Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa
File:                     561E3BF01E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          qJeONy7BX5Mtjw/5uDlHzjzPpzE/Xi0ABn/AAQ2eTG4=
Subject key identifier:   A2:FE:47:73:EB:07:88:8F:22:43:7E:5C:73:81:71:8F:9C:F9:91:68
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B75
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:01 +0000
ROA not before:           Mon 14 Jul 2025 14:51:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55932
IP address blocks:        119.46.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15221 (0x3b75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:32 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4937c-fad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:4e:f6:13:a7:5a:b3:b6:98:13:06:08:7a:
                    34:03:cb:74:9f:d9:6b:fd:e1:07:6d:97:a6:19:a6:
                    8e:a1:28:5a:5f:54:84:5e:0d:a0:68:f4:cb:75:c2:
                    35:a3:a8:9b:88:1e:e4:bc:59:b5:99:9e:84:b1:70:
                    ac:5b:18:43:17:3d:06:8b:e0:8a:c6:c7:17:de:d1:
                    69:d6:f8:55:fb:86:42:a8:1b:87:9f:f3:bf:bf:8c:
                    e7:6b:55:57:64:fb:fd:c4:be:af:09:e2:6a:99:d2:
                    a8:ff:48:a5:cd:f0:17:0b:06:75:15:22:ef:4c:d8:
                    87:c3:3c:60:56:a3:0c:12:01:1f:8d:0c:5c:5e:75:
                    33:68:86:60:8f:d5:eb:03:a5:1b:3e:46:b7:5c:59:
                    2b:11:50:30:57:2d:da:13:b0:3b:3b:a9:1a:d5:8d:
                    44:8d:50:0d:e2:a6:dd:1d:db:42:af:fa:30:fe:81:
                    ec:4a:e9:da:cb:3d:d6:36:cd:8f:3f:90:28:45:32:
                    5b:db:78:28:8b:32:eb:5d:94:8f:37:b2:b0:9e:39:
                    6d:08:e7:cf:e1:21:1c:8a:01:47:46:8d:95:38:42:
                    49:ad:b8:b5:29:e7:59:e8:ca:d4:76:b0:62:f3:a3:
                    16:6a:d5:ab:f5:7d:82:76:af:71:a5:27:9f:12:ee:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FE:47:73:EB:07:88:8F:22:43:7E:5C:73:81:71:8F:9C:F9:91:68
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:e6:35:03:81:51:54:60:5e:36:59:aa:1f:2b:d9:9d:2f:76:
         c7:36:1e:01:db:2f:33:13:13:39:40:f1:6e:74:3b:e5:bf:f5:
         d5:37:26:5b:4c:45:8e:1a:aa:fc:80:24:fc:61:35:25:dc:fb:
         d9:eb:c8:bc:f2:3d:a1:d2:37:1d:82:f6:1b:0a:a5:04:6c:de:
         fe:99:08:ca:a8:e5:64:0a:2e:44:4e:b0:9a:72:b0:cc:5e:a8:
         a9:c5:20:75:88:d3:89:a2:f1:3f:c5:b7:b6:e9:78:c8:38:45:
         76:3e:b1:d1:6a:69:97:1a:27:f8:43:5d:39:fd:f7:a0:e2:f3:
         91:a7:94:d7:dc:3b:9d:10:e4:16:5f:d3:4e:9f:c5:60:29:52:
         7c:82:2a:52:f7:0e:8a:99:7b:a2:9f:7f:47:a0:f3:4b:e7:84:
         16:4c:9c:cc:be:2e:cc:83:3e:4c:82:07:2c:f0:30:07:8e:23:
         52:50:5c:de:67:0b:90:3a:58:4d:5c:32:b4:7e:0a:1f:6d:9c:
         64:22:83:d5:51:27:6e:e7:4c:80:75:b8:66:6f:72:9a:72:13:
         79:fc:55:87:e0:05:f0:dc:94:4b:07:3e:7f:34:7e:d8:ec:c4:
         0d:42:e9:8e:d3:e4:4f:3b:df:4f:29:ca:db:e3:19:6b:fb:43:
         56:80:9e:3a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICO3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM3Yy1mYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnaxO9hOnWrO2mBMGCHo0A8t0n9lr/eEHbZemGaaOoShaX1SEXg2gaPTLdcI1
o6ibiB7kvFm1mZ6EsXCsWxhDFz0Gi+CKxscX3tFp1vhV+4ZCqBuHn/O/v4zna1VX
ZPv9xL6vCeJqmdKo/0ilzfAXCwZ1FSLvTNiHwzxgVqMMEgEfjQxcXnUzaIZgj9Xr
A6UbPka3XFkrEVAwVy3aE7A7O6ka1Y1EjVAN4qbdHdtCr/ow/oHsSunayz3WNs2P
P5AoRTJb23goizLrXZSPN7KwnjltCOfP4SEcigFHRo2VOEJJrbi1KedZ6MrUdrBi
86MWatWr9X2Cdq9xpSefEu4+mQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKL+R3Pr
B4iPIkN+XHOBcY+c+ZFoMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTYxRTNCRjAx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdy62MA0GCSqGSIb3DQEBCwUAA4IBAQA65jUDgVFUYF42WaofK9md
L3bHNh4B2y8zExM5QPFudDvlv/XVNyZbTEWOGqr8gCT8YTUl3PvZ68i88j2h0jcd
gvYbCqUEbN7+mQjKqOVkCi5ETrCacrDMXqipxSB1iNOJovE/xbe26XjIOEV2PrHR
ammXGif4Q105/feg4vORp5TX3DudEOQWX9NOn8VgKVJ8gipS9w6KmXuin39HoPNL
54QWTJzMvi7Mgz5Mggcs8DAHjiNSUFzeZwuQOlhNXDK0fgofbZxkIoPVUSdu50yA
dbhmb3KachN5/FWH4AXw3JRLBz5/NH7Y7MQNQumO0+RPO99PKcrb4xlr+0NWgJ46
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:00 2026 by rpki-client