Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
File:                     9BC27CB01E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          Ewonuhu5Y3Dhq5vNkRCaYwUi8dncmQ79J4qz/hj2/GQ=
Subject key identifier:   F3:C1:71:BA:F8:AA:BD:35:AC:C3:48:9D:53:2E:C1:3E:A2:B0:42:1D
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BD6
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:10:30 +0000
ROA not before:           Mon 06 Jul 2026 15:10:30 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132063
IP address blocks:        171.102.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15318 (0x3bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:10:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc566-bffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:ce:e3:6e:05:97:e2:cd:69:9f:c9:d8:2a:
                    2a:8e:ae:12:8a:3d:52:ba:d3:ed:bf:1b:a3:28:d3:
                    48:af:ac:6f:97:ec:48:4f:94:06:3b:a3:cb:d3:67:
                    17:11:84:e6:72:9e:4c:f0:37:20:5a:9a:49:ab:14:
                    be:a2:b8:4b:ff:9c:ee:52:43:7c:d0:26:60:f7:34:
                    00:87:6c:97:14:43:6e:6b:07:22:b8:dd:d0:c8:ec:
                    a5:4e:21:ab:0f:1f:b1:99:76:31:84:f3:37:9d:79:
                    9c:a0:09:2a:2c:f2:60:8a:ae:ea:8e:b1:c8:f2:6f:
                    e3:23:3a:22:62:52:ab:82:ae:8c:18:c3:ea:1e:4b:
                    49:6e:f4:0e:a0:b7:3d:4b:99:35:31:e5:99:6b:9c:
                    7b:25:28:db:be:4d:9a:80:37:23:67:12:74:6b:b2:
                    d2:4c:0f:17:eb:2d:62:fc:97:41:51:24:80:fa:72:
                    49:f9:39:fe:e2:99:92:3e:a6:69:91:d5:ad:68:c0:
                    b8:9d:94:55:57:ea:68:8a:34:8f:f8:3c:b7:cf:df:
                    aa:75:42:53:a1:ee:b9:6c:89:bf:d1:94:15:a0:80:
                    ca:76:e3:91:0a:be:26:a6:90:e8:aa:54:4e:7b:67:
                    61:71:d0:58:bd:a5:cc:00:a8:4d:8b:e8:55:18:44:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C1:71:BA:F8:AA:BD:35:AC:C3:48:9D:53:2E:C1:3E:A2:B0:42:1D
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9BC27CB01E0211E9862ECE3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.102.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:77:c3:f1:95:fd:f4:64:b1:ba:db:b1:f3:19:d7:95:3d:1b:
         03:75:da:82:67:d4:aa:b0:67:16:ac:79:2a:79:0a:eb:db:c1:
         1e:6f:02:8f:eb:e6:20:76:76:42:f2:5a:68:0c:45:42:22:6f:
         92:74:e1:43:f5:ac:53:17:f1:92:12:fe:ac:77:0d:52:6a:09:
         01:64:c0:91:85:c6:00:05:cc:09:72:8d:5b:17:01:76:03:2b:
         0a:f5:f9:64:7f:81:bb:70:3e:ec:6a:b6:72:c3:5f:0e:ea:27:
         1b:6b:08:cb:d3:71:71:22:25:b1:8c:5c:5b:e1:1b:e2:f2:8d:
         22:77:02:b5:13:22:f6:50:f9:78:ae:1b:52:23:91:37:38:f9:
         c7:25:92:f7:44:32:61:50:5e:2d:8d:59:78:65:a1:95:03:24:
         94:46:49:6e:fd:51:52:ec:89:5d:a3:1e:63:78:89:83:93:9f:
         fb:6b:4c:0f:88:ce:89:a6:30:ef:d8:4f:6c:74:7a:a0:a3:b5:
         6e:b2:fa:07:0b:88:cb:dd:85:83:f5:e8:a0:3f:40:d5:0b:49:
         83:f4:b6:d8:cf:2c:a6:b0:97:36:98:19:45:11:f5:46:ed:f7:
         6d:99:8b:c3:96:22:7d:70:d6:53:4a:a4:99:9c:91:ee:bc:1d:
         5c:67:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:15:15 2026 by rpki-client