Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa
File:                     3934EF5C1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          iSqyJYHuHCJ39tRA11l6KjXNhQPgnXByRPUu/TVqJUA=
Subject key identifier:   5C:9C:7F:43:5F:20:D0:FE:61:15:25:D1:41:35:DA:0D:67:5C:41:A5
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39CB
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:50:32 +0000
ROA not before:           Mon 14 Jul 2025 14:50:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136457
IP address blocks:        210.86.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14795 (0x39cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:32 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751938-85a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:7c:64:02:7a:03:3d:ce:be:ef:6c:05:ad:
                    7c:42:f0:65:96:4a:c7:8c:c5:2a:93:1e:6b:19:b8:
                    30:fb:28:c0:c1:16:e5:4e:4b:91:c8:75:f3:d7:f8:
                    19:b7:c3:01:15:17:c6:d5:3c:11:08:9c:9b:5d:db:
                    64:1a:69:67:4e:79:8f:d6:cc:6c:f6:8e:98:0a:ef:
                    dd:47:96:a0:08:6e:e6:9c:b1:0b:b7:c3:46:5f:5b:
                    a3:ea:c5:30:0d:96:e9:14:fd:8d:59:42:62:4e:86:
                    99:11:87:62:16:f5:ff:89:68:b3:62:b1:be:b4:41:
                    cb:6e:c4:03:d4:e5:7c:c8:2d:9a:e2:c3:04:a4:c4:
                    8f:b5:84:6c:76:b8:19:e5:6a:1c:58:e8:05:a5:7a:
                    8b:4b:37:e3:34:cc:01:1d:24:35:f1:b3:e3:aa:4d:
                    f5:ba:af:1a:05:eb:88:02:a4:ed:4d:d9:9c:c5:ea:
                    61:93:71:0b:24:e2:b9:fb:ae:4e:c6:45:72:ac:9b:
                    4f:5a:99:68:68:fa:8d:6a:37:db:bd:47:c8:2b:cc:
                    f8:66:5a:41:f9:61:93:3f:2c:6c:8d:0b:f2:96:5e:
                    d6:d7:af:c4:3a:bb:7b:dc:34:22:e0:4f:37:9a:03:
                    9f:d2:69:f0:64:79:a6:d9:b7:88:9c:0a:be:b4:c6:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9C:7F:43:5F:20:D0:FE:61:15:25:D1:41:35:DA:0D:67:5C:41:A5
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3934EF5C1E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:65:e2:24:7d:0c:0f:ce:d3:67:20:00:b7:d7:19:8d:0e:56:
         32:67:cd:ce:9e:f4:dc:56:fb:97:5b:26:9b:66:94:e1:90:4e:
         ff:b7:1b:51:0b:7e:99:17:09:f5:a7:ca:9f:ea:46:f6:55:e8:
         9f:00:2a:2d:62:94:84:2d:3a:0a:bb:cc:e8:fd:29:a4:31:72:
         28:58:1c:38:a8:e4:db:2f:f6:f3:e4:69:0f:59:e9:75:68:8a:
         3d:ae:ed:34:86:19:50:1a:17:f9:88:5a:37:be:07:06:31:3b:
         9f:39:49:eb:47:15:28:2e:2f:ca:3f:5b:ca:22:17:21:65:c5:
         74:71:c4:46:9a:05:ab:45:be:eb:47:c0:2a:17:4d:36:d7:e7:
         bf:f7:03:51:b4:da:79:75:6d:f2:c6:e6:96:fd:cf:34:67:03:
         3f:84:87:f0:31:68:1c:67:30:aa:01:ea:fc:88:2e:81:c0:a7:
         e2:d7:e8:44:01:42:59:74:cd:bf:71:9f:44:7e:45:6d:c5:4c:
         68:62:2d:92:f4:f0:f7:1a:8a:00:cb:a5:c8:f0:0e:09:06:d2:
         bc:17:7c:90:b1:57:31:5f:77:35:5d:3b:d9:48:17:75:7c:76:
         76:0e:b2:51:51:b0:fa:77:bc:0b:d0:48:ec:cf:30:07:8a:f9:
         2d:1a:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:52:55 2025 by rpki-client