Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/261E0ECA9FCF11EF84CA7C1EC4F9AE02.roa
File:                     261E0ECA9FCF11EF84CA7C1EC4F9AE02.roa (raw, json)
Hash identifier:          SvPxSGQL/cX+X245s+tyHkCn3YZEOG5gchCwPFRdhfQ=
Subject key identifier:   8B:CA:B6:3E:CC:7A:8C:CD:80:90:80:E2:B6:AE:12:6A:74:FB:E4:46
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BF1
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/261E0ECA9FCF11EF84CA7C1EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:24 +0000
ROA not before:           Mon 06 Jul 2026 15:11:24 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140689
IP address blocks:        110.170.145.0/24 maxlen: 24
                          210.86.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15345 (0x3bf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:24 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc59c-81c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:4b:34:7a:94:98:ee:61:bc:91:ce:dc:af:
                    06:8f:af:1f:b8:46:b7:d2:b3:d6:b1:38:58:47:f1:
                    6b:fd:8f:02:72:6f:cb:28:68:4d:a9:cf:47:9b:25:
                    62:2a:e6:9a:88:2c:65:83:9a:d3:43:b3:3f:93:34:
                    45:ae:e0:5d:85:94:44:1b:f6:2d:63:3c:ef:fe:08:
                    1c:da:47:2a:75:66:b4:02:93:4b:11:27:cd:86:c0:
                    a4:df:4b:08:93:bc:60:b8:8d:1b:08:47:7f:29:a1:
                    3a:bc:75:9f:ec:ed:45:f5:4b:9a:77:ab:fc:5d:08:
                    a3:9d:30:f6:9f:f6:ca:ce:35:70:65:d2:1a:de:ed:
                    22:e9:40:73:25:22:d9:81:0a:86:f9:4d:af:09:d0:
                    65:93:58:c8:4e:07:ad:0a:53:86:84:62:06:8f:d4:
                    b3:ca:fa:c6:a7:26:9c:ac:ce:85:6c:a1:09:ad:c1:
                    b5:a8:1d:fa:c0:ad:8f:81:d7:13:81:a5:16:0e:d8:
                    dd:95:51:43:59:b0:66:cf:69:fa:f3:13:65:bf:6f:
                    32:75:4c:ad:72:29:42:22:cb:46:5b:08:c5:d6:0f:
                    e9:c5:79:60:7c:14:75:80:56:c4:7c:31:de:61:e5:
                    2b:a7:ad:b9:ea:fd:a3:d3:80:f2:fe:96:9d:4e:3c:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:B6:3E:CC:7A:8C:CD:80:90:80:E2:B6:AE:12:6A:74:FB:E4:46
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/261E0ECA9FCF11EF84CA7C1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.145.0/24
                  210.86.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:7e:a0:0b:8a:8c:6e:a4:3a:2f:e4:15:01:ab:d1:31:f1:
         c2:a0:b9:ab:22:72:8a:68:96:81:97:7d:0c:1c:e0:56:74:c2:
         d6:c5:83:6b:51:33:0f:d1:a1:e7:4c:5a:86:99:6f:5a:ff:e6:
         5f:6f:ff:47:99:0e:36:c0:19:23:d5:8c:c1:9f:99:61:3a:3b:
         d5:ff:50:05:94:d3:7c:2e:ad:34:83:24:cd:17:9c:37:a4:62:
         e3:5c:18:de:fa:56:27:63:d3:e4:16:64:96:9c:33:e9:f6:dc:
         62:aa:fa:7d:09:0b:a2:0f:30:59:fd:a6:8f:be:ff:98:bb:4e:
         21:92:cb:f0:f9:d6:18:e6:ec:60:2b:34:c5:af:f0:9c:71:e1:
         d1:7f:e5:3f:6a:a1:7c:30:71:94:95:b6:d1:0a:2c:f8:fe:7a:
         6c:2e:3e:5c:e1:4a:82:31:90:d6:96:15:1f:8d:08:77:30:af:
         ed:07:7d:1a:53:58:23:bc:9c:73:1d:0f:b7:51:70:58:9f:88:
         29:84:21:d9:b1:1d:26:66:6d:92:20:6b:2f:31:e3:dd:e6:5b:
         89:92:31:a2:4e:9e:46:ac:64:f8:f2:9b:90:b5:5e:e5:ff:6b:
         57:f4:23:b5:0b:4d:56:36:cd:1a:fd:41:bc:00:3b:d7:9e:ee:
         76:78:27:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:01 2026 by rpki-client