Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DC2BF7FC484411ED8285CF43C4F9AE02.roa
File:                     DC2BF7FC484411ED8285CF43C4F9AE02.roa (raw, json)
Hash identifier:          XSPsy/5KdzSeQJjfTed4qoAarSatzZvdVq0mtuk2vUM=
Subject key identifier:   4B:A4:11:D3:DB:4C:93:1C:79:42:1D:9D:B8:D3:62:E1:1C:28:5E:3C
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B70
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DC2BF7FC484411ED8285CF43C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:56 +0000
ROA not before:           Mon 14 Jul 2025 14:51:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55790
IP address blocks:        210.86.219.0/24 maxlen: 24
                          2001:fb0:103c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15216 (0x3b70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49378-f92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:92:4c:03:a5:ee:53:29:5a:c2:74:ab:46:
                    49:d4:cb:d2:26:1e:23:d2:7d:7a:0d:3d:4a:5a:79:
                    4d:16:a6:e6:ba:1d:ae:e5:08:a8:c4:2e:5c:f3:98:
                    eb:49:33:db:a9:5c:00:b3:8e:ec:41:9e:4a:24:86:
                    7e:79:ae:94:2b:d5:52:e6:71:87:a9:65:3b:19:e7:
                    31:05:6d:65:6a:ed:e7:7f:ab:61:73:21:50:62:d4:
                    24:ab:d5:22:51:36:19:5a:a1:71:80:33:31:f2:28:
                    10:a2:49:2b:7c:20:bd:9b:ec:0b:24:6b:be:30:a1:
                    92:07:48:09:08:c9:35:05:11:0f:93:76:05:e5:14:
                    39:50:e3:12:14:5d:13:54:e7:71:db:c9:3c:fb:96:
                    0f:41:3f:82:ea:ee:07:eb:06:37:8c:2a:9e:7b:da:
                    c6:e9:87:52:a8:42:92:9c:ce:41:69:66:1e:0c:e0:
                    fe:17:94:b1:ca:06:89:9f:bf:e9:79:d1:8f:28:ee:
                    ef:30:58:a3:98:d1:93:17:f5:68:65:a2:bd:a7:8e:
                    d7:1a:b4:ef:8c:25:f7:ba:7c:52:95:35:15:28:1c:
                    36:43:0e:5b:51:26:29:94:aa:77:25:2d:89:04:6e:
                    c8:9e:fe:02:58:6b:69:76:e1:c8:57:b4:4d:79:73:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A4:11:D3:DB:4C:93:1C:79:42:1D:9D:B8:D3:62:E1:1C:28:5E:3C
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DC2BF7FC484411ED8285CF43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.86.219.0/24
                IPv6:
                  2001:fb0:103c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:00:ea:0c:48:ba:24:40:be:d9:0e:db:8d:81:ac:bb:91:f6:
         aa:00:65:8d:75:07:dd:35:f6:97:e3:81:79:23:4a:d1:f3:4e:
         4e:58:01:6c:02:9b:1f:d3:f4:85:df:62:0e:de:e7:2b:80:98:
         5f:fa:7d:5b:14:ef:09:2d:a0:34:c2:b8:11:9e:c8:a4:05:5e:
         91:b9:61:5e:ee:4b:11:04:9a:3d:35:87:94:0f:0b:ac:9d:76:
         54:e0:f0:8f:fb:8c:10:db:6b:48:0a:d4:3c:f2:ec:17:e5:24:
         a4:28:60:96:db:3b:56:97:39:da:ff:59:31:2e:67:09:f5:0d:
         b1:f9:6d:b5:cf:a3:6b:60:48:a9:d1:1a:7a:b8:7d:8a:15:95:
         3c:db:99:c8:5b:61:c7:61:f3:de:12:1b:77:1a:64:6a:11:07:
         cd:0c:a7:75:1a:65:f0:87:7d:99:13:15:92:a1:43:3c:53:05:
         ba:4b:1b:98:cf:dc:f1:2a:f8:44:4c:2c:39:18:12:3f:b1:ef:
         de:31:93:81:a4:6d:41:df:68:fd:fe:52:f2:41:ff:6a:43:fa:
         13:ea:50:55:4b:27:b7:98:63:d0:71:06:a9:4e:d9:e1:8c:29:
         c3:c5:61:6c:a9:18:d1:d9:25:c6:69:30:45:82:a7:43:fa:ae:
         07:aa:9d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:15 2026 by rpki-client