Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa
File:                     296C70368D0A11EE89E31163C4F9AE02.roa (raw, json)
Hash identifier:          6ZEsybRe0oLgQAcKOKtbN/fBWgK+tAXl0P9QdZGnk9M=
Subject key identifier:   9C:C2:F6:8F:A7:6E:71:3A:A1:CE:45:B5:73:D9:90:7A:34:A0:9E:8B
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BF9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:40 +0000
ROA not before:           Mon 06 Jul 2026 15:11:39 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152130
IP address blocks:        110.170.136.0/24 maxlen: 24
                          2001:fb0:1081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15353 (0x3bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5ab-9f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2d:ea:8a:bc:f5:30:be:c4:50:27:6d:31:70:
                    72:d6:07:7e:4e:26:af:c1:1f:f6:51:44:12:dd:82:
                    64:0e:e4:49:e9:e1:f9:ea:31:38:67:87:5c:34:56:
                    8a:90:82:5c:9e:a9:6a:50:f0:c6:17:13:4d:5e:d5:
                    28:16:42:67:e0:70:f3:16:84:6d:51:e6:49:c8:b6:
                    a9:0e:5c:b8:09:71:1c:e0:de:74:d0:fb:04:b5:db:
                    49:d0:ba:cd:d8:85:bd:e9:fb:71:2f:da:5e:94:2b:
                    2b:58:69:2d:e5:b3:c1:b4:73:f9:fc:87:1a:47:4e:
                    a5:41:dd:36:80:65:0b:14:76:e2:de:3c:97:86:75:
                    6c:2e:7d:85:41:5b:3b:57:f0:08:86:b3:4b:ad:2e:
                    d8:76:8a:58:6e:fc:88:5f:cf:60:31:88:5e:0f:fe:
                    4a:4d:31:e8:37:a2:5b:ee:e6:b4:a5:6e:1f:e8:c4:
                    78:07:76:c1:5f:82:2e:21:48:f4:37:3c:a2:7d:77:
                    34:60:3b:cf:c2:66:c4:9f:4f:6e:a5:a6:73:41:12:
                    9b:13:30:3d:75:99:3f:19:b8:72:47:32:cd:84:e9:
                    c2:5d:47:f2:6f:8c:ec:26:6a:85:24:2a:90:96:ea:
                    b2:f7:cf:ad:b8:25:89:bb:96:a6:dc:23:43:e6:46:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C2:F6:8F:A7:6E:71:3A:A1:CE:45:B5:73:D9:90:7A:34:A0:9E:8B
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.136.0/24
                IPv6:
                  2001:fb0:1081::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:02:2d:4b:c7:08:04:56:60:b2:06:d1:ca:dd:b5:5b:74:8d:
         52:8e:0d:02:38:2f:e0:92:d3:7a:28:59:c7:d4:23:49:39:4e:
         98:e3:01:6e:25:4d:0e:b1:c5:09:06:5f:73:8c:6f:38:2f:21:
         53:ae:44:61:a3:17:7e:6f:6f:b1:a1:80:46:1f:d5:76:74:d9:
         58:ea:c5:aa:0a:dd:09:8a:6d:09:fc:b1:94:f5:f3:e1:86:f3:
         2e:fb:66:9e:41:2e:d7:7d:0d:ad:33:da:a4:d6:c4:ea:6e:ce:
         51:9f:bb:8e:8f:2d:36:1f:c3:aa:c0:db:df:4a:b1:23:86:2a:
         af:9e:f2:73:62:cf:31:83:58:e8:21:71:94:20:38:95:bc:76:
         b9:f2:d4:ee:e7:3b:86:60:d9:e9:b9:c7:4e:22:84:73:52:6b:
         29:e4:0e:e6:75:bf:b4:57:62:87:64:c4:40:7c:a6:9a:98:78:
         7c:5a:1e:de:a1:11:44:99:27:1f:3b:9c:bb:6b:08:7a:fe:c6:
         6e:46:da:fd:4f:f3:74:d6:1f:03:23:4f:c5:96:b2:fb:8e:74:
         31:f6:f0:a3:02:35:85:8f:12:80:5e:7c:22:77:2a:26:4a:e5:
         9a:87:82:4a:2f:82:46:ae:4f:9f:d8:6c:01:54:c7:09:80:0a:
         ba:a2:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:04 2026 by rpki-client