Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa
File:                     D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa (raw, json)
Hash identifier:          zuh/OgZKDU6nN+LfA0wv1roDLHfCxsrEsSTswUrZ4no=
Subject key identifier:   19:93:DA:BA:BD:81:69:6A:D6:CB:EC:A1:54:89:1C:40:0E:99:1E:12
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BF7
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:36 +0000
ROA not before:           Mon 06 Jul 2026 15:11:36 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151808
IP address blocks:        110.170.140.0/24 maxlen: 24
                          2001:fb0:10ba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15351 (0x3bf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:36 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5a8-593f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8c:62:49:d1:08:39:11:12:88:9f:5d:99:86:
                    5f:7f:27:46:f3:6d:63:43:ab:d2:c1:7d:2e:6b:dc:
                    30:95:d8:0a:2f:c9:4a:2c:21:65:50:8c:30:d5:06:
                    d4:0d:4a:ea:19:52:9c:81:bd:35:12:33:25:2f:98:
                    c8:1e:89:ea:4f:18:24:c7:01:e9:2b:87:fc:b4:a8:
                    63:a3:49:ee:40:0d:71:2e:0c:76:d0:7a:b2:75:80:
                    37:45:a8:b8:f0:ab:3c:4a:dd:a0:1f:ef:82:4f:d9:
                    b1:36:00:af:e7:f6:01:2f:bc:d3:65:e1:f3:2e:db:
                    ab:25:b3:cf:67:2f:98:28:0b:4f:e5:c2:54:37:1c:
                    20:41:00:39:53:0c:95:fa:0f:ef:20:96:fc:6e:00:
                    f3:1a:57:96:0b:c6:48:01:a3:f0:ac:60:6c:62:59:
                    ce:0c:e3:8e:ed:e6:e5:e6:d1:06:26:73:06:a3:57:
                    04:7e:6c:ce:37:d9:4b:25:2d:c6:b7:aa:98:96:98:
                    bf:0e:e1:2e:62:18:d8:5c:97:fb:87:2c:6c:69:24:
                    fd:25:36:32:55:c3:db:50:c1:91:62:ad:1a:66:29:
                    45:1c:d5:b0:8d:bb:4f:ca:a9:ad:45:a8:f5:97:bb:
                    d1:79:93:75:10:ed:98:cf:7f:21:28:92:73:c6:d6:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:93:DA:BA:BD:81:69:6A:D6:CB:EC:A1:54:89:1C:40:0E:99:1E:12
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.140.0/24
                IPv6:
                  2001:fb0:10ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:97:95:77:d2:bd:d4:0d:ea:bc:a8:07:2f:3a:9b:ed:f5:c1:
         f8:98:c6:1f:19:b1:76:a2:92:6d:e0:e6:5e:49:81:ab:04:31:
         10:3a:c2:76:17:50:84:db:f7:5f:cf:77:95:84:50:4b:90:2d:
         2c:3d:e4:0f:02:c3:a0:7f:48:74:54:76:db:f8:32:f9:fa:51:
         73:c6:ea:9d:70:0b:5e:3a:c1:54:41:b6:8f:62:ba:4e:e1:dc:
         d1:d5:8a:b3:ad:bc:5c:98:0b:5c:66:87:5c:13:a1:3b:9f:d6:
         a3:9a:d0:76:77:cf:56:aa:11:47:5e:ed:1b:95:73:f1:f7:b6:
         0f:bb:bf:03:37:74:01:17:d6:1e:c1:cd:ff:01:9e:c6:c8:8e:
         31:fd:b2:5e:1e:fe:f0:f3:66:94:4a:d3:aa:ec:30:3a:af:78:
         3e:6d:92:b9:df:2e:92:89:9b:f2:20:86:32:4e:2d:0e:f8:57:
         46:c4:10:a0:b7:54:96:a6:c2:67:41:52:9b:74:f3:57:75:46:
         7d:1c:06:98:18:01:59:97:6b:44:f5:ab:f1:ff:66:21:25:06:
         10:87:de:c0:9c:b3:ff:32:be:d4:de:90:bc:2c:7c:4f:6c:3f:
         ac:f5:2e:b9:b0:a7:ce:cb:cd:38:03:6f:46:fb:38:b3:75:2b:
         a2:ab:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:14 2026 by rpki-client