Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa
File:                     264D7C4671E711EC93623E71C4F9AE02.roa (raw, json)
Hash identifier:          9XGCNFXQzGGx29rzbeIcH4Sehzn6LumEEBLuy9LvpDQ=
Subject key identifier:   A4:0E:66:4C:77:98:11:D7:D4:1C:1E:15:80:19:E5:79:01:81:13:30
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B6C
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:53 +0000
ROA not before:           Mon 14 Jul 2025 14:51:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55538
IP address blocks:        110.170.141.0/24 maxlen: 24
                          2001:fb0:1074::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15212 (0x3b6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49375-6615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:75:3d:ee:41:5a:2a:7f:98:a1:1a:89:b4:
                    5b:c0:41:a5:2f:3b:d9:9c:1e:bc:5b:c0:66:12:99:
                    77:86:79:2b:bc:e1:35:61:2c:c3:08:bd:ed:af:8e:
                    0f:94:b7:f2:09:cb:2e:41:38:c9:41:c2:ab:fc:92:
                    6a:aa:be:96:bd:e2:19:39:50:bd:5b:9c:a2:c4:d5:
                    b9:ca:7e:97:3f:7e:ba:07:08:9b:6c:27:d5:a1:09:
                    e6:73:4f:18:d3:e3:64:de:af:f2:ff:70:ea:61:50:
                    68:a1:ed:c2:d9:fd:a5:04:38:fe:35:dd:95:38:fb:
                    ed:1f:a3:d9:51:f4:1c:37:dc:5d:f3:e8:02:1b:35:
                    0a:b4:d6:dc:fa:f7:86:2d:af:4d:25:ae:4c:00:b1:
                    65:c4:19:c0:f8:b6:c6:09:22:b6:f1:4e:8b:09:ea:
                    de:5b:a5:ca:75:1d:b0:f7:31:a1:b4:68:d8:86:73:
                    c8:79:1b:36:5e:bd:05:f7:d2:2e:f4:7a:9d:43:2e:
                    f8:81:77:a6:30:a7:ce:b2:8d:ab:7e:9c:59:a9:96:
                    90:66:20:0a:e1:f3:9b:71:85:2e:db:1f:cf:f7:1e:
                    8e:ac:25:73:f9:b5:ce:e4:44:0f:c8:da:b3:a5:77:
                    a2:e3:f4:9e:6c:30:cc:9c:fe:e1:18:9e:99:d8:0c:
                    ca:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0E:66:4C:77:98:11:D7:D4:1C:1E:15:80:19:E5:79:01:81:13:30
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/264D7C4671E711EC93623E71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.141.0/24
                IPv6:
                  2001:fb0:1074::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:93:b2:a1:05:a0:32:db:6a:bd:6a:32:91:83:e3:ce:88:17:
         4c:e6:74:a7:5c:a6:fb:fe:fb:1d:f7:64:ec:d3:53:6d:c2:75:
         ec:44:49:e7:bf:2e:e0:c7:00:97:a6:34:b5:56:1c:77:d1:a4:
         21:69:b6:b1:7d:aa:7d:a9:23:2b:12:42:f9:d7:ee:dd:95:b7:
         21:d5:c2:be:c9:d8:7e:1e:3d:d2:bb:fa:44:ce:a7:2a:c3:f0:
         48:88:77:95:9e:e0:d3:87:c6:b1:b0:df:54:78:83:b1:9c:da:
         d0:6a:96:d1:6a:4f:b6:e8:50:c4:f3:88:f3:7f:f2:ea:88:31:
         a7:3e:1d:36:ee:53:a9:02:57:13:b0:77:87:67:2f:f4:7b:5e:
         18:14:1d:b5:85:13:0e:89:1c:c9:2b:0d:d4:97:d2:f6:c2:90:
         65:af:99:61:7e:cc:4a:a7:31:23:70:36:0c:57:21:8b:1e:41:
         1d:c9:a8:70:fa:ff:3d:cb:d5:8f:fa:f3:8a:39:f5:59:7f:e2:
         7e:69:20:70:c1:a4:9e:13:f4:d2:7e:c0:03:78:0a:10:b6:20:
         80:a7:75:db:06:af:b9:ff:94:26:29:62:05:d4:8f:7e:d8:e3:
         2e:d7:23:6a:48:3e:48:a6:52:a5:49:19:3b:e3:e5:cd:5a:e6:
         43:8f:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:49:19 2026 by rpki-client