Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1FFA2C41E0211E9862ECE3FC4F9AE02.roa
File:                     A1FFA2C41E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          QZffGJRjevytt9kdg4wTCHixS6S+UfpDkAF6FEP/E6A=
Subject key identifier:   CE:F5:4E:16:16:AE:4A:07:E4:EB:87:FF:D1:C7:E5:16:D6:67:23:7B
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BE0
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1FFA2C41E0211E9862ECE3FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:10:51 +0000
ROA not before:           Mon 06 Jul 2026 15:10:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133761
IP address blocks:        110.170.148.0/24 maxlen: 24
                          2001:fb0:1071::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15328 (0x3be0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:10:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc57b-47db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:07:74:ba:f5:e0:fc:c7:12:c7:76:59:67:
                    8f:50:d7:26:63:3a:65:02:54:6b:e0:9e:e1:d9:b4:
                    79:3f:e3:ad:91:aa:81:e8:d7:c8:39:db:4b:f4:26:
                    7d:ba:ce:b1:43:dc:be:a8:0e:57:08:8b:d6:55:79:
                    b0:dc:f8:a5:77:de:d2:62:51:b7:83:a8:65:95:07:
                    17:6e:e8:db:66:60:4d:84:b1:98:90:af:2e:0e:03:
                    6f:c7:c5:02:ba:43:b4:ca:82:11:ff:55:8e:b7:05:
                    bd:a3:db:e2:59:dc:a8:89:17:8d:af:25:ac:57:69:
                    5b:d6:14:cd:e7:bc:d4:c2:cc:e5:2d:9e:f3:06:b0:
                    ca:54:1e:93:51:48:5d:c4:5e:22:b9:c9:12:3b:22:
                    68:83:fb:f6:14:d9:ca:52:ef:30:c4:3a:9c:34:d4:
                    a4:b5:d0:85:64:9f:4e:9c:04:98:8a:03:a4:03:4d:
                    bc:46:d0:d1:83:98:b2:3a:35:e6:54:5c:09:c0:06:
                    17:91:f4:ca:fc:9b:f9:6b:66:5d:6a:d1:3e:7e:b9:
                    1c:1d:d6:8c:fe:9b:09:22:d7:db:77:bb:a8:40:29:
                    13:bb:a8:4b:ac:d7:34:4a:87:c3:c5:8a:e0:b1:50:
                    2d:ff:06:0b:6b:10:60:87:26:82:e7:00:03:29:45:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F5:4E:16:16:AE:4A:07:E4:EB:87:FF:D1:C7:E5:16:D6:67:23:7B
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1FFA2C41E0211E9862ECE3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.148.0/24
                IPv6:
                  2001:fb0:1071::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:85:ff:2b:97:39:e2:08:8a:3c:b9:ba:73:65:a7:c3:b9:
         7f:2a:dc:20:2e:0b:5e:03:fc:f6:0e:16:bf:15:24:aa:48:f3:
         1c:40:a0:03:9a:5a:32:85:01:6f:f8:10:3b:67:15:d3:1f:c7:
         92:d4:94:94:71:bb:51:02:22:78:ff:d7:fa:56:d7:dd:4f:d6:
         d4:4d:43:78:67:59:29:1e:cb:d9:c3:fb:d8:3f:77:b2:6f:92:
         b4:7d:07:89:00:28:d7:f6:f6:e9:01:88:7d:bd:1f:62:c1:0e:
         b6:63:6a:51:4f:ef:ab:37:44:06:23:bb:84:51:8b:24:65:83:
         63:4f:fd:fb:83:79:22:f6:e7:18:e9:65:cc:dc:79:3f:e2:6c:
         b3:77:9c:ef:c0:f5:1f:92:47:5d:6f:da:4c:8c:f9:03:a5:48:
         53:45:77:8a:6d:da:2b:d9:a8:a6:23:e5:aa:4f:14:94:08:3e:
         12:e7:e7:67:e7:2a:bc:88:a0:0a:84:fa:66:c6:d3:3f:bc:37:
         d3:2d:6e:c5:52:a3:e8:ee:d6:19:17:cc:a8:0f:b7:a0:3a:be:
         09:21:fb:ce:cc:d3:1c:30:ac:04:59:a9:16:93:27:bc:e0:01:
         20:7c:be:61:51:c1:32:1f:e1:85:95:24:fc:5c:b6:c0:a9:4b:
         aa:45:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:04 2026 by rpki-client