Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35154B601E0111E9A590C837C4F9AE02.roa
File:                     35154B601E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          I4dof4j55Bfcmb/5upAn9BRhP692t0eavkPHZ2d3h+0=
Subject key identifier:   D8:67:F1:E6:3A:05:D0:59:E5:A4:54:07:26:73:C2:6C:68:3B:9E:EC
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B25
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35154B601E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:27:51 +0000
ROA not before:           Mon 14 Jul 2025 14:50:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133167
IP address blocks:        61.90.249.0/24 maxlen: 24
                          110.170.151.0/24 maxlen: 24
                          2001:fb0:1035::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15141 (0x3b25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49337-5931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:ff:14:22:bf:7a:7f:6c:12:7a:40:7a:6e:
                    99:f7:0d:f3:52:b7:56:7a:ad:9d:20:6c:17:17:e8:
                    0b:f3:02:fe:41:94:46:23:54:63:fb:f3:93:42:ca:
                    f0:98:2f:cd:f3:27:92:4a:3a:11:0f:4c:77:b7:83:
                    23:ec:1a:6c:ff:23:b0:53:40:ef:c8:22:64:99:4b:
                    3e:d7:be:f7:66:59:bb:44:f8:8c:32:8f:ae:1a:38:
                    1f:71:cc:79:36:e9:55:6a:99:f3:66:f0:ec:cc:fe:
                    68:b5:79:4b:46:4c:69:76:a1:da:d6:72:81:03:6a:
                    dc:20:4b:ab:87:5f:da:ec:55:81:ce:ec:db:1c:cb:
                    41:48:86:75:43:9b:4f:7f:d8:78:1b:8a:1f:fe:6b:
                    18:1f:46:84:74:64:7c:6f:24:28:0f:df:15:a1:37:
                    a2:f9:c9:b7:c0:2b:60:30:d4:2d:b2:9c:3d:f7:4e:
                    ae:e4:d7:84:dc:37:60:d8:66:91:85:6b:19:7a:5e:
                    2d:3a:f1:95:18:4b:08:b5:e0:01:17:9a:37:0c:74:
                    8b:4a:70:e1:a3:5f:be:2b:16:fc:d1:f1:9f:8f:3b:
                    38:a4:34:98:c3:b3:f3:bd:47:a0:37:60:c3:41:18:
                    f4:66:f7:09:53:30:01:dd:12:46:9d:2c:7a:b4:d6:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:67:F1:E6:3A:05:D0:59:E5:A4:54:07:26:73:C2:6C:68:3B:9E:EC
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35154B601E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.90.249.0/24
                  110.170.151.0/24
                IPv6:
                  2001:fb0:1035::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:2a:0b:59:92:53:a2:65:15:71:21:46:1a:4e:b4:b8:67:a6:
         10:fb:e8:ca:a7:9a:4a:9f:ba:83:3f:b5:87:9e:59:bd:c1:47:
         7f:6e:bc:70:b5:7b:23:84:66:f0:dc:81:d9:70:dd:4a:20:bd:
         e9:03:32:f0:5c:22:f7:a8:3e:5a:8b:3b:e2:5f:56:f7:ab:12:
         b7:d9:d9:23:ec:a6:9e:f4:36:5b:f4:18:27:9f:00:f1:ab:68:
         e6:b1:6d:fa:91:70:11:5a:43:80:3a:cc:39:fa:72:e3:ac:10:
         0c:31:58:4a:2e:51:d6:23:31:61:1c:01:7b:26:f2:fe:ce:9d:
         e1:3e:94:55:1c:0a:8a:78:a6:92:13:a8:71:fd:5c:2e:6f:6d:
         46:d8:e8:25:67:d5:56:8c:f6:2a:a3:9e:f2:d9:00:3d:78:d1:
         13:2d:8a:8c:1a:5a:3a:41:34:38:3c:f3:28:f6:fa:ba:d7:56:
         55:b7:13:b9:b0:c2:15:ee:0d:c9:f0:96:62:40:60:94:67:3d:
         7f:31:31:94:32:d6:65:70:c4:1c:82:de:a7:47:7f:42:eb:ef:
         a3:72:3d:1e:4b:79:43:06:05:95:02:fd:4c:bd:fc:44:8b:ca:
         aa:09:0d:bf:9d:4d:30:b2:46:fa:f1:0f:b7:18:87:95:a5:2f:
         23:96:48:94
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICOyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTMzNy01OTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2dP/FCK/en9sEnpAem6Z9w3zUrdWeq2dIGwXF+gL8wL+QZRGI1Rj+/OTQsrw
mC/N8yeSSjoRD0x3t4Mj7Bps/yOwU0DvyCJkmUs+1773Zlm7RPiMMo+uGjgfccx5
NulVapnzZvDszP5otXlLRkxpdqHa1nKBA2rcIEurh1/a7FWBzuzbHMtBSIZ1Q5tP
f9h4G4of/msYH0aEdGR8byQoD98VoTei+cm3wCtgMNQtspw9906u5NeE3Ddg2GaR
hWsZel4tOvGVGEsIteABF5o3DHSLSnDho1++Kxb80fGfjzs4pDSYw7PzvUegN2DD
QRj0ZvcJUzAB3RJGnSx6tNYswwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFNhn8eY6
BdBZ5aRUByZzwmxoO57sMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMzUxNTRCNjAx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQAPVr5AwQAbqqXMA8EAgACMAkDBwAgAQ+wEDUwDQYJKoZIhvcNAQEL
BQADggEBAEMqC1mSU6JlFXEhRhpOtLhnphD76MqnmkqfuoM/tYeeWb3BR39uvHC1
eyOEZvDcgdlw3UogvekDMvBcIveoPlqLO+JfVverErfZ2SPspp70Nlv0GCefAPGr
aOaxbfqRcBFaQ4A6zDn6cuOsEAwxWEouUdYjMWEcAXsm8v7OneE+lFUcCop4ppIT
qHH9XC5vbUbY6CVn1VaM9iqjnvLZAD140RMtiowaWjpBNDg88yj2+rrXVlW3E7mw
whXuDcnwlmJAYJRnPX8xMZQy1mVwxByC3qdHf0Lr76NyPR5LeUMGBZUC/Uy9/ESL
yqoJDb+dTTCyRvrxD7cYh5WlLyOWSJQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:52 2026 by rpki-client