Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa
File:                     3934EF5C1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          RE9VuUg4gRzVANShj8o52PanrbCHvv274nt3ZSdIwJY=
Subject key identifier:   C1:91:81:0E:CF:DC:0F:6B:3A:10:9D:C6:12:15:36:F6:F7:D8:9D:D3
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BEA
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:11 +0000
ROA not before:           Mon 06 Jul 2026 15:11:11 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136457
IP address blocks:        210.86.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15338 (0x3bea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:11 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc58f-c1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:eb:f4:bc:4d:a9:76:94:04:68:f2:d5:55:
                    11:e0:ca:5a:15:0a:db:c7:28:ee:e8:8d:ba:fb:6e:
                    a3:b3:8e:b7:fa:c1:22:0d:00:ac:05:1f:fd:56:24:
                    c9:59:04:4e:44:63:d6:46:47:90:fb:a5:c8:36:00:
                    ca:f7:05:6c:d0:94:22:23:42:bf:4d:01:4d:8e:9c:
                    1c:92:ff:b9:4e:ff:16:9a:33:e9:b1:9a:61:ad:34:
                    24:50:66:7a:c7:7f:09:76:84:52:fe:cd:15:05:a8:
                    af:0f:8f:29:f7:6f:74:ac:b6:d3:86:a3:15:18:49:
                    b7:97:7e:df:34:12:79:c1:0f:00:91:f4:36:ed:63:
                    98:8e:9c:7c:b2:09:73:9a:2e:59:a2:aa:40:9c:70:
                    c8:24:81:95:f8:69:90:3e:a1:dc:12:02:1d:74:44:
                    49:95:56:6a:bc:fe:dc:da:89:e4:92:e6:92:c9:6b:
                    ea:d2:7a:20:8d:dd:bd:b0:39:d9:00:6b:e3:17:de:
                    cb:11:53:08:aa:81:79:b1:a7:10:39:3c:89:9c:78:
                    43:eb:10:31:e1:38:0c:cf:bb:b2:ea:84:f1:70:a9:
                    cd:e0:45:3b:1b:75:b2:5f:5c:eb:65:9b:98:3b:9e:
                    37:d5:2a:6a:aa:98:d8:ce:02:2f:c9:63:98:37:f8:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:91:81:0E:CF:DC:0F:6B:3A:10:9D:C6:12:15:36:F6:F7:D8:9D:D3
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:ca:ba:81:1a:59:60:e8:d0:ca:eb:5b:f2:d3:cd:01:99:
         58:b1:7c:fd:f5:bd:7e:a2:27:75:26:37:0e:13:84:b9:0b:55:
         33:28:f0:53:f1:c4:1b:91:66:57:84:1b:1d:29:e7:11:bc:63:
         29:8f:57:38:fd:11:8d:12:21:2c:7b:fc:02:f9:7c:03:51:35:
         fd:6e:0f:f4:86:f0:6f:6a:e2:cb:ac:cf:b5:80:5b:60:1a:dc:
         ac:78:e2:c9:ee:a6:da:84:cb:c1:a6:63:c6:d3:eb:c0:5a:5d:
         a9:f9:b6:7e:94:5c:47:8a:91:5b:0d:69:ae:f6:3f:48:d1:28:
         72:fd:16:37:03:9c:10:e2:fc:5e:f9:4a:5b:62:fe:b1:72:4b:
         96:f7:e5:4b:20:15:ba:75:72:1a:fd:93:f9:c3:78:4d:26:68:
         7e:a9:13:d9:57:7c:2b:d9:35:19:7d:63:c1:c9:70:51:da:0b:
         39:83:17:ae:df:6b:fe:f9:a4:ab:ba:f0:85:6e:03:94:5b:e4:
         39:c5:ae:fd:0a:c8:74:3b:db:26:95:34:ea:27:17:ac:ef:36:
         2b:0d:1e:68:d0:16:c6:ef:11:3b:9a:54:9e:10:cd:aa:34:e7:
         e8:29:a2:76:b4:9b:26:64:2c:cf:3f:6b:99:b1:f9:35:54:36:
         c8:2c:60:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:39 2026 by rpki-client