Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/96515296B97811ECA54ADA6DC4F9AE02.roa
File:                     96515296B97811ECA54ADA6DC4F9AE02.roa (raw, json)
Hash identifier:          BD7voYNoo58ovFqObJg21riZjl3DC4j2mv3LNoTFljo=
Subject key identifier:   78:1A:36:83:C2:11:8B:D7:5D:9C:C6:E0:24:84:F9:5F:5C:F3:A0:BE
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BF4
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/96515296B97811ECA54ADA6DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:30 +0000
ROA not before:           Mon 06 Jul 2026 15:11:30 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149762
IP address blocks:        210.86.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15348 (0x3bf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5a2-9057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:89:a7:29:5b:da:b4:f3:7a:e7:99:b8:53:
                    b3:8d:6a:31:0d:41:9e:06:48:53:e1:a2:f8:c6:55:
                    ca:07:d2:5f:c1:dd:44:a0:43:b7:36:b1:af:ba:8d:
                    1b:cd:0e:f2:ba:84:88:a0:11:04:6c:c5:3f:32:ad:
                    e6:91:a9:b5:c3:90:0d:25:3a:e2:6e:6b:d0:2a:aa:
                    c3:1e:fa:28:cf:0f:75:0d:25:55:ac:8f:13:53:5a:
                    46:ee:71:0b:ef:b8:65:1f:c7:92:a5:d6:14:8e:75:
                    d2:72:76:4b:c5:1d:d9:a3:6b:36:8d:c0:3c:1a:bc:
                    54:f0:a9:01:57:e7:13:5e:b2:27:4e:26:17:10:9c:
                    dd:c5:44:6e:88:8a:eb:6f:6e:b0:29:9b:53:fd:13:
                    34:d2:54:f8:a5:22:84:a7:b7:b0:b5:bf:1c:49:b2:
                    5b:45:30:35:22:a8:7e:0b:e6:ea:da:d6:8d:99:cb:
                    44:5b:4a:45:dd:6c:77:35:ca:04:1d:4d:ac:ec:8f:
                    2a:2c:90:13:ee:9f:2a:80:41:40:9b:c2:43:4f:fb:
                    e4:b5:45:10:34:d0:42:c6:6d:02:13:24:b9:86:f2:
                    8f:25:4f:3c:e1:26:4e:80:cf:6f:d0:ef:1b:d8:4a:
                    ba:e1:23:9c:c7:67:09:00:92:c6:7b:d7:1d:41:38:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1A:36:83:C2:11:8B:D7:5D:9C:C6:E0:24:84:F9:5F:5C:F3:A0:BE
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/96515296B97811ECA54ADA6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:92:96:bb:2a:70:57:8e:7f:ee:29:a1:e1:a4:cb:55:95:60:
         ba:84:af:77:37:4a:fa:ba:7f:98:bf:43:c7:0e:cb:59:ac:a3:
         bb:90:02:a4:36:06:3c:21:5d:09:a8:41:19:58:14:77:f0:57:
         97:94:73:b6:a5:1f:24:aa:4e:19:ce:19:41:33:c1:92:1a:51:
         d5:ac:ae:2d:08:f5:35:14:01:ca:cb:27:5a:c1:cb:42:4a:5e:
         8c:8b:5d:e4:57:64:62:43:b4:99:a5:3a:2f:9b:70:4a:65:f7:
         4e:38:73:b8:c9:a9:2b:b1:00:00:18:21:ef:cf:9e:31:1f:a1:
         42:7d:5f:c2:6c:a6:f5:9b:13:3c:ba:99:e4:d1:89:d0:87:6f:
         80:77:c1:a1:96:0b:a8:ab:3b:05:ff:74:7d:76:37:a1:34:26:
         85:e5:21:36:2d:e8:a5:12:71:05:5b:28:7b:cc:56:06:54:64:
         4d:56:e7:89:bf:5b:1e:cf:2a:a2:78:6a:ed:11:5c:dc:5d:29:
         ce:6f:9e:57:5d:a7:6c:18:18:25:5e:4d:f6:4b:5e:81:2b:35:
         d8:97:6d:46:32:97:87:1d:6e:d8:7e:f7:ce:e6:25:02:b6:d0:
         42:af:74:7b:76:6e:89:00:1b:5d:19:28:4e:20:7a:be:c3:a5:
         ed:84:91:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:31 2026 by rpki-client