Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F1EA04881B6011F1A00A80522A3D8C67.roa
File:                     F1EA04881B6011F1A00A80522A3D8C67.roa (raw, json)
Hash identifier:          5ncTVxE65FUiFSe++1eVEBxevMue6z+7A/GkQ3dKdaU=
Subject key identifier:   67:B3:05:AD:56:74:5C:62:C9:86:D9:44:E5:99:BD:D1:56:9C:68:42
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3B9A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F1EA04881B6011F1A00A80522A3D8C67.roa
Signing time:             Thu 20 Aug 2026 16:23:53 +0000
ROA not before:           Thu 20 Aug 2026 16:23:53 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24206
IP address blocks:        110.44.168.0/22 maxlen: 22
                          110.44.168.0/23 maxlen: 23
                          110.44.168.0/24 maxlen: 24
                          110.44.169.0/24 maxlen: 24
                          110.44.170.0/23 maxlen: 23
                          110.44.170.0/24 maxlen: 24
                          110.44.171.0/24 maxlen: 24
                          110.44.173.0/24 maxlen: 24
                          110.44.174.0/24 maxlen: 24
                          203.84.136.0/21 maxlen: 21
                          203.84.136.0/22 maxlen: 22
                          203.84.136.0/23 maxlen: 23
                          203.84.136.0/24 maxlen: 24
                          203.84.137.0/24 maxlen: 24
                          203.84.138.0/23 maxlen: 23
                          203.84.138.0/24 maxlen: 24
                          203.84.139.0/24 maxlen: 24
                          203.84.140.0/22 maxlen: 22
                          203.84.140.0/23 maxlen: 23
                          203.84.141.0/24 maxlen: 24
                          203.84.142.0/23 maxlen: 23
                          203.84.142.0/24 maxlen: 24
                          203.84.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15258 (0x3b9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:23:53 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a19-1341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:99:09:0c:91:81:ad:5e:6d:47:17:f3:86:
                    57:9b:d1:72:88:29:cc:a6:03:2b:5d:bf:21:05:67:
                    50:ad:22:8b:72:4f:b8:fd:29:23:48:bf:64:dd:15:
                    e9:25:fe:09:f1:8b:16:22:0f:89:a2:28:91:17:fe:
                    1f:86:42:a1:29:a8:de:be:58:ee:4e:08:43:3d:1d:
                    0d:27:9d:37:3f:e6:67:e1:ee:22:8a:ee:5e:e4:bc:
                    60:7d:61:21:e3:92:d3:a0:3a:b5:4c:11:98:6f:06:
                    03:0f:7e:9a:df:24:7a:50:1a:72:7d:ea:bc:a2:78:
                    1b:86:cd:88:1f:9d:bd:1d:eb:7f:b3:1b:92:1a:98:
                    4d:ef:db:26:c5:d0:6e:35:5f:01:69:3f:d9:36:0c:
                    0c:2f:1f:55:f0:7b:cd:5c:79:51:35:bb:9b:e7:d7:
                    88:fc:8e:1c:23:6b:9b:98:9c:11:57:19:0e:06:5e:
                    d6:1a:11:c3:86:ab:87:ae:e0:0b:ad:2d:df:fd:69:
                    3b:d6:7b:30:33:a5:64:b6:2e:62:1c:ca:ca:36:d5:
                    04:57:fa:43:08:22:26:eb:d9:c5:62:a6:51:3c:fa:
                    a0:05:33:3f:2f:2a:c9:e1:12:48:a4:ed:0b:59:92:
                    4d:59:d4:ed:70:21:7b:42:2b:c8:08:e3:2c:db:5f:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:05:AD:56:74:5C:62:C9:86:D9:44:E5:99:BD:D1:56:9C:68:42
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F1EA04881B6011F1A00A80522A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.168.0/22
                  110.44.173.0-110.44.174.255
                  203.84.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:de:30:8c:9d:32:ea:7c:14:e4:a4:19:7f:86:af:cf:76:
         4d:fd:14:30:0e:5d:7b:0d:b3:a5:0f:e0:b6:da:7f:5f:93:0e:
         6a:13:56:db:d7:14:b6:e7:d0:5b:f5:04:f8:a0:54:ba:ad:7e:
         36:b2:50:ad:65:b2:e6:c9:64:5b:34:06:d4:6a:2e:bb:a3:ce:
         e3:f2:60:38:a1:8f:10:3c:63:3c:b8:d9:7e:0a:93:60:40:93:
         29:b5:ca:c2:d7:2a:49:69:c8:d7:cb:f5:db:95:c2:7f:96:80:
         3e:bd:26:b8:84:b9:f4:4c:33:26:61:70:e9:53:03:e4:89:f4:
         01:e4:70:ba:17:4d:9e:c4:eb:1c:96:c3:0a:a8:1a:ab:34:31:
         0c:9d:2d:ed:97:ab:99:45:d2:60:eb:33:89:db:74:f4:08:9f:
         6a:21:05:ae:b4:6c:32:34:69:e1:90:22:46:f6:20:4c:99:4d:
         95:0a:f4:e4:f8:6c:23:f4:95:9d:9e:09:86:64:08:ba:1d:e7:
         d8:c1:e3:e1:0d:20:30:61:b8:74:2f:3d:e0:7c:e1:94:b1:70:
         25:7a:d6:03:61:28:91:61:f5:d3:7f:17:82:5b:59:05:9e:c9:
         21:a0:b5:c5:17:e5:a0:c4:57:6f:f7:40:65:19:c0:f8:e7:62:
         f4:d4:fd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:35 2026 by rpki-client