Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A7BEFDE01E0211E9862ECE3FC4F9AE02.roa
File:                     A7BEFDE01E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          89lMsT2nJXUi+/QdptCBHTzxXuLUosWW/U1q4JdFHdw=
Subject key identifier:   62:01:87:06:6D:B6:23:BC:3F:A6:EB:6C:8E:AE:A2:30:EF:E3:6D:CF
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BFD
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A7BEFDE01E0211E9862ECE3FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:47 +0000
ROA not before:           Mon 06 Jul 2026 15:11:47 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     17468
IP address blocks:        61.90.180.0/24 maxlen: 24
                          171.102.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15357 (0x3bfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:47 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5b3-5884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:fc:c5:e2:9d:0d:1c:e9:84:b8:7e:6f:0f:
                    47:e9:61:7f:99:f1:7c:f6:1d:f8:a9:be:f6:43:7b:
                    1e:a8:95:e5:38:93:0a:32:a9:7d:a7:00:6f:f0:43:
                    b4:a6:9b:e4:59:c1:6c:1a:89:fc:11:47:c9:2a:2e:
                    70:ab:7e:e7:be:e2:08:d8:68:35:38:ca:ab:1f:59:
                    2e:5b:2a:c2:d2:b5:6c:e8:07:c8:bd:24:54:5d:ff:
                    f2:e4:08:95:16:65:a7:9d:f9:5b:5c:dc:f1:92:c8:
                    7e:b1:59:9a:f0:98:f6:ba:a4:44:1f:bd:86:b6:b3:
                    15:66:ee:5d:e5:6e:82:36:78:fd:6c:95:41:72:c8:
                    15:1b:4d:48:2c:ee:98:5d:eb:8c:3f:ea:ef:3e:4f:
                    66:6f:68:16:1d:54:1a:88:9b:e7:3b:0e:36:5c:f3:
                    f6:b3:1f:1f:2c:e6:1a:03:ea:e0:0e:d1:7f:dc:1b:
                    c7:c9:a0:6f:0a:0c:0f:97:e9:51:e5:d0:d0:4f:bd:
                    02:18:1a:5c:6e:f8:11:e8:2c:cf:4d:ee:a0:5e:f0:
                    bd:0a:09:16:a7:4d:dd:54:f0:09:6d:5d:8f:a0:c6:
                    20:1f:4a:ba:c3:6b:67:62:e5:73:b7:ae:29:3d:31:
                    8a:b3:1d:69:da:de:ea:8b:97:f0:45:1a:84:81:f9:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:01:87:06:6D:B6:23:BC:3F:A6:EB:6C:8E:AE:A2:30:EF:E3:6D:CF
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A7BEFDE01E0211E9862ECE3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.90.180.0/24
                  171.102.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:70:dc:5c:5f:19:80:a4:75:84:98:da:d1:83:8c:94:26:f2:
         46:bd:33:9c:be:d0:67:db:95:b2:12:72:74:65:d6:71:da:e8:
         b2:09:6d:56:6b:66:c5:83:98:7f:a6:a9:71:3e:99:47:85:ce:
         45:cb:7d:43:c9:64:f7:3f:0f:83:7d:a8:68:87:48:54:7c:42:
         d1:ea:57:3c:7d:05:94:a2:0b:a6:11:a8:a4:00:a7:85:4b:ba:
         a2:c1:d7:bd:30:20:1e:03:06:33:04:2f:84:3e:a7:13:cf:1c:
         6c:d0:72:55:1f:31:7d:0e:e9:ea:87:e1:98:fd:1f:3d:9a:67:
         42:dd:4b:89:59:ab:8a:d9:b6:69:cc:df:f1:76:d5:a1:83:cc:
         7e:e9:d1:b1:ce:32:25:d4:dd:53:64:e6:45:ba:92:41:ce:3a:
         41:04:a2:de:59:a3:b7:64:26:73:8b:b4:f5:65:94:ad:c5:20:
         ad:16:a1:83:d3:80:c7:d5:33:2b:8f:56:2c:e3:39:27:f1:8c:
         77:a2:d8:42:b1:87:ec:85:91:22:4d:2e:d6:96:4b:f2:0b:02:
         2a:df:00:7d:cf:fe:e4:8a:57:9b:3b:06:68:72:78:77:4e:16:
         c5:f6:97:ff:f3:e8:95:2e:bf:41:a1:53:7a:81:2f:1d:2c:af:
         49:eb:3d:38
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICO/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMTQ3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzViMy01ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjVP8xeKdDRzphLh+bw9H6WF/mfF89h34qb72Q3seqJXlOJMKMql9pwBv8EO0
ppvkWcFsGon8EUfJKi5wq37nvuII2Gg1OMqrH1kuWyrC0rVs6AfIvSRUXf/y5AiV
FmWnnflbXNzxksh+sVma8Jj2uqREH72GtrMVZu5d5W6CNnj9bJVBcsgVG01ILO6Y
XeuMP+rvPk9mb2gWHVQaiJvnOw42XPP2sx8fLOYaA+rgDtF/3BvHyaBvCgwPl+lR
5dDQT70CGBpcbvgR6CzPTe6gXvC9CgkWp03dVPAJbV2PoMYgH0q6w2tnYuVzt64p
PTGKsx1p2t7qi5fwRRqEgfn4wwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGIBhwZt
tiO8P6brbI6uojDv423PMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvQTdCRUZERTAx
RTAyMTFFOTg2MkVDRTNGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAPVq0AwQAq2YgMA0GCSqGSIb3DQEBCwUAA4IBAQCAcNxcXxmApHWE
mNrRg4yUJvJGvTOcvtBn25WyEnJ0ZdZx2uiyCW1Wa2bFg5h/pqlxPplHhc5Fy31D
yWT3Pw+Dfahoh0hUfELR6lc8fQWUogumEaikAKeFS7qiwde9MCAeAwYzBC+EPqcT
zxxs0HJVHzF9Dunqh+GY/R89mmdC3UuJWauK2bZpzN/xdtWhg8x+6dGxzjIl1N1T
ZOZFupJBzjpBBKLeWaO3ZCZzi7T1ZZStxSCtFqGD04DH1TMrj1Ys4zkn8Yx3othC
sYfshZEiTS7WlkvyCwIq3wB9z/7kilebOwZocnh3ThbF9pf/8+iVLr9BoVN6gS8d
LK9J6z04
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:15 2026 by rpki-client