Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A60C50C41E0211E9862ECE3FC4F9AE02.roa
File:                     A60C50C41E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          C+jVEzjvtoRdffB1ChKXTOZCco9zU2HWhLUIwKUOovA=
Subject key identifier:   39:A5:B2:C5:F9:86:E0:5E:F7:A3:9E:28:47:09:70:07:E4:17:B7:F8
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BE7
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A60C50C41E0211E9862ECE3FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:05 +0000
ROA not before:           Mon 06 Jul 2026 15:11:05 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134817
IP address blocks:        110.170.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15335 (0x3be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:05 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc589-d1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:d1:29:4e:21:4a:a1:f7:b8:10:cb:29:0b:
                    f3:8d:42:f6:d9:0d:4e:21:c2:49:76:11:44:65:9a:
                    32:e6:f1:5c:c0:fb:15:0b:bb:dc:70:9a:95:92:1e:
                    bd:fb:c8:c9:d0:29:8e:72:b2:7a:c4:7d:f6:1b:07:
                    b6:9f:d3:22:f0:90:35:a4:21:ff:60:eb:ed:99:02:
                    61:40:14:5d:52:d1:29:07:51:19:38:9c:fd:e9:4b:
                    1d:f6:a4:9a:ed:4a:20:8e:2c:89:62:d2:ce:2a:a1:
                    26:20:96:00:8c:b5:81:cc:ae:c7:15:e6:9d:6d:21:
                    0a:3a:ce:72:70:39:12:17:15:05:1a:2d:f1:ae:a5:
                    24:fc:88:55:61:0b:e3:b9:d2:1a:23:55:4b:ed:77:
                    e9:32:25:b7:08:b3:b3:12:f8:75:4d:63:ff:c7:e9:
                    f2:e6:0b:a0:1e:27:35:0b:70:42:61:95:2d:02:d5:
                    4f:05:45:5e:0c:78:52:61:c0:b8:a6:21:8a:6b:54:
                    9a:d9:5b:23:33:b9:cb:65:80:02:c1:a6:2a:88:85:
                    b8:4b:ed:54:91:8d:71:c4:cb:00:d4:51:dd:0c:a8:
                    97:eb:05:d2:3f:a7:4d:4b:39:85:07:5e:8f:b4:95:
                    36:1e:a2:7d:1c:57:4d:db:5e:0e:fb:46:23:65:6d:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A5:B2:C5:F9:86:E0:5E:F7:A3:9E:28:47:09:70:07:E4:17:B7:F8
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A60C50C41E0211E9862ECE3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:0e:14:d4:69:f5:5c:08:5a:0d:d4:5c:44:ca:c5:5a:04:a6:
         2e:19:e2:05:ae:e9:8d:0c:97:42:fc:29:3b:9c:77:50:a5:4a:
         21:f9:c8:4b:93:b6:2c:f0:61:0a:84:f1:cc:38:87:ec:5f:b1:
         5d:7a:36:fe:78:09:fc:43:55:7d:69:8d:a3:bf:b9:0e:88:83:
         d5:d6:7f:f8:b4:3f:82:5b:5b:21:e7:20:9f:0c:92:6a:38:e6:
         27:01:86:9b:26:c8:36:d7:2c:8b:26:7d:3d:cf:28:c1:b6:9d:
         d5:19:a0:f0:52:49:c1:38:27:e8:c3:be:b5:4e:96:ba:93:53:
         f6:a9:11:c0:56:40:5a:1d:d4:39:a6:6f:6c:3f:34:53:84:82:
         d3:c6:a4:56:6d:03:07:bc:47:fb:04:94:85:1a:e3:c2:1d:33:
         9b:6f:99:e1:79:96:ae:49:40:52:60:09:4b:35:c2:0a:e7:25:
         5d:8d:6c:8b:62:f9:cd:29:42:9f:c9:86:79:0a:91:a4:35:0f:
         ed:88:53:c7:47:dc:64:6c:de:e7:a1:9e:65:0a:1c:96:a8:78:
         59:6f:10:63:0f:e6:c2:0a:e0:9c:b0:76:eb:05:4b:6f:0e:e7:
         70:b0:83:55:d5:8f:9e:e2:7c:be:84:79:97:7e:e3:bf:cf:7e:
         b1:60:83:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:15:03 2026 by rpki-client