Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9E16D1961E0211E9862ECE3FC4F9AE02.roa
File:                     9E16D1961E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          yvghM5xhHVJHVU5WuYfdVgM7DfEK+FLyuKpIrvm3Jj8=
Subject key identifier:   08:EF:DC:8C:9F:4C:60:93:53:3C:70:60:94:31:DD:6F:71:24:9E:7A
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B23
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9E16D1961E0211E9862ECE3FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:27:49 +0000
ROA not before:           Mon 14 Jul 2025 14:50:19 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132821
IP address blocks:        110.170.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15139 (0x3b23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:19 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49335-eed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:14:96:94:84:5d:d3:fc:a3:4e:51:e3:c1:
                    09:6e:8a:11:98:55:70:8e:eb:a6:65:28:ce:96:83:
                    4b:67:a8:a3:23:e8:f0:b5:d5:be:a3:dd:ed:1c:71:
                    8c:a7:72:49:5a:f5:59:1d:cb:16:52:69:01:0b:95:
                    87:74:5f:09:8d:e3:7c:b5:a0:e6:6a:c2:ef:71:71:
                    ab:2f:21:de:5f:79:8a:e6:71:5e:b3:33:2b:99:79:
                    3e:98:28:33:4c:8f:b8:4b:d5:08:59:59:ab:c2:c6:
                    c2:14:ee:61:92:ea:d5:3b:a5:fa:3a:ff:b9:25:6d:
                    3c:e7:f0:69:be:99:5f:9f:62:76:8e:56:d2:b8:2a:
                    06:8c:02:8d:9c:5f:ae:cd:2d:af:69:93:66:09:cb:
                    3e:43:5f:91:23:fb:40:a0:28:2f:57:9e:10:c6:c0:
                    b4:70:58:0b:1d:e8:19:53:be:82:18:b8:82:88:1e:
                    12:6c:fc:db:94:c6:83:d2:7b:07:ea:d5:67:0c:97:
                    f5:cf:05:2a:47:f6:97:16:57:7e:63:1c:20:46:c8:
                    c6:de:5a:30:39:90:7d:63:bf:0b:7e:1c:d4:9f:db:
                    26:65:98:0e:74:be:e1:c1:bc:b7:e2:fb:12:78:df:
                    1a:0c:b6:99:d1:84:15:98:2f:88:e8:4c:44:33:f4:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EF:DC:8C:9F:4C:60:93:53:3C:70:60:94:31:DD:6F:71:24:9E:7A
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/9E16D1961E0211E9862ECE3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:54:d6:ce:ba:2d:07:e9:c1:7a:5d:4c:f3:2b:5d:1a:0d:f8:
         b1:c4:ee:4c:5d:dd:31:09:70:fa:fb:69:fa:43:68:49:c9:c6:
         f8:10:c0:a1:7c:a2:e9:c4:bc:80:3f:8a:24:1b:63:65:0b:d7:
         8d:e0:72:4b:12:0e:70:62:da:03:5e:89:ca:07:0c:2e:ca:74:
         06:9d:74:44:56:87:b1:24:93:bc:48:1f:1e:ca:79:4f:4b:3c:
         ec:b5:70:ae:18:2d:d9:90:1b:6e:d0:ed:94:14:04:f3:7a:ba:
         2b:d6:8b:96:97:5f:f2:55:ab:b8:47:e7:07:c6:d0:bc:e4:52:
         30:84:71:b0:65:5d:7a:ce:f4:00:71:9f:2d:5f:ae:1f:1e:21:
         35:21:b2:75:ba:a2:fa:7c:75:f4:f1:68:a0:a0:be:44:5b:28:
         0e:8c:da:4c:79:46:c1:da:56:19:a9:de:16:bd:02:a5:50:0a:
         df:de:b7:0b:b0:21:00:3e:d7:34:7b:1e:f2:ad:72:de:a1:9a:
         ee:cb:87:b8:f2:c0:c1:46:bb:0d:af:b3:39:2e:af:87:21:09:
         6f:e0:47:a8:aa:86:a8:82:b0:92:6f:d5:c8:b7:13:15:0c:4b:
         66:ca:dd:75:60:5d:9e:7c:d7:56:81:9d:f7:31:73:46:46:5b:
         2a:15:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:57 2026 by rpki-client