Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/367596CC1E0111E9A590C837C4F9AE02.roa
File:                     367596CC1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          dVWSFTfg9+oK8Ys3i+avFPacdzCUXfftvxQ13HCRBxQ=
Subject key identifier:   DA:AE:13:40:D9:4A:F6:24:A2:9A:E6:0F:B3:2E:F9:90:F8:5C:9F:84
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BE2
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/367596CC1E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:10:55 +0000
ROA not before:           Mon 06 Jul 2026 15:10:55 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133907
IP address blocks:        110.170.133.0/24 maxlen: 24
                          210.86.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15330 (0x3be2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:10:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc57f-0bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:d7:3b:7c:0e:b1:cc:65:eb:23:86:60:a3:
                    b4:bd:67:90:2b:b8:b6:1d:1d:24:54:91:ab:d4:46:
                    da:85:f8:aa:7e:97:18:43:6a:aa:fe:de:01:6f:0a:
                    4f:4f:6a:97:e0:77:89:ae:f3:c0:a0:8a:d9:00:e6:
                    fb:b0:cb:d4:dd:9c:9a:5b:28:51:c3:47:84:0f:b3:
                    20:96:a5:af:65:b6:60:3f:fe:cf:c0:16:f7:f8:1c:
                    c3:d1:a1:1b:82:a9:25:e0:1d:20:c6:12:1e:6d:72:
                    8e:21:50:cf:c8:5c:7a:c8:b0:37:ed:c2:0d:fc:7f:
                    46:5c:40:2f:c5:d5:76:dc:f6:f6:3c:0a:ec:68:75:
                    ef:3e:2c:69:3f:b9:00:4e:f9:93:95:29:22:18:93:
                    e0:63:5d:77:ca:26:bf:1f:34:a1:2d:5a:f1:77:4f:
                    47:80:89:c9:f1:32:5f:db:94:e9:2e:74:1e:9a:25:
                    d1:cf:1b:5c:21:ca:60:c2:ee:ee:d3:1b:36:f7:a1:
                    45:26:3d:d6:17:ea:ed:f9:1b:57:7d:3c:bc:43:6a:
                    9f:d1:f0:41:e8:b7:83:42:50:48:1c:dd:a5:65:5f:
                    02:5d:09:9d:a8:a9:51:38:f5:53:8a:de:77:71:2a:
                    a8:1e:80:b3:23:9b:0f:e7:a1:98:c4:b3:fa:e9:ab:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AE:13:40:D9:4A:F6:24:A2:9A:E6:0F:B3:2E:F9:90:F8:5C:9F:84
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/367596CC1E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.133.0/24
                  210.86.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ea:c3:6a:c5:09:34:18:7a:9c:88:98:15:b2:5f:65:e0:83:
         8f:f7:eb:1c:a4:b9:6c:55:b0:c7:ee:80:36:a7:23:8d:54:e4:
         31:04:64:c2:84:12:5c:2c:47:05:fd:58:d9:ea:1b:b1:ca:4f:
         cd:cf:8f:64:d1:e0:c7:68:92:50:bd:60:19:44:c3:8b:bc:e6:
         2d:fd:96:9c:19:d6:39:64:43:85:f9:22:ee:a5:22:dc:60:9d:
         1a:6a:b2:d9:42:06:08:f8:19:b6:25:c5:59:04:77:82:ee:d4:
         b6:f7:95:14:b9:06:f6:d0:df:1e:88:6c:ff:69:28:5b:a2:e5:
         4c:4e:25:fa:c0:8c:ca:44:c0:ca:08:4f:46:21:2b:43:0c:bb:
         b7:61:6a:6d:75:93:04:95:5e:c8:4c:9a:d4:e2:e2:4d:8d:cc:
         fc:20:2a:70:fa:72:37:d2:77:e5:fc:d2:2c:73:1f:65:14:40:
         75:76:4a:35:1a:6c:f9:7f:ef:bb:ac:6a:f8:49:22:1e:c9:05:
         1c:70:59:ef:25:db:45:2a:f4:9d:d5:fa:f1:67:80:d4:26:28:
         ce:f1:7b:46:f9:84:70:70:61:b7:88:94:5f:10:de:ec:05:2f:
         9e:95:ce:22:1a:bd:b3:93:6b:74:71:2d:44:02:5d:de:1d:20:
         52:a4:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:41 2026 by rpki-client