Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F8784A5E36DF11ECA0E1FC78C4F9AE02.roa
File:                     F8784A5E36DF11ECA0E1FC78C4F9AE02.roa (raw, json)
Hash identifier:          0naz5P5hIjR9Vm4Wy+WZ5yv0/sjgJK0Gya+pqsc4A2g=
Subject key identifier:   C7:98:59:03:2F:9B:81:9B:F7:9C:65:16:92:32:E0:BE:7F:B9:46:D4
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B26
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F8784A5E36DF11ECA0E1FC78C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:27:52 +0000
ROA not before:           Mon 14 Jul 2025 14:50:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133328
IP address blocks:        110.170.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15142 (0x3b26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49338-bf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:8c:e3:ee:68:de:c0:b9:8a:b0:d7:37:37:
                    7a:21:a8:5a:67:7b:c5:9b:50:f2:f9:76:a3:49:0b:
                    e4:5d:01:f3:1f:27:03:5f:b5:20:28:19:4f:f6:f9:
                    ac:d8:79:cd:a6:0c:d0:32:e0:0c:e8:90:15:a5:f1:
                    84:16:6e:0d:a4:49:60:7a:58:2a:ca:e3:af:87:de:
                    ae:18:4a:22:cf:be:95:52:48:53:68:36:ea:08:42:
                    41:41:bf:ee:11:c5:09:0f:ac:78:0d:12:fb:ba:5f:
                    00:b5:fa:7a:34:af:19:13:0a:29:ad:e7:3b:82:c3:
                    6e:20:8f:5c:7f:a0:8e:44:b5:d2:31:75:ab:bb:1c:
                    ab:13:a8:60:ef:da:d7:97:d9:1a:eb:06:d1:cd:e1:
                    f5:94:f6:ea:1e:cc:47:e7:90:f1:9c:39:87:9e:59:
                    3b:0b:6a:cc:cc:b2:7c:69:9f:01:c3:11:68:d0:ea:
                    a1:b2:e8:2d:db:5d:d4:44:d9:0e:31:b4:7c:c3:1b:
                    f5:13:5a:cc:22:6a:21:1d:73:45:27:3e:82:a5:c3:
                    a5:56:a2:53:2a:f9:20:96:d6:e9:9d:a0:0c:40:20:
                    d9:8c:42:b9:4c:88:df:c9:34:14:6f:fd:72:3b:0e:
                    27:2d:f9:de:dc:2a:50:e6:72:7e:64:1a:4a:49:44:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:98:59:03:2F:9B:81:9B:F7:9C:65:16:92:32:E0:BE:7F:B9:46:D4
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F8784A5E36DF11ECA0E1FC78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:96:bc:fd:54:37:f7:67:f0:c1:fb:e1:1e:56:08:c8:b5:52:
         d9:0f:b4:e7:f0:42:26:e9:5e:0f:bb:19:27:fb:e5:e4:dd:96:
         3c:2d:b7:f8:b2:e6:bf:20:5a:46:04:99:71:17:ee:ab:3e:6b:
         b4:a8:09:03:47:76:47:61:66:38:e0:f2:75:dd:8f:1b:17:a2:
         00:a0:e8:63:7e:e4:3b:35:75:01:4c:da:5c:01:35:3f:b8:53:
         8d:6a:e2:6d:27:61:20:56:86:3f:dd:f7:0a:fe:b0:44:eb:1a:
         bc:35:75:b4:56:71:ed:0d:a4:f2:ff:88:43:95:87:26:8b:46:
         02:eb:92:5e:49:9f:7c:e1:90:86:6a:88:41:a5:51:61:ce:79:
         b5:2a:59:e2:b8:7d:f8:3d:3b:54:b3:bd:cb:63:17:a6:ea:36:
         32:77:a5:07:69:c0:55:30:6b:db:cc:1a:48:34:7e:3b:97:a1:
         31:6a:cb:fc:10:d0:3f:d6:22:51:57:e3:08:0d:36:f0:75:8b:
         3a:e3:0b:c3:01:44:dd:84:80:98:14:75:12:84:52:5f:64:61:
         91:a0:77:f7:11:9c:ca:f7:c0:37:97:39:90:c0:57:51:f1:5b:
         23:54:a2:7d:d2:db:fa:02:4c:23:eb:81:d1:d3:23:a5:07:66:
         f3:8c:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:00 2026 by rpki-client