Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8DE3FDEECF3E11EC88326E70C4F9AE02.roa
File:                     8DE3FDEECF3E11EC88326E70C4F9AE02.roa (raw, json)
Hash identifier:          6hgXDI5TF2ValtyGB03yT4B+BeE0pCRMcyRa7X6ehG4=
Subject key identifier:   BC:CE:A5:26:C8:53:CB:76:3E:C9:E7:3E:F4:6F:31:5B:1B:21:28:4F
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BEF
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8DE3FDEECF3E11EC88326E70C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:21 +0000
ROA not before:           Mon 06 Jul 2026 15:11:21 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138915
IP address blocks:        119.46.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15343 (0x3bef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:21 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc598-5829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:2b:33:51:14:98:0e:a2:8a:cd:e5:4a:49:
                    43:0c:76:7d:7c:14:ae:8a:ae:ca:8c:8f:fe:ab:21:
                    8a:9c:cb:84:5d:7b:00:3a:f1:c5:6f:89:4e:0a:cd:
                    73:d8:a0:74:41:a6:82:e3:28:01:14:db:45:4a:6c:
                    16:99:e5:2d:ee:d3:30:20:e4:a3:8a:f9:48:d1:0e:
                    7d:4d:96:b0:8c:34:e4:6e:a1:4b:01:9a:1c:3b:57:
                    da:b9:11:21:4c:fc:20:41:af:2c:88:4f:8a:02:b0:
                    34:0c:5a:4f:40:86:4d:85:29:ca:29:de:78:d4:43:
                    e8:7b:0e:cc:68:42:0b:2c:87:f4:bd:de:26:00:0c:
                    88:a0:f9:b0:b0:7f:e3:5a:6a:9e:f7:9a:d1:14:51:
                    6f:b7:ee:31:21:0c:4a:15:fc:a8:53:70:c1:18:80:
                    31:e1:07:d5:fe:71:41:b1:28:a6:e4:1f:8e:12:03:
                    c4:46:ca:9a:8a:5d:1f:2b:2e:dc:70:9c:b8:ac:07:
                    68:1c:2f:da:42:41:c9:0b:d5:ae:91:19:45:ab:21:
                    f7:0b:28:c9:35:29:17:e8:82:b7:57:a6:e7:65:84:
                    f4:18:f1:59:a9:1d:99:39:0c:c4:1e:e2:e9:87:a6:
                    d9:ec:33:d5:63:42:32:ce:19:d2:c5:cf:6f:3f:5a:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CE:A5:26:C8:53:CB:76:3E:C9:E7:3E:F4:6F:31:5B:1B:21:28:4F
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8DE3FDEECF3E11EC88326E70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ee:ce:52:2e:8e:19:81:b3:c8:ae:e4:ad:6d:d5:08:5a:d0:
         99:ff:a1:43:72:ea:1d:7d:b6:27:0d:e6:4e:09:1e:0f:bd:58:
         cc:a1:42:3c:77:1e:d0:14:0c:1e:72:81:47:ff:03:a1:67:9a:
         c8:a3:93:34:92:10:4e:5c:0c:b4:11:82:26:36:0c:c0:9b:bf:
         03:d3:cf:6d:65:1e:fc:ed:6c:8b:22:1c:3b:d4:cf:9a:82:4a:
         9a:14:86:32:2f:3c:b9:09:93:b8:bd:8b:d0:41:69:dd:b9:5d:
         91:18:cb:bf:c1:36:06:57:e5:b9:d6:08:0f:a5:a7:b3:fa:ed:
         49:6c:f2:0d:b0:f5:0a:5b:a8:91:9a:ea:71:03:59:9c:6a:26:
         73:a0:8e:5a:9a:c8:00:5b:96:ea:a7:c6:48:0f:bd:b8:31:df:
         b3:7a:4f:2a:8e:fb:0d:54:23:94:b9:37:6f:26:d1:45:b9:bc:
         4b:65:f2:1a:8b:ef:0e:ce:58:05:ab:3e:99:c6:56:80:26:a6:
         4f:43:1f:ed:1d:64:36:85:05:f1:ee:99:a6:41:cd:a1:0b:45:
         92:89:8d:d5:cb:6a:41:94:74:77:0c:39:42:0b:4a:bd:db:26:
         e2:b8:c3:78:06:be:0e:0a:77:b1:06:54:f0:77:26:84:78:de:
         fd:ad:7c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:37:44 2026 by rpki-client