Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
File:                     9D7043441E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          VET/tXlOjg26lNGNbOCBuKFgIr/V/trZ694zfl0I9eU=
Subject key identifier:   36:95:4B:60:F4:88:8B:9D:A4:C6:EC:22:D3:9F:20:61:82:A8:FB:D2
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39BA
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:50:18 +0000
ROA not before:           Mon 14 Jul 2025 14:50:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132605
IP address blocks:        110.170.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14778 (0x39ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6875192a-0cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:7f:04:b0:14:5e:91:86:b4:3f:04:ac:d5:
                    2e:e6:0e:be:14:37:06:d1:bb:23:04:f9:ca:06:3f:
                    ed:0b:37:ce:00:5d:f1:61:42:2b:09:f4:3c:87:68:
                    29:e5:38:d3:4e:6b:28:fb:91:c1:2d:82:f5:aa:3c:
                    7c:e2:1a:dd:95:64:ea:47:a5:7d:11:bc:45:4a:b2:
                    d6:d6:74:29:b5:9b:54:9d:dc:0e:17:7c:16:5e:a4:
                    9d:78:a3:52:5b:86:b9:4b:95:5c:eb:8f:ac:8c:fb:
                    06:25:18:21:75:96:08:52:aa:b4:b4:48:b7:4a:88:
                    fc:34:4f:c5:85:3a:cd:7e:d7:78:70:b3:f5:64:23:
                    c5:61:4c:da:a8:9c:9a:21:dd:9c:99:07:35:ac:a2:
                    b7:f6:b3:96:ae:ec:75:22:36:fe:42:42:b9:ef:b8:
                    3e:f2:17:47:10:87:a1:a0:38:e2:21:5a:00:b3:59:
                    22:a5:01:1d:46:05:8b:d6:02:e9:52:d6:6a:7c:4c:
                    1c:c1:ce:e6:dc:4a:f7:83:5d:bf:a6:6a:de:13:b3:
                    f9:ba:ab:76:eb:cd:81:5e:02:a7:bb:d7:ee:3e:f4:
                    fc:59:48:64:64:41:4f:74:2b:7c:5c:23:d2:f3:43:
                    ab:16:aa:7d:26:4f:52:07:cc:c4:5c:19:db:3a:ca:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:95:4B:60:F4:88:8B:9D:A4:C6:EC:22:D3:9F:20:61:82:A8:FB:D2
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9D7043441E0211E9862ECE3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:ce:b1:19:84:91:05:2e:99:2c:da:79:91:f4:0e:6b:09:
         9d:ca:cd:90:3d:38:96:36:6f:92:c4:fa:fb:86:b6:8b:e2:c0:
         aa:a8:38:4d:a8:a3:76:d6:d8:cd:80:e7:61:50:c2:50:0b:83:
         a1:bf:15:af:3c:89:4b:22:4a:87:f3:ad:b0:1e:35:de:bf:30:
         d3:be:97:46:76:de:26:1b:df:7e:aa:9d:eb:a3:89:61:87:1b:
         a7:b4:b2:b2:2b:44:6c:cf:5c:f5:82:bd:c9:02:2d:ed:cb:08:
         1a:28:38:a4:5d:86:18:bd:00:48:1f:99:70:b9:ee:92:d1:f6:
         99:b6:f3:bc:a0:9d:83:b4:83:8d:f9:c0:32:36:15:2c:90:4b:
         f6:ba:31:1a:53:8a:59:84:2f:50:a2:2c:ac:b0:a5:84:b3:a6:
         0c:94:db:df:19:3c:02:02:31:4d:79:24:54:c8:b4:2f:9c:2b:
         ae:34:50:13:16:06:19:18:94:83:61:0c:0d:01:8a:dd:e2:91:
         f1:af:80:e8:aa:19:82:ea:95:a8:62:d9:25:de:92:b5:cf:0b:
         c8:68:bd:80:7f:b6:10:cb:ba:54:68:73:b7:e8:1a:f2:2f:f1:
         04:23:41:b8:7e:ac:0f:10:6e:56:fe:7a:b5:74:87:d5:17:57:
         20:49:e3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:31:46 2025 by rpki-client