Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/E229C20A381311EEB4C10216C4F9AE02.roa
File:                     E229C20A381311EEB4C10216C4F9AE02.roa (raw, json)
Hash identifier:          28Jdt31+aAvlCdGKsospJot/3GeEckQAiQFKe0adSU4=
Subject key identifier:   C2:44:5C:0A:32:FB:4E:65:03:91:66:7F:62:5C:CD:0A:57:3D:E2:BA
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B3E
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/E229C20A381311EEB4C10216C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:13 +0000
ROA not before:           Mon 14 Jul 2025 14:50:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151040
IP address blocks:        110.170.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15166 (0x3b3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:42 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4934d-f4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:f0:af:8f:f3:64:1f:e9:98:fd:9d:4b:5f:
                    5d:cf:a7:4e:8d:2d:f3:93:a1:13:4e:54:77:d6:36:
                    1c:4d:19:89:e4:9a:45:50:2f:89:ad:82:b1:37:46:
                    3b:de:f5:ed:4a:cd:a9:ba:43:70:6a:a3:d5:bb:66:
                    45:be:14:41:f1:92:d7:6f:bf:4e:37:8f:c3:58:06:
                    d2:a8:64:03:38:2e:82:c0:ac:c7:86:bd:cf:89:dc:
                    40:16:0c:13:71:f3:7b:c6:4d:94:45:fc:76:96:d3:
                    48:64:25:af:64:bb:36:8c:2a:22:a2:c1:58:f0:3b:
                    98:69:bd:29:6f:e2:72:14:28:72:86:a7:6a:8e:3d:
                    ba:65:64:68:ef:89:b6:32:48:f5:9b:e9:b8:34:ce:
                    c3:72:30:e8:a3:9f:7c:64:66:13:92:e3:54:98:d3:
                    ec:d0:b6:5d:ed:eb:1a:aa:c3:f5:c0:b2:9d:7d:1c:
                    b5:98:6e:16:c8:5f:a2:70:07:98:f7:bc:91:89:d2:
                    cd:72:fb:b4:cc:85:f4:1d:06:f7:57:b2:f7:3d:5b:
                    45:d5:e3:f0:8d:c3:0e:9c:83:bf:e2:a3:c3:79:50:
                    b9:36:3e:cc:8e:56:f3:5e:27:46:14:15:a5:6d:16:
                    5b:3b:78:81:ae:58:46:57:a6:89:50:16:fc:d3:2b:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:44:5C:0A:32:FB:4E:65:03:91:66:7F:62:5C:CD:0A:57:3D:E2:BA
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/E229C20A381311EEB4C10216C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:38:15:b4:9f:25:43:84:bd:ac:a5:4d:6d:96:eb:10:0c:6b:
         b3:74:d9:64:ca:3c:36:bc:39:72:d9:ab:d1:8b:92:09:44:9c:
         b2:b5:0b:78:ec:be:4f:c1:ad:03:0e:14:3a:84:cb:7d:f0:dc:
         fa:63:56:1b:e1:f8:98:d8:0a:b0:21:3d:c7:ea:d4:04:28:5f:
         22:d4:66:04:35:12:2b:b8:8b:e6:2b:7a:bd:21:f7:56:48:ad:
         c2:d8:48:cd:20:13:74:f9:94:19:fa:7b:17:96:65:86:db:84:
         7c:38:da:cd:e3:7e:92:3c:5c:ec:7c:69:cb:cd:04:d7:1d:73:
         a2:f4:67:22:ed:45:d8:e5:17:e8:86:27:90:3b:0c:eb:6e:21:
         ab:c7:7e:62:99:75:34:c7:ea:11:ba:44:aa:cb:a1:f1:11:6a:
         61:ac:e4:f2:32:09:1d:d9:fb:73:04:00:78:08:16:06:eb:e2:
         39:3e:a4:a9:45:30:05:9b:e2:84:82:23:33:69:62:71:64:ea:
         bd:08:dd:1a:7f:95:2e:77:69:15:0c:ff:61:fc:df:d3:13:8f:
         9b:ef:23:84:31:05:c9:08:29:cc:ba:81:ec:05:3f:8c:9a:30:
         a4:e5:78:f0:54:69:d4:4d:e8:55:b5:4a:38:47:6c:df:e9:aa:
         ea:e8:62:dc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDQyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM0ZC1mNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfrwr4/zZB/pmP2dS19dz6dOjS3zk6ETTlR31jYcTRmJ5JpFUC+JrYKxN0Y7
3vXtSs2pukNwaqPVu2ZFvhRB8ZLXb79ON4/DWAbSqGQDOC6CwKzHhr3PidxAFgwT
cfN7xk2URfx2ltNIZCWvZLs2jCoiosFY8DuYab0pb+JyFChyhqdqjj26ZWRo74m2
Mkj1m+m4NM7DcjDoo598ZGYTkuNUmNPs0LZd7esaqsP1wLKdfRy1mG4WyF+icAeY
97yRidLNcvu0zIX0HQb3V7L3PVtF1ePwjcMOnIO/4qPDeVC5Nj7MjlbzXidGFBWl
bRZbO3iBrlhGV6aJUBb80yv/8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMJEXAoy
+05lA5Fmf2JczQpXPeK6MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRTIyOUMyMEEz
ODEzMTFFRUI0QzEwMjE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAbqrnMA0GCSqGSIb3DQEBCwUAA4IBAQAFOBW0nyVDhL2spU1tlusQ
DGuzdNlkyjw2vDly2avRi5IJRJyytQt47L5Pwa0DDhQ6hMt98Nz6Y1Yb4fiY2Aqw
IT3H6tQEKF8i1GYENRIruIvmK3q9IfdWSK3C2EjNIBN0+ZQZ+nsXlmWG24R8ONrN
436SPFzsfGnLzQTXHXOi9Gci7UXY5RfohieQOwzrbiGrx35imXU0x+oRukSqy6Hx
EWphrOTyMgkd2ftzBAB4CBYG6+I5PqSpRTAFm+KEgiMzaWJxZOq9CN0af5Uud2kV
DP9h/N/TE4+b7yOEMQXJCCnMuoHsBT+MmjCk5XjwVGnUTehVtUo4R2zf6arq6GLc
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:19 2026 by rpki-client