Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
File:                     FC968EB81E0311E991EB9A44C4F9AE02.roa (raw, json)
Hash identifier:          OE3f95hIAkOebtXudd4P6/nr304eNbr+PWwRyKJS+Sg=
Subject key identifier:   D6:FF:54:1A:F3:36:B8:CB:C6:D7:5E:DB:C0:3B:73:E7:62:7C:39:AE
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C37
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:13:43 +0000
ROA not before:           Mon 06 Jul 2026 15:13:43 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     7630
IP address blocks:        110.170.223.0/24 maxlen: 24
                          210.86.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15415 (0x3c37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:13:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc627-b1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:89:c4:26:99:1d:d0:eb:1d:9e:6f:76:13:
                    70:09:8b:b4:a2:b4:fe:08:a0:a4:95:1d:50:f8:f2:
                    db:7d:30:f9:c6:6e:63:93:b7:33:89:dd:b6:ca:45:
                    0d:d5:24:8d:34:8b:54:9b:6d:fb:4d:c6:77:16:95:
                    12:34:21:e6:54:2b:6e:e9:9a:a4:85:f1:cc:46:99:
                    f3:b6:f6:33:a8:8b:3c:a9:ff:d1:4a:44:3e:e5:1b:
                    88:5d:fc:71:c9:dd:86:69:6c:01:be:02:b3:d9:36:
                    f6:bf:51:bc:65:e8:16:f8:c8:8e:97:1c:2a:9a:17:
                    6f:a5:2c:fd:7c:bf:6e:a7:60:9a:0d:21:44:98:67:
                    9e:a5:bc:36:31:64:8e:9b:d8:91:04:6f:d5:75:93:
                    9b:8b:6b:e8:c0:4b:8c:ac:96:13:b2:6f:b7:24:d6:
                    7f:03:c3:36:30:67:69:7f:87:d6:2d:28:eb:69:28:
                    c2:9d:86:50:b8:60:61:f9:4f:bb:b6:28:a3:64:cd:
                    3d:94:df:e1:0b:62:f4:f7:db:93:9b:3d:4e:59:fc:
                    ff:73:23:98:50:5d:f1:92:ab:05:75:aa:6a:11:64:
                    1b:2a:42:47:d6:b5:df:5b:ba:ba:43:6d:45:ae:67:
                    c2:b4:bc:ed:b6:6b:d9:d8:57:b9:d9:74:11:76:ac:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FF:54:1A:F3:36:B8:CB:C6:D7:5E:DB:C0:3B:73:E7:62:7C:39:AE
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.223.0/24
                  210.86.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ea:6f:ec:67:73:5c:f1:6f:fe:d0:8c:41:98:51:78:2d:df:
         cd:6c:32:04:ce:f5:cf:17:b5:68:fb:13:9f:95:14:34:28:99:
         df:c3:e6:57:80:dc:c6:d2:2f:35:c9:5c:b6:10:b5:b1:a8:1d:
         21:0e:4e:c6:5e:ab:5e:33:2f:e4:d7:a2:0f:16:b9:00:da:6e:
         03:3f:35:ea:17:e2:6d:87:90:a9:9f:fe:da:58:0c:75:27:6f:
         2e:cf:b3:3a:d0:65:2b:a0:a2:19:5b:e1:98:55:60:7a:12:8a:
         d8:71:4e:6f:2d:93:10:a1:ef:30:be:50:0e:28:1d:30:21:f5:
         35:4c:42:ff:18:59:8e:ba:3c:91:63:80:ed:78:28:dc:a4:00:
         fa:ae:39:a5:cd:b3:9a:f4:83:20:86:e4:33:66:07:dc:c6:15:
         ed:bc:2d:64:e1:df:72:fe:7f:aa:ac:87:d8:b0:36:3f:a0:df:
         b6:47:5e:d5:1b:6d:0f:af:04:73:8d:00:13:40:2e:0a:c5:4d:
         14:21:4c:7f:53:5d:db:68:6c:9c:01:62:d3:20:4d:78:fe:35:
         0f:7b:13:62:2e:cc:41:25:a4:73:60:79:fb:0f:d7:2a:07:2d:
         f6:e0:99:e6:b3:25:4b:f0:c8:1b:ce:5c:80:dc:48:8b:86:ef:
         bc:e8:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:16 2026 by rpki-client