Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DA2CBDC8AA8411ECA420473FC4F9AE02.roa
File:                     DA2CBDC8AA8411ECA420473FC4F9AE02.roa (raw, json)
Hash identifier:          lOP7ohXSEkQEk5c6VHYWJ1vYI6lKDYTEcPEOOwVaKCA=
Subject key identifier:   7C:08:34:D1:6E:AB:0E:70:B0:09:3F:46:92:00:3A:30:72:A3:95:5B
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B3B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DA2CBDC8AA8411ECA420473FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:11 +0000
ROA not before:           Mon 14 Jul 2025 14:50:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140706
IP address blocks:        110.170.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15163 (0x3b3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4934a-dc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:08:00:09:d6:d3:20:5a:5b:ef:0a:f8:ba:
                    49:3d:b2:c3:7a:f5:08:84:63:1c:19:df:b8:4b:f9:
                    7e:bc:21:ff:13:bf:c0:99:9d:1b:72:7d:3c:0c:3b:
                    50:4d:5b:68:cf:ee:e7:55:3f:7b:e3:d8:db:16:ef:
                    fc:34:6c:8d:06:04:76:9b:40:48:e0:c7:02:14:70:
                    8e:0b:32:1e:cd:fd:8d:6f:1f:1b:a3:0c:7e:9a:5b:
                    d1:05:f2:b2:40:93:5e:c5:ea:43:f9:ec:be:ad:43:
                    ec:81:96:5c:93:d2:35:60:b7:01:2e:b7:43:0a:c3:
                    61:03:84:00:85:ef:d3:48:fb:71:7e:cb:9e:34:25:
                    e6:1c:30:da:14:56:37:41:b7:43:58:2b:0f:73:54:
                    db:aa:80:ac:56:71:e1:9b:9d:6a:94:f2:58:9d:19:
                    04:31:da:d5:d9:bf:5e:17:91:3a:ac:b1:6d:85:35:
                    aa:ce:4e:e5:eb:9d:9a:a9:fd:73:4a:78:10:bb:83:
                    f0:e2:b7:a1:0c:71:62:04:36:77:d2:41:1f:02:d8:
                    a8:72:e2:64:36:4e:b2:28:d0:1a:6b:71:10:9c:21:
                    2a:55:ac:21:10:e3:e0:63:7e:e0:ac:34:76:16:4e:
                    b0:94:0f:65:1f:b6:bf:fd:1e:f1:fc:4e:ea:8d:05:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:34:D1:6E:AB:0E:70:B0:09:3F:46:92:00:3A:30:72:A3:95:5B
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DA2CBDC8AA8411ECA420473FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:98:36:77:c0:b3:51:53:39:3d:7f:b4:32:45:0e:67:23:
         d3:93:52:9f:be:ac:93:0c:74:38:b1:3e:57:61:1f:1c:f6:8c:
         bd:fc:bf:0d:5c:04:50:6d:01:bb:06:ec:c6:30:9e:2f:78:65:
         a5:51:42:2e:b7:bd:44:8b:26:21:c8:db:e6:e8:24:90:09:ae:
         78:4f:64:a5:37:7b:ad:6c:5f:86:7a:37:d4:0f:ea:30:18:fd:
         95:ae:c1:d6:d4:f3:6e:45:11:c6:0e:79:db:ba:7f:46:98:84:
         00:c8:33:bd:cc:39:a6:d0:29:b3:0b:8c:a4:d9:07:b2:29:15:
         0a:0d:37:a3:4c:0f:91:ff:a3:3b:d2:bf:f4:76:e8:95:ce:e2:
         fe:84:a6:ac:70:d2:bb:b3:dd:54:4f:04:7f:68:f8:93:d0:4e:
         a2:de:92:54:d1:04:12:6e:2f:91:16:6a:46:1c:13:91:04:f7:
         4c:ee:63:33:32:f3:70:91:8c:31:70:c1:db:13:2b:88:44:a5:
         ce:a8:32:b0:e4:f5:16:11:3a:35:75:95:40:0f:6f:64:57:b8:
         53:b1:d6:6f:e4:22:47:72:e8:08:b7:2f:e1:c3:cd:53:c2:62:
         f1:9f:09:fc:0c:5b:e1:ec:2c:8e:52:6d:6a:24:ee:16:2c:7f:
         d7:29:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:08 2026 by rpki-client