Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/EEF965C0989011EE982B5B23C4F9AE02.roa
File:                     EEF965C0989011EE982B5B23C4F9AE02.roa (raw, json)
Hash identifier:          KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=
Subject key identifier:   CA:66:39:22:C8:8D:00:1E:63:73:3D:9B:47:3C:3E:AB:A4:F3:83:4C
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       01B5
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/EEF965C0989011EE982B5B23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:05:57 +0000
ROA not before:           Tue 27 Jan 2026 03:22:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     38136
IP address blocks:        210.87.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Jan 27 03:22:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a439b4-ab3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:52:8c:38:a0:13:c7:9e:15:7c:82:18:1a:
                    15:f6:4d:a8:e7:f4:ac:73:9c:0c:bd:76:5c:80:83:
                    b2:93:c6:7b:ce:65:f2:80:1a:0a:08:1e:00:70:e9:
                    8d:2a:a1:e2:a6:af:23:bd:c6:b7:fb:5f:f6:92:f4:
                    e5:62:73:6d:5e:dc:2e:83:44:0b:66:ea:c5:44:f8:
                    d7:f9:f0:0b:0e:5a:50:02:6c:65:5c:ab:ba:78:68:
                    bf:81:39:2b:2e:a6:90:81:5d:4e:ff:b6:be:43:f6:
                    54:d3:96:f6:4c:ae:7d:12:7d:86:6c:29:d9:46:7a:
                    64:65:dd:ca:b3:50:62:22:03:81:36:0a:2d:34:46:
                    ce:08:e8:ae:a0:f2:69:0c:bd:66:a1:69:88:68:5a:
                    7b:a5:85:09:24:25:ac:dd:8d:11:2f:af:63:6a:f0:
                    f3:6f:ad:29:96:04:da:96:c1:e8:47:7d:dc:cb:58:
                    c5:c6:f6:e9:58:38:d6:1f:a6:f8:15:e2:75:a4:e6:
                    55:4e:a3:f5:0e:16:89:c6:1d:49:2c:82:5a:cc:a1:
                    d4:e6:31:c7:ef:b1:c9:e3:cf:2e:ca:73:94:7a:15:
                    93:bd:8e:95:ce:fa:3f:04:99:ba:4e:b9:8c:7c:92:
                    d7:8e:c5:fc:0b:52:31:20:f3:29:70:08:6f:4e:02:
                    1e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:39:22:C8:8D:00:1E:63:73:3D:9B:47:3C:3E:AB:A4:F3:83:4C
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/EEF965C0989011EE982B5B23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:b7:a9:89:c1:e3:ab:7e:f6:dd:db:cd:67:7b:d1:1d:1f:
         bf:b6:d8:1e:53:a4:52:5a:05:1a:e2:2a:5e:bc:f2:88:d8:59:
         b5:d8:90:c1:62:e5:78:3c:50:8d:d4:5f:e0:8f:1e:c6:81:5a:
         63:f3:82:84:1e:bb:41:1a:21:97:29:08:fe:d2:7a:34:7a:be:
         98:b7:5d:ce:c2:eb:6d:38:f8:9d:38:33:63:2f:db:94:d1:9e:
         cb:8a:49:68:ec:72:a8:1a:e5:cf:58:a4:a2:d0:6b:6d:1a:7b:
         95:e8:ea:88:55:8f:91:6a:76:96:e3:e6:22:29:92:28:3c:cb:
         ce:c3:d8:6e:b2:7a:fa:1a:51:e4:9e:08:9d:67:0b:cf:9d:f8:
         ce:3b:00:5b:dd:58:56:d4:b4:66:a5:16:81:02:3f:58:cf:32:
         3f:7f:08:38:4a:21:57:f9:91:9f:18:16:5b:e9:5b:a1:80:65:
         0b:36:2d:4a:9a:16:4e:0d:2c:1e:19:cf:35:75:37:f9:ec:66:
         2d:e0:8f:b6:79:96:c4:04:83:51:d6:ed:9e:20:23:8c:f7:d4:
         6e:ed:3d:16:aa:02:db:0e:79:2c:eb:93:e3:32:f3:88:72:bc:
         00:f5:3c:fc:08:f2:20:b4:ca:d3:a0:43:62:b9:5a:39:d9:19:
         c2:18:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:17 2026 by rpki-client