Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/367596CC1E0111E9A590C837C4F9AE02.roa
File:                     367596CC1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          R4VD6B4jygQdvmSIhYmTbgz3Cjc+bdY+q2robO7JsO0=
Subject key identifier:   EB:FC:E3:4F:85:A3:49:CF:21:89:64:A0:A0:D7:F7:4F:E7:58:8B:38
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39C3
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/367596CC1E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:50:26 +0000
ROA not before:           Mon 14 Jul 2025 14:50:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133907
IP address blocks:        110.170.133.0/24 maxlen: 24
                          210.86.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14787 (0x39c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751932-36c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:d7:e3:aa:fd:bf:48:e3:a5:90:1a:1b:2e:
                    30:0c:65:82:25:80:54:f8:a3:94:68:b8:91:b0:53:
                    96:2f:4b:04:39:79:05:a5:3f:5e:32:7a:14:6b:00:
                    59:2e:19:4c:a9:fc:3d:69:05:24:b8:08:5c:57:fb:
                    e6:33:97:04:90:a7:7e:d5:56:6e:d7:79:8e:81:cb:
                    8b:e6:9a:a3:dc:32:42:a5:c3:12:13:1f:20:ff:2b:
                    35:df:bf:0a:5e:8b:ff:65:99:64:1e:f1:c0:4f:9d:
                    47:70:f8:08:16:9b:1d:44:80:d5:14:bf:91:b5:d1:
                    cc:f6:e7:c9:d2:78:3e:3d:92:8d:ab:fc:2e:78:85:
                    cf:31:bd:58:74:f1:03:19:8a:d6:32:3e:0a:9b:0c:
                    23:bf:89:81:8c:9c:2c:81:e8:01:53:e7:1d:8f:6a:
                    c3:eb:c8:5b:dc:db:1c:9a:c5:20:cb:e5:9f:f0:eb:
                    f5:9b:fe:1b:2b:0e:82:f1:ac:26:62:88:4a:9c:e5:
                    db:92:6f:da:1d:1d:01:1d:2b:17:8e:cc:03:c2:dc:
                    29:6d:a1:82:b4:91:c4:34:20:70:44:70:b6:93:34:
                    22:2a:4c:75:fc:f0:9d:85:82:58:6a:d7:d4:11:75:
                    be:1a:0e:96:06:6d:4c:37:36:8f:b6:a7:88:59:6a:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:E3:4F:85:A3:49:CF:21:89:64:A0:A0:D7:F7:4F:E7:58:8B:38
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/367596CC1E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.133.0/24
                  210.86.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:be:b5:36:63:ee:0a:fc:1f:b4:0f:0c:8b:73:ef:cb:45:2b:
         7b:81:0f:bf:85:b3:6d:73:38:ce:76:dd:3c:19:8b:5b:7f:20:
         0d:b0:0b:10:8e:14:9e:eb:bc:94:96:39:42:82:61:04:57:9b:
         87:8e:a4:1c:13:39:8d:36:1e:a2:e2:de:77:8c:ae:63:a1:bc:
         e3:60:65:82:cd:e9:44:75:73:ce:7e:3d:ff:45:15:52:1b:2f:
         3e:f7:79:40:50:67:37:d6:e5:60:c5:82:b9:69:68:dd:e1:e8:
         99:86:02:23:96:90:33:c7:65:a6:fe:52:c6:cc:b4:43:4d:9a:
         4b:48:f4:f4:4a:4e:ca:c8:9f:3c:1e:df:39:be:c4:60:28:2b:
         be:bd:73:d8:1d:4e:88:7a:17:6f:ca:0f:6d:0d:72:a8:c5:db:
         f5:22:f2:4b:ed:6b:e8:3e:af:35:0d:04:f9:6b:cd:e7:1c:ba:
         dd:b7:e6:96:39:1c:41:69:2c:01:d2:c7:ef:84:61:d1:3e:03:
         75:8f:86:ec:f7:2c:4c:ad:ac:85:29:af:f6:b6:32:9b:47:32:
         dd:85:da:8d:b9:54:32:1c:0d:15:35:42:61:27:6c:47:4b:15:
         44:9c:7b:3d:1c:78:22:d5:91:41:b1:c7:ca:58:64:3d:83:62:
         6f:b8:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:43:09 2025 by rpki-client