Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/34C33C4EB91811F08E5A6560C4F9AE02.roa
File:                     34C33C4EB91811F08E5A6560C4F9AE02.roa (raw, json)
Hash identifier:          Xure6mLQ3CzXKf1KwiBulTLWjJsC1ttRx8LzMEfQdr0=
Subject key identifier:   18:89:9D:5D:5F:14:EA:2F:83:BF:30:85:8C:D0:54:4D:30:59:E8:8C
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C2D
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/34C33C4EB91811F08E5A6560C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:43 +0000
ROA not before:           Tue 04 Nov 2025 00:50:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152671
IP address blocks:        210.117.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15405 (0x3c2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Nov  4 00:50:06 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4af13-30ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:11:eb:0b:48:f1:7b:41:1a:f0:13:ec:26:
                    1d:49:11:86:ad:9e:d7:3d:48:33:21:29:ef:1e:9e:
                    7d:01:ac:88:cf:2e:42:85:18:5e:82:cf:7e:66:2b:
                    46:f4:c9:df:a5:ee:19:61:f4:16:2f:53:11:4d:41:
                    f3:83:85:11:e6:30:f8:00:15:a5:8b:98:d9:10:d8:
                    16:ca:d3:15:66:b9:f0:3e:a9:ac:89:af:c6:b2:92:
                    9a:1b:da:1b:0e:ae:7a:7d:88:4b:2f:cd:c8:c9:14:
                    eb:56:70:d5:97:d8:8b:5a:1b:5b:a9:78:57:ca:05:
                    db:d8:07:33:c7:7a:b3:d8:d4:7f:e7:16:ef:85:c9:
                    22:99:14:85:dd:65:67:d4:fe:19:eb:7d:70:20:69:
                    ea:48:ed:a9:2a:22:84:a3:ef:b5:62:9f:ea:25:bb:
                    7f:59:64:78:6f:67:62:33:8c:a9:ef:6e:f9:28:1d:
                    c6:d6:66:db:a4:b2:74:43:ba:43:cf:d2:d6:55:55:
                    02:7c:18:cc:9f:2e:3b:36:96:b6:e6:78:14:3e:39:
                    86:9c:24:38:ed:66:e6:ce:f1:8d:22:14:28:23:8f:
                    43:76:bf:91:4f:a5:f5:ef:99:b0:74:ae:d4:21:36:
                    48:83:17:a5:2a:a1:95:f8:62:43:ce:17:94:c2:fb:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:89:9D:5D:5F:14:EA:2F:83:BF:30:85:8C:D0:54:4D:30:59:E8:8C
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/34C33C4EB91811F08E5A6560C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.117.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2d:0f:fb:46:28:22:a7:95:5e:05:67:81:1d:c9:54:fc:3e:
         f4:c2:e9:34:04:e1:01:cd:87:3f:9f:87:7a:02:9b:f3:09:63:
         52:f4:25:fb:30:dd:63:70:68:a9:e7:65:82:81:1e:bb:f3:51:
         6b:7d:43:8c:d4:7f:62:d9:56:a9:57:17:6b:7d:0e:bd:5b:e7:
         c3:75:97:69:08:16:d8:37:2c:29:d4:3b:d7:6e:ab:b4:b7:b8:
         9e:43:ae:0c:a9:2f:27:c3:f4:44:87:c0:36:f9:8f:ba:e6:2b:
         4a:e6:4a:e0:df:f0:34:32:e8:c3:12:3d:d9:dd:a4:4a:6e:2f:
         ef:f3:88:e0:36:77:1a:44:68:29:b3:df:ff:7b:67:d2:57:6d:
         a4:0a:44:a5:c2:d1:5e:24:90:7b:ab:5f:35:66:ef:cb:b6:09:
         9a:89:97:01:cd:08:85:93:44:53:c3:b4:a0:65:95:13:69:10:
         62:ba:df:8e:7e:86:70:4c:6e:1e:c9:20:80:a0:7d:90:35:10:
         13:bc:a1:ab:63:0f:30:02:10:81:cb:7f:ba:75:f5:6c:e7:57:
         fe:5b:c5:d9:83:b0:5c:75:ef:b1:90:1a:10:f4:c4:6f:2f:78:
         04:14:aa:02:b3:ee:b6:45:7c:8a:40:fe:fd:28:44:6b:e4:c0:
         79:dd:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:27 2026 by rpki-client