Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/36765016252911EDBEF5C985C4F9AE02.roa
File:                     36765016252911EDBEF5C985C4F9AE02.roa (raw, json)
Hash identifier:          9SDotapZ+f0lgTwQv/vtAtj6Uq06R+6ih2fWETl01/A=
Subject key identifier:   F7:B0:20:57:61:C8:56:D4:A8:96:71:85:73:70:EC:17:67:47:98:BE
Certificate issuer:       /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial:       02CA
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/36765016252911EDBEF5C985C4F9AE02.roa
Signing time:             Mon 26 Jan 2026 14:20:39 +0000
ROA not before:           Mon 26 Jan 2026 14:20:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150175
IP address blocks:        103.205.36.0/23 maxlen: 23
                          103.205.36.0/24 maxlen: 24
                          103.205.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
        Validity
            Not Before: Jan 26 14:20:39 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69777837-6eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:b6:91:dc:3e:99:4b:a9:11:5e:08:96:c6:
                    1c:c5:9c:59:11:10:e3:b9:de:9f:73:17:e8:6c:a7:
                    9d:89:8c:8c:5c:04:cd:d8:30:59:43:5d:bf:c3:30:
                    2d:c8:30:7f:88:2f:18:c9:ca:b9:47:d5:05:3f:29:
                    34:59:50:01:cd:57:ef:43:84:51:1c:7b:8f:39:f5:
                    88:96:dd:31:94:b1:29:2c:64:c6:23:ac:ac:b8:8d:
                    8c:57:df:05:e6:fb:39:e1:e9:e1:23:23:39:b4:67:
                    89:23:fa:7b:46:62:0c:7e:44:2d:24:3b:33:94:61:
                    00:c3:bf:af:49:92:4c:b5:8c:0c:f2:d5:d8:27:9c:
                    32:70:5f:24:5e:ab:64:ef:0c:8c:6a:e5:b2:8d:b6:
                    9d:09:a4:15:f2:76:78:2f:72:86:47:09:32:b6:10:
                    c2:28:66:22:03:4a:ab:99:11:46:cd:e5:6b:64:6c:
                    aa:fd:47:a9:ed:4d:74:c5:83:86:e0:7b:02:e2:ec:
                    ee:f9:5d:48:3c:47:d2:7b:88:32:ee:37:3c:dc:67:
                    06:a7:92:77:0c:fa:1e:5c:76:fa:be:c7:e3:79:6c:
                    5f:80:d7:e4:31:8e:3d:1f:65:1e:3b:b3:ad:c6:1f:
                    b0:85:d6:70:92:fc:84:3b:ec:26:ec:7a:c0:ff:70:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B0:20:57:61:C8:56:D4:A8:96:71:85:73:70:EC:17:67:47:98:BE
            X509v3 Authority Key Identifier:
                keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/36765016252911EDBEF5C985C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:22:04:c1:55:50:2d:31:9d:b7:93:9e:7b:ac:a6:dd:29:
         09:2c:0c:92:fb:5a:22:6c:ac:e2:19:83:41:7d:90:b9:86:2e:
         ac:9a:d1:88:b3:ad:cd:d9:c8:20:18:82:77:fc:94:58:31:6e:
         49:af:53:43:f1:3f:43:77:39:ed:62:ac:51:d6:d4:44:6c:d3:
         f1:dd:c3:2a:6e:9b:ec:73:8f:22:7d:89:fa:e2:86:18:37:93:
         54:4d:d0:27:2a:12:f3:6e:3e:76:53:76:46:68:89:a9:1d:46:
         f3:44:2a:43:c3:2a:75:fc:2b:19:ab:4e:b4:20:a0:4b:55:e4:
         cd:f4:4b:dd:df:ee:35:de:43:2a:1b:93:e1:8c:be:ea:8b:9e:
         70:6b:62:04:b2:b6:a9:93:a0:14:46:b6:60:6e:ce:d9:92:17:
         0c:46:01:33:60:51:ae:30:b2:da:c8:2d:7a:66:20:bd:f6:65:
         31:44:09:58:76:f3:f2:68:95:18:d2:7d:9f:67:eb:0b:28:f2:
         46:44:9d:25:65:d4:ae:92:ae:fc:e0:3c:60:4a:9f:5b:02:a5:
         7a:4f:20:2c:ea:b7:96:74:b9:0f:29:22:0f:de:0f:25:05:c9:
         ff:33:3e:44:9f:33:a8:60:90:51:82:1a:d8:d8:7a:7d:53:84:
         ec:79:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:33 2026 by rpki-client