Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa
File:                     35D6766E1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          Olo2w6Cf2Wvy0P2zNSHF6OW8KcXyLyfP8aviecMYzcg=
Subject key identifier:   1D:3C:2B:1F:72:B1:07:45:D6:7E:A3:32:8D:41:44:A8:46:57:5C:BE
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B2A
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:27:55 +0000
ROA not before:           Mon 14 Jul 2025 14:50:25 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133791
IP address blocks:        110.170.142.0/24 maxlen: 24
                          203.144.154.0/24 maxlen: 24
                          2001:fb0:10b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15146 (0x3b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:25 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4933b-80e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:c1:ad:39:d3:eb:28:ea:0c:47:39:31:18:
                    59:d3:da:37:ab:5d:5b:bc:02:70:ce:a5:30:b5:ee:
                    6c:64:55:d6:44:ce:31:35:04:7b:40:3e:69:b3:79:
                    e9:8f:55:6f:70:98:87:d8:ae:5f:30:18:c2:57:52:
                    11:68:12:b0:4c:7b:c7:eb:fb:ee:13:2a:33:b6:fa:
                    02:a1:4d:d4:d2:3e:b8:00:95:fb:53:7f:6b:09:e2:
                    9f:fb:8f:d8:0e:de:e2:7e:a7:9a:1c:6b:ab:99:f7:
                    45:6b:ee:9f:52:8a:46:51:80:10:b5:93:c0:82:2d:
                    5d:34:77:51:c4:e9:f8:b6:9b:ee:8f:f6:c2:7b:e5:
                    e0:63:05:52:b4:0d:b5:c0:bf:48:32:5b:2e:5a:27:
                    44:0e:b0:b0:a7:1f:09:55:a1:14:30:d2:b3:a8:c7:
                    5f:47:3a:84:3a:b4:c0:18:6c:02:d8:88:44:5a:db:
                    53:94:d0:b4:bd:c9:ed:fe:15:0d:ef:e9:4b:0f:c7:
                    81:e2:a3:6d:d8:17:98:6c:06:6d:dd:4a:6a:65:1b:
                    56:db:f7:bf:aa:61:6b:c9:dd:5d:a3:2b:6b:6c:91:
                    ec:dc:b3:38:00:b1:53:43:37:b5:c9:9e:ae:64:4d:
                    98:47:33:c8:f9:26:4d:9a:bb:e8:de:58:d7:39:9d:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:2B:1F:72:B1:07:45:D6:7E:A3:32:8D:41:44:A8:46:57:5C:BE
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.142.0/24
                  203.144.154.0/24
                IPv6:
                  2001:fb0:10b6::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:51:0e:09:0f:5c:19:56:92:69:4a:3f:72:c7:6e:1f:cc:
         aa:b3:c6:22:36:cd:3e:50:9c:6f:a1:d6:54:04:90:e3:23:20:
         f0:ee:6b:1e:4e:7d:99:22:b6:bc:60:e7:c0:a0:f0:80:94:11:
         68:de:95:e0:3c:7c:06:d2:5d:5b:fa:22:c4:25:f1:87:0a:37:
         b6:74:3b:99:14:51:ab:84:22:4c:d4:2e:f8:61:c3:fb:1f:93:
         bc:6e:53:58:2a:a4:a7:79:f1:26:9d:48:45:95:eb:7c:40:1c:
         79:89:9b:76:9e:70:d4:90:4b:13:cc:20:1a:7e:2a:ca:0d:20:
         e5:9b:c0:b7:30:1c:f3:da:58:75:e5:65:95:c9:af:b1:5b:ba:
         39:43:63:0e:64:32:c8:18:a6:62:fa:41:b3:a6:03:cc:a6:16:
         e9:89:4e:fd:61:51:3f:f1:84:1e:cb:04:46:5a:42:d3:08:d0:
         64:7c:d1:f3:ce:75:0a:b9:8d:0b:70:9e:72:6f:0f:88:7f:5e:
         6d:88:c0:bc:74:2d:c9:d1:a7:a0:8b:50:75:10:88:55:05:1d:
         4e:d9:a6:90:e8:2b:90:65:f6:1a:59:c8:88:f7:06:af:fd:a3:
         da:20:54:86:2c:fc:f1:c6:9e:b2:d1:21:8b:48:e3:71:04:ff:
         c4:05:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:23 2026 by rpki-client