Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/187F92966F0911ED8A7BD268C4F9AE02.roa
File:                     187F92966F0911ED8A7BD268C4F9AE02.roa (raw, json)
Hash identifier:          r71AZU/AGm0+my99KPYn1TXxS+UY3LlY1LswZtBbWGw=
Subject key identifier:   16:46:B8:F8:58:5C:8E:58:CA:12:31:C5:BC:65:77:F6:93:F3:E7:B9
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       35F3
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/187F92966F0911ED8A7BD268C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:43:06 +0000
ROA not before:           Tue 02 Sep 2025 15:00:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139879
IP address blocks:        110.38.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13811 (0x35f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Sep  2 15:00:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a5155a-85c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ae:83:d3:b6:94:48:3b:7c:e6:17:2c:8e:cb:
                    1c:cf:5f:8c:9d:77:71:61:95:9f:d1:dd:ef:d0:12:
                    ac:69:ae:72:d6:fd:3c:03:75:96:66:c7:f2:14:5a:
                    9c:97:28:f9:0b:eb:9a:c5:d9:aa:c0:b8:e9:71:40:
                    48:70:4b:b3:d3:8d:f0:55:6d:aa:7b:1c:92:f2:b8:
                    88:55:f5:50:7c:70:9f:3f:23:1a:e1:44:7a:68:34:
                    c7:8d:88:56:64:a2:7e:bf:dc:e1:29:04:7f:a3:6c:
                    e4:09:cf:25:48:47:8c:62:67:49:19:09:38:22:08:
                    dd:39:fd:32:f7:0f:7a:96:57:e2:54:7d:ab:8a:19:
                    77:00:1f:66:47:af:4b:f4:18:f7:08:23:ac:ec:62:
                    5c:0e:84:86:82:ee:c7:2b:e8:cd:c8:0b:20:2d:f1:
                    c3:0f:49:43:35:92:78:e4:af:0d:28:ef:c6:b7:61:
                    ad:14:c3:56:72:cb:f6:74:c6:c6:cd:87:27:cd:02:
                    8b:92:1f:ca:de:b9:61:79:ba:3a:f4:5d:43:e6:91:
                    28:cf:11:ba:28:ea:e1:e9:65:33:69:6f:ec:ec:f8:
                    73:35:01:b5:0e:1d:6c:85:a5:9d:46:4b:c5:89:19:
                    85:68:c2:53:13:e7:5a:af:46:28:b4:18:4f:31:5d:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:B8:F8:58:5C:8E:58:CA:12:31:C5:BC:65:77:F6:93:F3:E7:B9
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/187F92966F0911ED8A7BD268C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.38.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:fe:a5:e1:1e:3c:4b:09:26:0d:c9:ea:48:68:36:f4:1a:b6:
         95:39:b4:62:eb:1f:bc:6d:c0:d6:01:14:64:e8:87:12:f5:81:
         d0:4b:a4:68:87:78:d6:a4:67:a3:2e:74:d7:04:f1:52:44:11:
         cf:aa:de:5e:b4:c5:18:85:e8:84:47:63:43:70:eb:12:6f:67:
         9e:76:3d:37:bd:d6:89:47:1c:ed:ef:67:84:ca:c5:5a:13:7a:
         94:1c:35:5b:25:9b:5a:27:65:8a:34:d9:33:8d:6a:57:ad:a5:
         21:74:55:e5:0e:54:2a:02:24:ce:5f:5f:0d:4f:be:79:33:71:
         2c:4e:7b:f5:92:77:31:78:67:81:e9:42:1c:55:59:7d:cd:9f:
         07:d2:6f:5d:19:d5:26:1c:d2:58:77:fd:c1:52:60:1e:fb:6d:
         f9:87:e8:91:02:a8:e0:c2:fb:41:c3:76:92:ef:11:9c:c7:27:
         5c:d3:b3:68:09:1b:dc:f7:68:49:ee:16:85:ad:f7:01:ba:6e:
         57:40:77:29:f3:af:5d:00:a9:e8:c4:15:ed:12:e3:21:f3:ed:
         aa:ad:02:aa:6e:a6:7c:0b:df:1f:f0:ba:59:67:47:df:63:53:
         d0:6b:47:b4:20:e8:24:fd:b6:78:29:ca:49:bd:9b:e0:8d:d9:
         d2:d5:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:58:26 2026 by rpki-client