Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D0E6D41CBD3411EB88DAA22AC4F9AE02.roa
File:                     D0E6D41CBD3411EB88DAA22AC4F9AE02.roa (raw, json)
Hash identifier:          SnsGdJxSrHizwDy+8qGA6Fv97RklD/gPv5MMdJJEEbE=
Subject key identifier:   6F:6E:14:9E:C6:E0:29:4D:A2:89:D2:42:BA:A7:BF:36:B5:7F:29:A8
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C19
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D0E6D41CBD3411EB88DAA22AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:12:44 +0000
ROA not before:           Mon 06 Jul 2026 15:12:44 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38718
IP address blocks:        110.170.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15385 (0x3c19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:12:44 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5ec-b2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:dd:fd:d9:48:e3:ec:c1:fe:6e:03:c1:10:
                    f0:ca:f8:be:e2:79:32:94:2d:81:f7:a3:cf:a0:3c:
                    34:7e:3a:e1:1e:a6:fc:c6:6b:bf:c5:97:76:fb:32:
                    7f:d4:2c:1d:10:c2:b9:cc:05:f7:6f:9b:0c:a6:0a:
                    5f:df:56:70:06:99:a1:a2:f5:18:ac:54:7b:8d:17:
                    b9:9f:ab:5e:69:aa:5a:30:69:3b:d0:3a:4a:a9:04:
                    2a:0c:d6:99:b3:fb:eb:a3:7b:6a:f6:a8:0b:0d:e2:
                    c2:19:c3:3e:8b:14:09:4c:d7:a5:78:4b:27:2b:29:
                    96:af:fc:74:da:7f:50:f2:04:00:09:1e:73:1a:55:
                    3d:e1:8c:1e:65:c8:83:58:a3:ad:51:05:fc:1c:4f:
                    0c:c8:a2:24:08:d6:88:c0:5e:b6:84:e4:8e:86:a2:
                    cb:d1:9d:21:52:bd:5a:27:ad:32:8c:29:10:63:d6:
                    e7:68:a6:5f:20:39:37:bd:73:bb:cf:56:0c:53:7e:
                    72:2f:b7:6f:2c:12:fc:1f:d7:f7:7c:aa:e3:78:81:
                    4d:5d:8c:38:34:a0:d7:10:fd:81:38:a3:ea:c9:9c:
                    00:57:71:40:4e:c8:c9:6e:51:27:03:00:b1:89:95:
                    b5:44:92:2f:49:01:d3:95:09:91:98:09:21:8f:b3:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6E:14:9E:C6:E0:29:4D:A2:89:D2:42:BA:A7:BF:36:B5:7F:29:A8
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D0E6D41CBD3411EB88DAA22AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:80:1f:70:83:1d:f3:cc:87:3d:41:c9:bc:90:8d:df:79:8f:
         d4:fd:df:8a:81:ca:5c:36:6b:f7:15:31:ae:bf:bb:e4:18:c2:
         2b:90:f8:57:63:e2:87:a8:53:5e:af:de:58:e3:25:81:53:2e:
         95:57:fa:50:0a:d8:cc:af:68:3a:f2:9d:2d:29:ad:a3:2a:35:
         03:5e:1e:8e:d9:38:bb:93:b0:9d:c1:0d:60:c9:35:84:e1:2d:
         8c:64:8c:15:ea:74:fb:ff:2e:46:d6:b5:ae:04:5f:bd:54:1f:
         47:1d:b3:6d:60:b2:1d:ef:a4:b4:a6:90:65:4d:26:81:5c:ab:
         34:18:60:83:c9:dc:6a:3e:09:75:ca:0c:ad:e3:b1:07:f0:bc:
         ef:08:1b:52:95:a0:59:fa:20:98:d7:01:e1:dc:f4:7b:23:67:
         bd:d4:e0:64:5f:29:79:94:d9:20:40:e4:a2:df:e7:3b:1f:3c:
         b6:8d:0e:44:38:8b:8c:ec:e6:77:0f:59:70:74:5d:66:e0:98:
         ae:a4:a0:31:ff:d5:e0:22:1c:8c:50:35:09:6c:88:7f:bc:54:
         33:1b:d0:80:d5:0b:29:4b:f3:25:78:f2:d3:19:24:a9:d2:74:
         94:70:e1:8d:de:de:31:84:76:b9:a8:b9:17:d5:50:cf:52:9c:
         31:9e:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:17 2026 by rpki-client