Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa
File:                     3B6CD8201E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          ZCUD67/0jcDDbitBG7hYcQrF3bPvpBWnVsenrGhFkm0=
Subject key identifier:   6D:11:D6:29:43:F1:58:56:58:0D:41:56:93:F7:82:71:BE:6A:46:94
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B36
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:06 +0000
ROA not before:           Mon 14 Jul 2025 14:50:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138344
IP address blocks:        210.86.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15158 (0x3b36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49346-3e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5d:c0:31:fc:3f:e8:1e:38:4c:e5:ad:86:91:
                    cf:19:5d:9d:f5:e5:c9:ff:b5:93:e5:f6:95:9e:01:
                    6c:d8:05:d3:81:0e:c0:59:cd:18:47:c9:2d:c6:0d:
                    61:76:99:05:23:02:0a:6c:b2:c5:11:9e:36:96:bb:
                    83:e7:a1:8c:b5:98:df:6b:6f:2b:1b:76:7d:30:75:
                    71:50:0c:21:29:cc:e2:d7:83:cf:8d:70:17:da:f8:
                    30:ca:8a:21:8f:8f:39:e6:97:fb:5c:fc:04:b0:2d:
                    d3:50:c2:51:7a:27:b0:0d:dd:4f:00:88:d1:12:d5:
                    b6:70:1b:ea:db:81:22:a9:3d:2d:8b:ee:db:59:cc:
                    df:3f:54:9a:84:0d:bc:ff:3e:a3:c8:b2:11:a7:af:
                    c2:22:7b:ef:81:99:37:84:af:07:8f:8e:8f:5e:3c:
                    a3:14:15:77:a3:b6:50:a3:92:f1:d2:a9:e8:ff:17:
                    ba:23:a9:bb:4c:56:9a:a1:a6:c7:d5:c6:0d:82:1e:
                    b5:bc:28:d4:08:f5:9c:99:84:70:1b:80:19:e5:5b:
                    69:b2:e4:2e:f9:7a:dc:e3:ed:b2:58:0e:63:f3:7a:
                    c8:0b:8f:21:7c:35:78:ea:4f:f8:8f:43:98:25:b6:
                    69:30:9e:96:c8:5e:d3:e0:29:90:0f:c9:54:e1:48:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:11:D6:29:43:F1:58:56:58:0D:41:56:93:F7:82:71:BE:6A:46:94
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:7d:b0:90:ca:4c:9d:5b:6e:a0:43:ea:2c:c6:f1:9a:a6:
         41:cc:be:ca:bb:9a:ec:25:5e:f9:0e:9b:f7:62:87:a6:1d:b1:
         a6:7d:13:57:2f:ff:bd:0a:19:34:82:37:d7:8c:64:12:b5:34:
         c9:7d:5a:44:00:2e:d2:21:8e:08:51:37:9a:b2:78:91:2c:ee:
         6c:1c:20:c5:6a:7e:1d:a3:e3:56:b6:9e:85:90:4b:f1:88:e6:
         37:18:f4:5b:ae:27:e8:d3:21:4c:15:56:fe:dd:6c:fc:1b:1d:
         f3:db:88:86:a5:b3:cb:b2:d2:5a:9b:61:96:d8:1a:9e:84:2a:
         fb:0f:c9:0a:cd:4f:12:96:bc:92:22:86:92:48:b6:4a:bf:5f:
         e7:7d:5a:f0:14:1e:20:11:f5:93:9b:3a:8f:8c:f3:3f:a0:ec:
         12:fa:59:bb:9d:ab:19:95:87:28:a8:d0:39:a8:20:75:80:5c:
         e7:b2:1c:45:68:29:6b:51:0f:86:2d:8a:6e:fa:e6:71:40:58:
         78:c4:19:ce:71:6f:4b:31:a1:7b:ad:71:41:55:2c:1c:b6:10:
         e9:4b:66:58:18:e2:78:06:a6:04:97:41:75:ba:fd:5c:13:9e:
         74:9b:65:96:f9:18:4a:63:6b:31:a5:d4:40:55:02:6b:72:4a:
         a6:e6:d5:41
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM0Ni0zZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjF3AMfw/6B44TOWthpHPGV2d9eXJ/7WT5faVngFs2AXTgQ7AWc0YR8ktxg1h
dpkFIwIKbLLFEZ42lruD56GMtZjfa28rG3Z9MHVxUAwhKczi14PPjXAX2vgwyooh
j4855pf7XPwEsC3TUMJReiewDd1PAIjREtW2cBvq24EiqT0ti+7bWczfP1SahA28
/z6jyLIRp6/CInvvgZk3hK8Hj46PXjyjFBV3o7ZQo5Lx0qno/xe6I6m7TFaaoabH
1cYNgh61vCjUCPWcmYRwG4AZ5VtpsuQu+Xrc4+2yWA5j83rIC48hfDV46k/4j0OY
JbZpMJ6WyF7T4CmQD8lU4UhBsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG0R1ilD
8VhWWA1BVpP3gnG+akaUMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0I2Q0Q4MjAx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0lbYMA0GCSqGSIb3DQEBCwUAA4IBAQBn7H2wkMpMnVtuoEPqLMbx
mqZBzL7Ku5rsJV75Dpv3YoemHbGmfRNXL/+9Chk0gjfXjGQStTTJfVpEAC7SIY4I
UTeasniRLO5sHCDFan4do+NWtp6FkEvxiOY3GPRbrifo0yFMFVb+3Wz8Gx3z24iG
pbPLstJam2GW2BqehCr7D8kKzU8SlrySIoaSSLZKv1/nfVrwFB4gEfWTmzqPjPM/
oOwS+lm7nasZlYcoqNA5qCB1gFznshxFaClrUQ+GLYpu+uZxQFh4xBnOcW9LMaF7
rXFBVSwcthDpS2ZYGOJ4BqYEl0F1uv1cE550m2WW+RhKY2sxpdRAVQJrckqm5tVB
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:45 2026 by rpki-client