Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/37B113181E0111E9A590C837C4F9AE02.roa
File:                     37B113181E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          3/uf/PiJkPmou7ws7yGKJy/57SAACCfLAdivafvRXcg=
Subject key identifier:   0C:EF:20:83:EA:A0:F0:5D:6A:66:6E:DA:24:60:30:55:B7:F5:61:5F
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BE8
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/37B113181E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:07 +0000
ROA not before:           Mon 06 Jul 2026 15:11:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135670
IP address blocks:        119.46.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15336 (0x3be8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc58b-152a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a1:35:59:5d:56:af:41:0b:c7:dc:43:c3:04:
                    9c:71:ba:27:93:aa:55:a0:72:10:4a:c2:72:00:8f:
                    7d:89:88:4c:27:f5:22:57:ce:5e:18:82:e1:2c:6d:
                    56:04:4b:6d:bc:09:0b:66:99:97:c2:74:d2:97:5d:
                    3a:2b:03:76:41:bd:d7:07:55:39:99:27:fd:dd:3b:
                    12:91:5a:78:31:4c:ae:d0:c1:99:89:ac:8a:f8:5e:
                    43:50:99:c5:5e:97:f5:ca:78:47:b4:92:48:7e:35:
                    3a:86:ed:d4:c0:6c:b0:fd:3a:a8:ef:31:7f:d6:1e:
                    4e:6e:90:e1:e8:c0:a0:3f:06:be:83:9f:46:b6:c7:
                    4a:28:a9:73:c8:01:1d:c0:d4:2d:02:49:db:d3:38:
                    55:54:0e:e2:03:5d:6b:aa:95:51:34:9d:89:44:99:
                    9e:43:fd:6c:28:b4:9c:cb:00:5c:1f:cd:12:8f:f5:
                    8b:15:10:57:02:97:56:8e:01:e2:11:ef:83:73:1c:
                    ba:01:0d:a3:2c:63:4c:fc:8c:51:d9:ed:c2:7a:9a:
                    d0:9b:0b:c3:49:97:4d:61:b6:f9:47:c9:9a:7f:77:
                    5c:87:73:a2:e0:90:28:4c:6a:af:80:e2:eb:2b:d9:
                    f7:0b:df:65:96:8d:55:b0:9c:48:d1:49:15:e2:3d:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:20:83:EA:A0:F0:5D:6A:66:6E:DA:24:60:30:55:B7:F5:61:5F
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/37B113181E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:25:11:d8:f3:64:48:d4:82:fb:8c:7a:56:19:cf:04:c5:
         a3:e9:06:85:31:45:1c:a0:54:fe:20:12:f1:f6:b6:3a:15:2d:
         f8:f3:39:09:34:6a:7a:a7:15:8a:9d:64:dd:47:2b:11:81:91:
         32:86:d8:c8:d0:6b:7c:40:ca:3e:70:9d:15:3c:8a:3d:e4:03:
         c0:5c:7b:4d:68:21:25:bd:62:df:e0:11:d9:56:31:31:12:30:
         90:91:b1:23:6a:db:f8:03:d9:32:e2:47:1c:ee:51:5d:89:6c:
         ac:e5:25:f3:54:9a:89:36:2b:0f:cc:82:cf:df:36:44:fb:86:
         e1:e2:9e:99:4a:22:fb:08:35:04:0a:7f:ad:a3:da:3d:e2:02:
         74:4f:8e:bd:59:cb:ec:4d:8c:fe:f4:1a:ab:16:83:b2:ac:07:
         de:25:62:c0:9f:a2:ce:ac:6f:94:5a:fe:04:e9:ec:a0:18:48:
         b0:69:7f:47:dc:35:b4:0f:03:c4:0d:f8:f0:30:de:6f:4f:a0:
         81:ae:e4:48:d5:b5:19:c5:30:9f:d0:b3:db:c0:a4:9d:f7:cc:
         c1:e7:b2:0a:49:13:4b:ff:a4:c5:30:b1:e0:04:11:88:30:e6:
         9b:9f:09:74:b9:1d:c1:9e:2d:81:f1:3d:0e:44:eb:bb:5f:5a:
         87:36:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:11 2026 by rpki-client