Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A3906CD61E0211E9862ECE3FC4F9AE02.roa
File:                     A3906CD61E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          CWfs73hga/xoN2GK3X7uTDNyhjC9AZ5XfNL/S46sEh4=
Subject key identifier:   15:EA:93:81:7A:F6:57:F7:C9:BD:09:4D:0F:AF:DF:74:0F:35:61:65
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B2C
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A3906CD61E0211E9862ECE3FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:27:57 +0000
ROA not before:           Mon 14 Jul 2025 14:50:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133956
IP address blocks:        110.170.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15148 (0x3b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4933d-ab6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:92:e2:45:b9:89:d5:62:f4:63:50:a2:32:
                    75:e1:0a:64:7f:6e:4e:5d:bf:d2:ad:d3:73:7b:a4:
                    17:e6:54:c6:d7:00:bd:c8:2b:bb:e3:63:8f:74:55:
                    2d:9f:a6:44:31:47:0b:d8:d6:0d:be:3c:bc:6f:6c:
                    8b:b3:0f:0e:86:03:b7:80:e4:c5:8a:71:00:21:20:
                    fb:f5:a4:3f:76:4d:72:0b:9b:05:f0:97:67:f4:1f:
                    72:83:d0:a0:99:05:c3:97:7d:3e:e8:5a:79:9b:0f:
                    2e:aa:d2:88:54:9b:19:a9:81:1c:16:fe:03:2f:6d:
                    1f:15:a5:dd:17:5d:fc:17:22:ed:d5:7a:9d:5e:e4:
                    75:d7:34:f4:5b:a0:37:a5:1e:9f:34:5d:8e:7c:c4:
                    20:94:17:e0:0c:38:b2:3f:e1:5e:fc:ca:ee:32:29:
                    aa:34:44:09:af:ec:e5:af:94:a3:34:cb:23:15:4c:
                    52:86:46:90:f9:82:00:7b:32:64:83:b7:95:f4:a8:
                    6e:bb:a3:69:b0:af:ea:f8:67:e0:fd:e0:c8:32:8e:
                    4c:22:f4:46:ef:b5:82:cc:61:7a:a3:e6:3c:e9:4d:
                    30:1d:31:77:46:7e:47:09:19:9d:d8:12:60:00:b6:
                    f6:a2:d4:d8:35:7d:ea:2d:f0:b7:ce:26:00:68:1f:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EA:93:81:7A:F6:57:F7:C9:BD:09:4D:0F:AF:DF:74:0F:35:61:65
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A3906CD61E0211E9862ECE3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:34:d8:cc:c7:ff:41:f3:eb:25:b1:50:bf:52:bf:2a:16:
         e2:e1:24:a1:28:ac:cb:a1:8f:c9:05:f6:fd:cb:1a:9b:99:1f:
         c4:47:8d:0c:a4:99:14:a7:33:2d:fb:70:a3:ea:09:e8:08:47:
         76:cd:ff:2c:38:83:f1:34:51:71:08:6c:00:22:8e:fe:50:ac:
         cc:8e:8b:8f:b3:b6:93:0c:db:a0:d2:e1:8a:6e:c1:07:77:b6:
         67:1b:f4:d9:02:61:fd:64:b7:f0:39:00:40:87:73:41:e8:34:
         e1:d9:17:39:86:f9:85:9e:82:76:35:35:bd:13:8c:09:29:53:
         3e:85:72:d3:2d:8e:ea:d1:4d:28:b3:e6:77:21:cf:19:c7:7b:
         2d:e4:0f:7b:cf:b4:2c:54:26:92:9a:e7:59:80:bc:4b:37:31:
         88:93:f2:c1:13:a4:fd:76:4a:04:28:e1:aa:62:4d:75:97:9d:
         58:9a:c0:fc:e7:81:b3:42:2f:42:04:0a:0e:ea:ef:37:29:78:
         16:ee:01:cc:23:a5:32:f0:98:29:dc:9a:42:e8:56:dc:e6:2f:
         43:b0:e1:77:df:67:27:96:37:35:e0:b5:ef:11:39:cd:0d:c7:
         18:d2:5b:6f:0f:32:3d:7e:e2:1e:c3:92:91:7c:85:c3:21:38:
         ba:8c:f6:55
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTMzZC1hYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwiS4kW5idVi9GNQojJ14Qpkf25OXb/SrdNze6QX5lTG1wC9yCu742OPdFUt
n6ZEMUcL2NYNvjy8b2yLsw8OhgO3gOTFinEAISD79aQ/dk1yC5sF8Jdn9B9yg9Cg
mQXDl30+6Fp5mw8uqtKIVJsZqYEcFv4DL20fFaXdF138FyLt1XqdXuR11zT0W6A3
pR6fNF2OfMQglBfgDDiyP+Fe/MruMimqNEQJr+zlr5SjNMsjFUxShkaQ+YIAezJk
g7eV9Khuu6NpsK/q+Gfg/eDIMo5MIvRG77WCzGF6o+Y86U0wHTF3Rn5HCRmd2BJg
ALb2otTYNX3qLfC3ziYAaB/p4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBXqk4F6
9lf3yb0JTQ+v33QPNWFlMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvQTM5MDZDRDYx
RTAyMTFFOTg2MkVDRTNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAbqqZMA0GCSqGSIb3DQEBCwUAA4IBAQBm8jTYzMf/QfPrJbFQv1K/
Khbi4SShKKzLoY/JBfb9yxqbmR/ER40MpJkUpzMt+3Cj6gnoCEd2zf8sOIPxNFFx
CGwAIo7+UKzMjouPs7aTDNug0uGKbsEHd7ZnG/TZAmH9ZLfwOQBAh3NB6DTh2Rc5
hvmFnoJ2NTW9E4wJKVM+hXLTLY7q0U0os+Z3Ic8Zx3st5A97z7QsVCaSmudZgLxL
NzGIk/LBE6T9dkoEKOGqYk11l51YmsD854GzQi9CBAoO6u83KXgW7gHMI6Uy8Jgp
3JpC6Fbc5i9DsOF332cnljc14LXvETnNDccY0ltvDzI9fuIew5KRfIXDITi6jPZV
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:06 2026 by rpki-client