Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa
File:                     264D7C4671E711EC93623E71C4F9AE02.roa (raw, json)
Hash identifier:          13bRma4GEVX/1IbmGc6D1g8O3zb4yVMe8s2xWKoaxdk=
Subject key identifier:   74:C1:34:4D:52:C0:80:81:1E:4F:0A:53:15:8E:AA:41:B8:12:B3:8E
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3A08
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:51:24 +0000
ROA not before:           Mon 14 Jul 2025 14:51:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55538
IP address blocks:        110.170.141.0/24 maxlen: 24
                          2001:fb0:1074::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14856 (0x3a08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6875196c-7fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:e1:7a:5d:13:1a:ad:e2:a4:c0:c9:29:31:
                    d5:dc:ac:af:97:5d:95:c6:57:d5:e2:8a:30:24:00:
                    76:01:db:ec:84:95:97:40:61:cc:65:40:fb:bb:b3:
                    a6:6a:85:26:3e:e3:22:45:1b:c2:99:6c:7e:16:a2:
                    52:7c:6c:60:a9:d6:57:ff:a2:48:5b:68:3c:9f:6d:
                    da:c7:b8:3d:38:3c:47:06:f9:fd:63:70:8c:56:99:
                    1e:ca:ed:f5:f1:77:29:98:ee:01:3f:e3:a7:c9:1d:
                    a3:4c:03:0e:cf:bf:f3:bc:dd:54:c2:2f:cc:00:e1:
                    76:c3:96:83:a3:97:2a:98:bb:24:5e:df:dd:e9:ff:
                    61:f1:b7:b2:68:45:02:b6:78:4d:11:c6:24:20:c2:
                    86:53:3e:75:dc:ad:ed:1a:58:4f:53:2e:9c:1c:ce:
                    b3:b4:36:89:b4:8e:31:01:2e:5b:a1:72:ad:97:f1:
                    1d:d1:65:fd:89:d0:eb:ce:28:12:6e:ba:d6:09:de:
                    b2:57:d4:32:a3:dd:b9:b5:78:69:81:48:1b:f3:06:
                    71:f3:c2:eb:a3:66:ca:d3:9b:22:92:14:27:81:c7:
                    5a:7a:5a:c4:b1:0d:76:0e:3e:7c:7d:1c:af:13:c6:
                    66:95:4a:96:4a:63:5e:16:b9:a1:42:f1:02:3d:d8:
                    4a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C1:34:4D:52:C0:80:81:1E:4F:0A:53:15:8E:AA:41:B8:12:B3:8E
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.141.0/24
                IPv6:
                  2001:fb0:1074::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:0c:e0:68:f6:a2:eb:f6:19:fe:a3:11:d6:89:83:b8:68:fd:
         a2:fc:3b:09:8e:7e:23:31:59:a4:27:0e:49:ef:2a:28:4c:9e:
         d2:d9:f3:12:97:d2:b1:51:1b:45:f8:02:b4:80:42:dc:85:f5:
         00:36:3c:e7:8d:86:55:72:09:de:d4:26:c6:c9:c6:28:78:c0:
         22:ce:61:d6:e2:21:49:48:69:e9:25:ec:df:56:0a:5b:9b:10:
         17:85:e9:36:0e:da:ba:e7:79:d7:80:ab:ba:9a:ff:f0:2b:e1:
         5f:be:bd:92:66:1d:d7:15:b4:8f:b1:7a:b1:30:df:6e:0c:b3:
         3d:88:86:21:81:c1:69:9c:ff:12:63:ca:63:ed:35:21:97:5c:
         58:67:da:fe:28:ed:74:1a:93:e8:23:c6:db:50:f2:81:88:58:
         56:59:94:d2:f5:18:12:25:e9:50:bd:87:ab:d7:54:23:df:5f:
         c7:eb:60:4a:e0:01:fe:81:77:f0:cf:6a:44:f0:d4:54:3e:9b:
         c4:f2:5d:1a:55:79:08:cd:14:75:9a:b3:36:2b:dd:4b:b8:fa:
         79:c8:90:ff:fb:9a:e0:44:23:7a:54:a3:1a:41:64:7d:7e:b1:
         fb:3d:06:e4:32:fc:70:8c:24:f4:c9:11:37:59:d0:9e:74:2d:
         40:a0:7c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:43:01 2025 by rpki-client