Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/ABF84E2A1E0211E9862ECE3FC4F9AE02.roa
File:                     ABF84E2A1E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier:          s9TX6kbanuI4GWJ8/Ry9ZLmGHRkC640NiCxTo0eY7SE=
Subject key identifier:   7F:2F:4D:62:89:45:60:48:E3:D2:5B:49:5E:C7:AB:4E:47:45:8C:16
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B77
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/ABF84E2A1E0211E9862ECE3FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:02 +0000
ROA not before:           Mon 14 Jul 2025 14:51:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56112
IP address blocks:        110.170.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15223 (0x3b77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4937e-5b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9b:d0:77:77:c9:75:c6:d8:9e:75:e3:ba:3a:
                    fe:21:0f:ef:1e:93:11:e4:08:01:b0:83:c8:c5:1e:
                    c6:e2:b7:59:ac:ec:4e:ef:ad:94:2b:34:9d:ef:b0:
                    2a:8c:6b:13:1d:36:70:cf:d9:93:c0:a1:2e:c9:16:
                    9c:ca:65:f2:55:82:48:d5:11:94:05:ca:32:bf:05:
                    b8:03:33:17:00:ea:d4:fa:89:77:00:44:02:4d:91:
                    e4:7b:c2:8c:d2:53:44:0d:99:14:31:0c:f7:d7:87:
                    20:b5:d3:f2:1a:43:2b:42:64:75:5b:90:07:46:91:
                    05:a5:b2:29:43:5b:8e:54:75:14:2e:9d:31:f9:a1:
                    e8:11:b3:88:8f:a8:63:22:e9:f4:51:70:c9:72:75:
                    28:8e:3a:60:80:30:65:34:28:15:7c:af:f5:5c:11:
                    33:bf:f3:69:a9:10:74:41:13:97:6a:84:18:21:d7:
                    3e:bf:4d:bb:da:0c:40:15:01:c9:c6:59:09:0f:b7:
                    95:63:a7:b1:e4:28:f9:2b:86:7d:c7:5d:a5:3d:03:
                    7c:d4:c7:2e:57:1a:fa:83:e7:8d:08:d5:44:96:c0:
                    a8:98:29:ab:30:b8:e4:a8:99:66:04:ef:48:29:83:
                    f6:e7:db:3e:23:ed:ff:e7:3a:2d:0e:5d:21:9c:ef:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2F:4D:62:89:45:60:48:E3:D2:5B:49:5E:C7:AB:4E:47:45:8C:16
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/ABF84E2A1E0211E9862ECE3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:20:63:b8:28:19:06:02:72:36:29:43:7c:02:a8:ca:41:86:
         6e:4b:cc:09:6d:46:e1:d9:ec:6d:f6:4a:67:0c:7d:66:84:d4:
         32:7f:c4:5c:28:d6:7d:f0:9d:65:b1:cf:1e:79:86:25:1d:40:
         3c:83:f6:80:9c:c7:b2:68:b1:53:96:01:6f:62:de:2a:d0:11:
         57:c4:5b:e7:c5:24:10:8c:ae:36:08:79:24:8f:3f:88:78:56:
         4e:7a:b2:0d:e8:3b:c2:71:71:77:86:1e:0b:2f:91:50:da:3f:
         b9:82:b4:21:31:82:5f:20:50:1c:de:83:15:97:21:f8:1d:52:
         35:7e:07:8a:99:81:25:86:58:d3:63:9d:8e:9a:e7:d5:93:64:
         97:34:9d:3d:34:4f:a5:9a:e3:da:3e:c3:6d:5c:e7:f3:4c:f5:
         55:15:b4:c4:b5:6b:33:82:57:3f:f5:dc:c5:c0:50:52:e5:27:
         4b:5e:aa:23:80:47:ce:9a:5c:3a:9d:0c:1b:62:8f:37:70:58:
         37:37:45:ec:79:64:25:0c:16:0f:15:1c:2d:39:f4:76:ce:a8:
         14:34:1c:1f:a7:f7:6b:3f:ed:27:96:17:8b:f6:f4:8e:7a:74:
         24:88:a6:47:60:89:7d:45:fb:6a:da:d7:16:d9:99:6f:a9:76:
         66:97:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:19 2026 by rpki-client