Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa
File:                     3898AE761E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          y7Kw3bmuPB9aP9yRS9DvZpJXzEQzp7X1bvpD0kXX+zM=
Subject key identifier:   01:DE:70:E6:8F:AC:E4:A6:03:1F:56:CF:BC:0A:83:32:56:5A:0C:EA
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BE9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:09 +0000
ROA not before:           Mon 06 Jul 2026 15:11:09 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136182
IP address blocks:        210.86.205.0/24 maxlen: 24
                          210.86.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15337 (0x3be9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:09 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc58d-043e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:fc:29:14:b2:5e:7f:69:16:74:3d:43:04:
                    d4:4e:a4:03:bc:4a:86:0a:73:eb:82:83:dd:f1:64:
                    0f:c0:42:a4:3c:94:54:20:1c:cd:01:28:70:b3:c9:
                    43:a6:a4:28:61:55:a0:a4:15:1c:6d:15:aa:3e:6a:
                    7d:63:dd:8a:24:1a:0f:92:6e:01:f7:7b:8c:6d:fa:
                    0a:7a:46:16:be:b9:bd:95:69:be:71:f1:db:32:91:
                    0f:5f:de:c9:f0:00:4b:8b:00:a5:16:25:8b:14:3e:
                    09:ef:34:c2:f0:f0:b2:56:0f:9b:01:b8:53:e3:d4:
                    f3:c8:21:4f:61:0e:1b:c9:66:4e:24:fc:ca:6a:22:
                    69:66:93:85:d6:9a:dd:c5:d9:e7:28:9f:d8:ed:85:
                    16:a1:cb:f5:aa:a3:01:1f:ab:07:5a:d7:43:59:28:
                    86:bf:06:56:75:ea:01:1e:4f:10:94:c9:e2:78:98:
                    c1:26:cc:2d:5e:a8:d2:e8:55:b2:a3:50:8d:60:52:
                    ea:5e:11:38:c7:14:0c:80:69:48:83:79:1b:a4:9c:
                    80:90:25:0e:66:1b:aa:f0:55:c4:6c:24:fb:5a:0c:
                    a6:a5:34:2c:f2:bc:69:8b:9b:d2:72:9b:19:4b:5c:
                    f1:f8:7d:16:cf:d7:bc:5d:9c:01:6e:dc:f8:0a:97:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:70:E6:8F:AC:E4:A6:03:1F:56:CF:BC:0A:83:32:56:5A:0C:EA
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.205.0/24
                  210.86.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:81:e1:79:1f:e8:58:e5:a0:c6:a5:56:c7:35:e6:78:2e:68:
         3c:85:cc:5a:54:a7:49:a5:0c:90:5a:c7:ae:e2:54:a6:5c:ff:
         f6:43:7e:02:6e:63:b9:8f:59:a9:d8:a8:eb:78:42:1f:7b:d0:
         d1:cf:08:3b:d8:7b:27:ba:74:52:58:d4:ad:4b:13:1c:c3:8f:
         05:ba:26:8c:03:51:ad:8e:7a:5d:36:0f:a0:0a:e4:28:2b:bd:
         c3:0c:41:60:35:2a:94:38:c7:ba:41:dd:7c:18:87:4c:0e:35:
         91:9f:90:2d:88:b9:21:50:94:58:43:c2:f0:6d:40:f8:f0:63:
         d7:c2:61:dc:fc:0e:f8:9a:28:53:e7:78:01:65:43:d1:b8:ba:
         9c:14:3f:48:6c:13:41:70:35:f3:f6:77:62:27:4e:08:1e:df:
         be:88:e8:25:47:ce:4e:06:e3:78:01:ef:f1:84:0b:0d:dc:25:
         b2:28:d2:ae:4b:d5:cd:9d:45:4a:2f:28:a6:0f:75:10:55:9a:
         6c:bb:6e:41:62:90:68:da:14:95:01:08:db:5b:97:c2:af:93:
         d1:1c:47:19:24:0d:fd:88:fe:b8:39:72:5f:d9:f6:7d:95:87:
         4e:92:d7:63:a3:3e:7e:f7:56:8f:e9:09:d9:23:e9:dd:8e:67:
         32:d1:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:51 2026 by rpki-client