b:fc:3f:cf:15:f8:be:
                    bd:08:b6:60:11:9c:18:62:6b:e0:7d:0a:ea:cd:ec:
                    22:b2:8f:ee:94:95:b7:21:9c:5b:04:f1:f1:7f:97:
                    7f:62:0d:dc:fa:42:88:42:62:8c:0d:90:52:8f:f2:
                    11:e3:d5:38:74:19:10:82:7d:05:24:42:f5:9e:11:
                    fc:7c:9e:fd:a5:29:3c:43:8a:f3:bf:e4:d2:5d:89:
                    2d:bf:49:65:9f:df:02:0f:8f:0a:84:75:73:de:3d:
                    c5:cc:35:e4:cf:6c:86:e0:45:0c:f0:b7:b5:b6:ed:
                    b1:73:1a:69:ad:8e:e6:9c:7f:66:48:0c:0f:19:74:
                    db:46:3c:37:10:b1:8f:18:8e:51:8d:70:48:7a:1e:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F2:4B:2B:AC:6E:65:29:39:E0:A7:51:8C:01:81:0D:A5:17:E2:D0
            X509v3 Authority Key Identifier:
                keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/36660EAE679E11EFBAD37686C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.253.0-103.209.254.255
                IPv6:
                  2404:5d80:6300::/40
                  2404:5d80:6800::/40
                  2404:5d80:7400::/40
                  2404:5d80:9000::/40
                  2404:5d80:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:6c:7e:20:5e:5f:97:3e:44:50:fe:0a:c2:47:14:70:34:
         43:96:4d:ec:51:78:ab:ac:b6:8e:e9:d9:85:e1:88:1b:e6:38:
         e8:cd:77:51:35:2e:71:04:9a:1c:5e:db:f7:08:00:a9:d3:98:
         80:5b:77:66:8c:ec:20:f4:7c:ba:e8:55:a3:de:c8:59:2c:08:
         9a:43:19:42:82:f7:4b:4e:e2:99:92:e3:d3:c8:5a:9b:e5:fc:
         20:3c:ba:17:40:74:14:19:d2:85:c7:bb:f6:05:1f:7a:4f:a9:
         4b:5e:66:a5:b2:91:9a:50:5c:c6:e9:c3:60:c1:35:5d:4c:22:
         45:70:40:c1:37:9e:b4:6e:8a:84:93:48:c2:49:61:80:3a:0f:
         9a:54:35:79:9a:05:7e:a1:0c:69:78:3f:4b:bc:e0:6f:70:e4:
         4e:b0:fb:87:34:d5:9a:ed:51:da:9f:93:59:93:3e:f9:8e:da:
         28:8b:28:9e:fe:01:09:89:34:fc:00:12:40:ef:fc:8e:1c:d5:
         92:05:c4:98:a4:2a:d2:4f:10:4b:2d:1d:ba:05:c1:bd:fc:80:
         1a:5e:3c:b1:7e:7e:f2:b5:16:12:ac:54:00:7a:97:1f:22:c1:
         ee:83:b1:5d:33:33:52:63:36:2c:36:3b:c2:4f:b7:51:80:64:
         61:67:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:56:06 2026 by rpki-client