Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/B36EA83C70B111E98CFFF710C4F9AE02.roa
File:                     B36EA83C70B111E98CFFF710C4F9AE02.roa (raw, json)
Hash identifier:          2nquH/Th3aV+FpaTguBv+jy8p2aXbOfhDSjXTwmNigg=
Subject key identifier:   95:ED:C2:99:51:12:A5:56:4A:0E:3F:B7:F3:B7:1E:3F:49:0A:9D:26
Certificate issuer:       /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial:       37EB
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/B36EA83C70B111E98CFFF710C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:17:59 +0000
ROA not before:           Tue 30 Dec 2025 15:10:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132215
IP address blocks:        59.144.191.0/24 maxlen: 24
                          61.246.118.0/24 maxlen: 24
                          125.16.228.0/24 maxlen: 24
                          125.22.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14315 (0x37eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
        Validity
            Not Before: Dec 30 15:10:37 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490e7-776b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:87:bc:ea:8c:6c:29:5a:d9:8a:61:21:56:
                    b0:1a:b8:99:96:89:3f:38:3f:6d:47:2b:8e:74:e1:
                    14:2d:40:ec:85:3d:54:46:9c:ab:d7:49:45:6a:d6:
                    a6:33:6f:ae:e2:b9:0d:cf:ec:36:44:03:df:4d:08:
                    9e:ca:84:2c:ca:25:37:a1:2c:8c:a1:94:7d:ff:73:
                    62:cc:bb:f9:49:98:0c:28:b5:75:55:cd:41:6a:4f:
                    7b:86:c0:f0:1c:8f:16:d9:96:65:8f:59:8c:0f:67:
                    8e:51:6a:ec:b0:28:f3:8d:10:33:e2:35:78:12:7e:
                    d9:45:c8:bc:49:88:5b:a6:fb:7d:77:e8:ea:7a:98:
                    a4:f7:8d:46:1b:79:66:88:78:4c:b6:d0:dd:b0:c4:
                    64:2a:69:50:4a:0f:dc:2b:56:e1:8d:73:81:53:85:
                    46:b0:cd:e2:32:df:c3:ba:9e:f9:40:56:22:b3:09:
                    08:0a:e8:ca:03:13:19:d6:4f:0b:bb:e9:ba:1d:f0:
                    20:44:5d:12:ba:31:2e:ed:a1:bc:63:fe:cd:ea:ae:
                    6c:a5:99:32:6c:da:c4:dc:34:c7:f6:da:66:26:13:
                    b3:48:2d:5d:39:de:21:68:09:79:e8:47:f1:d2:f9:
                    7c:a4:64:46:93:25:2b:b3:c5:62:3d:04:6c:34:e2:
                    31:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:ED:C2:99:51:12:A5:56:4A:0E:3F:B7:F3:B7:1E:3F:49:0A:9D:26
            X509v3 Authority Key Identifier:
                keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/B36EA83C70B111E98CFFF710C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.144.191.0/24
                  61.246.118.0/24
                  125.16.228.0/24
                  125.22.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:8d:10:8f:cd:03:f5:82:ec:e0:95:26:0b:da:68:71:26:bf:
         71:12:ea:3f:25:c4:e0:35:64:3a:d1:54:cf:dc:8d:7d:a0:d6:
         66:b2:df:6d:37:47:f5:44:6b:6f:3e:68:bf:b8:ba:29:2a:be:
         5c:99:a1:be:de:6b:9c:a6:7e:4a:44:67:3c:c7:68:71:a4:39:
         4c:3c:c7:7b:87:0d:57:4a:bc:9f:4e:87:00:b7:15:8a:81:be:
         2a:52:1b:4a:2a:91:7f:52:df:e0:0b:a3:58:9c:fc:dd:69:0a:
         5d:4f:a9:b2:6d:c4:4d:97:c0:99:7d:5d:30:a7:01:80:75:5a:
         a9:4a:55:c2:c0:14:5f:cb:81:e5:53:8e:54:88:a2:7a:e4:c5:
         ca:b1:8b:56:ba:9a:83:5c:aa:9c:3c:b5:f3:8b:52:a6:60:e2:
         8a:52:3e:e3:f4:5c:1b:7a:ea:a1:72:da:c5:c1:1d:c3:7a:64:
         1f:f1:4b:5c:0a:81:ba:d9:13:20:3a:1b:64:4d:c6:a1:eb:4e:
         14:bb:69:a5:1e:d5:be:77:00:ba:74:fd:47:86:36:76:53:6b:
         be:bc:9f:29:ed:73:d5:11:35:fa:48:d5:4b:ea:9f:14:55:f3:
         ac:bc:b2:6a:25:e7:36:81:4e:45:26:39:10:5e:29:6c:98:d9:
         ae:0d:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:18:13 2026 by rpki-client