Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/536D7D82E23311F080CB84306D6F56BC.roa
File:                     536D7D82E23311F080CB84306D6F56BC.roa (raw, json)
Hash identifier:          DlXxGp/meO1cYGVzEI1OwT/gXnVyfYdmk/FY70rb7Yo=
Subject key identifier:   BF:E5:C4:85:E0:21:2F:60:3D:DA:73:07:01:F4:75:9C:11:24:95:A0
Certificate issuer:       /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial:       01A7
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/536D7D82E23311F080CB84306D6F56BC.roa
Signing time:             Mon 02 Mar 2026 13:40:13 +0000
ROA not before:           Fri 26 Dec 2025 08:17:32 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     398395
IP address blocks:        2401:8360:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
                          rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 03:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
        Validity
            Not Before: Dec 26 08:17:32 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a5933d-e2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:b8:9b:12:3e:76:02:9d:0b:ac:de:d1:22:
                    23:58:1a:40:e0:dd:24:94:a9:26:88:a2:fd:d2:eb:
                    2f:00:31:44:bf:2b:45:4f:e8:f5:ba:86:2a:b4:5b:
                    39:3f:be:17:87:28:98:f6:7c:59:16:88:c1:5f:2e:
                    33:82:03:3b:44:b2:e7:26:6d:71:d7:44:73:88:10:
                    1b:a1:a7:5b:5b:d9:c4:01:c6:ae:8a:77:3a:89:aa:
                    89:48:07:7f:8f:c6:8a:1f:29:c3:3a:98:94:ef:70:
                    5d:17:67:a5:25:c9:06:75:f8:d4:9b:f1:a7:e4:94:
                    3e:3f:bb:ba:d6:79:0e:12:9e:24:3f:82:92:0f:cc:
                    d3:1a:b4:86:aa:84:f9:d8:84:54:89:90:e5:f6:f1:
                    29:b4:e6:1c:5d:54:75:cc:07:d6:f9:5a:5a:78:e2:
                    e5:7f:b3:fe:fb:c2:a3:5c:3b:08:1e:0a:cd:a3:44:
                    af:65:3e:11:28:77:72:1b:7a:08:db:02:73:f1:d4:
                    3c:1b:b9:4c:a3:6f:6a:4e:c9:5e:ce:9e:70:b7:94:
                    f3:b9:cf:4c:78:f2:15:84:72:f1:f7:79:ff:a0:a6:
                    ab:b3:e4:7e:05:c1:e2:95:03:13:f0:02:e5:33:7e:
                    ad:82:7c:21:2e:c8:36:e6:4e:36:0c:17:c9:16:e7:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:C4:85:E0:21:2F:60:3D:DA:73:07:01:F4:75:9C:11:24:95:A0
            X509v3 Authority Key Identifier:
                keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/536D7D82E23311F080CB84306D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8360:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:5e:63:01:9e:14:a7:00:c5:e0:0c:b4:73:51:8d:0f:51:
         67:85:8b:f5:38:58:b6:32:78:66:80:a3:e9:42:4b:b5:60:54:
         47:2a:6c:2e:03:ae:9d:74:92:d1:0b:90:8d:35:76:29:35:2d:
         9b:75:6a:0c:0d:f5:6a:c3:f8:2e:c4:d2:95:d6:24:9f:b2:f5:
         8b:f9:73:1d:19:c2:1e:4e:77:7f:e4:e3:a5:91:23:9e:e4:94:
         0a:b9:ef:ff:78:2b:c9:f9:a0:b2:80:87:b1:14:a0:0c:e4:c5:
         06:22:23:e6:0c:55:b7:67:4c:a9:60:23:99:00:fb:46:13:4d:
         32:27:98:f5:b2:84:cb:04:21:44:13:5c:84:70:0d:cb:d7:ef:
         0b:8f:e6:32:30:bf:3d:9c:41:38:a9:8a:2e:da:76:d5:3f:a8:
         97:01:2a:9b:ad:e7:f0:98:13:83:82:a0:88:00:2e:af:28:31:
         1d:79:bb:f0:83:27:ba:f5:e7:9e:e3:8b:b5:c5:e8:2c:3e:d5:
         39:19:fb:40:ef:4a:cd:87:57:2d:e2:4b:38:a6:1e:e7:8c:09:
         13:b8:57:b2:0a:72:0a:bb:20:7c:12:68:63:78:2e:53:59:a8:
         ca:cf:97:5b:7f:7e:d1:73:5d:60:5e:be:cc:29:d6:1f:1a:50:
         f1:4b:96:99
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF
RkYzMTA2QzUwHhcNMjUxMjI2MDgxNzMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTMzZC1lMmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2fK4mxI+dgKdC6ze0SIjWBpA4N0klKkmiKL90usvADFEvytFT+j1uoYqtFs5
P74XhyiY9nxZFojBXy4zggM7RLLnJm1x10RziBAboadbW9nEAcauinc6iaqJSAd/
j8aKHynDOpiU73BdF2elJckGdfjUm/Gn5JQ+P7u61nkOEp4kP4KSD8zTGrSGqoT5
2IRUiZDl9vEptOYcXVR1zAfW+VpaeOLlf7P++8KjXDsIHgrNo0SvZT4RKHdyG3oI
2wJz8dQ8G7lMo29qTslezp5wt5Tzuc9MePIVhHLx93n/oKars+R+BcHilQMT8ALl
M36tgnwhLsg25k42DBfJFucT7wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFL/lxIXg
IS9gPdpzBwH0dZwRJJWgMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy
MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTBENzIvOEIyNUFEMDREMjJCMTFFRUJDMTQ1MzQzQzRGOUFFMDIvNTM2RDdEODJF
MjMzMTFGMDgwQ0I4NDMwNkQ2RjU2QkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAGDYAAPMA0GCSqGSIb3DQEBCwUAA4IBAQB/T15jAZ4UpwDF4Ay0
c1GND1FnhYv1OFi2MnhmgKPpQku1YFRHKmwuA66ddJLRC5CNNXYpNS2bdWoMDfVq
w/guxNKV1iSfsvWL+XMdGcIeTnd/5OOlkSOe5JQKue//eCvJ+aCygIexFKAM5MUG
IiPmDFW3Z0ypYCOZAPtGE00yJ5j1soTLBCFEE1yEcA3L1+8Lj+YyML89nEE4qYou
2nbVP6iXASqbrefwmBODgqCIAC6vKDEdebvwgye69eee44u1xegsPtU5GftA70rN
h1ct4ks4ph7njAkTuFeyCnIKuyB8EmhjeC5TWajKz5dbf37Rc11gXr7MKdYfGlDx
S5aZ
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:43:18 2026 by rpki-client