Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/B11136C4BA5411F0A7CF623BC4F9AE02.roa
File:                     B11136C4BA5411F0A7CF623BC4F9AE02.roa (raw, json)
Hash identifier:          LIlWHZAc6rG0kufaPAbURMHDlVxBgM4q9rg7vy2eD1w=
Subject key identifier:   61:8D:E5:2B:08:BB:6B:3B:B8:BF:2D:A5:B5:FA:8E:29:8A:6D:61:F3
Certificate issuer:       /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial:       0B62
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/B11136C4BA5411F0A7CF623BC4F9AE02.roa
Signing time:             Fri 06 Nov 2026 19:36:42 +0000
ROA not before:           Fri 06 Nov 2026 19:36:42 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     138995
IP address blocks:        137.220.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
                          rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2914 (0xb62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
        Validity
            Not Before: Nov  6 19:36:42 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6aee2c4a-d1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:8c:55:d1:ce:66:c0:a6:37:f0:9d:a3:18:
                    21:60:88:86:8f:0b:60:9c:e4:14:87:15:1d:e7:be:
                    6c:e0:4f:64:ef:9d:cb:e1:7b:66:38:98:1a:a5:a2:
                    b0:2a:bb:91:3d:d7:5c:ed:73:a0:71:31:e2:7b:da:
                    a9:e7:12:6b:fd:10:ac:44:3e:28:be:b2:9d:b6:62:
                    5d:2e:b5:36:ee:6d:78:0a:fc:73:3c:19:63:65:e7:
                    97:c4:6e:9b:02:7b:ce:8f:29:8e:ee:29:18:6b:5e:
                    08:70:26:9f:46:db:d2:b9:69:85:03:38:d4:82:6e:
                    87:60:8c:42:0a:62:ef:ba:fe:cb:d6:40:97:18:d2:
                    5f:06:f5:62:e7:7f:05:42:15:c3:b8:8e:b3:13:e1:
                    ab:7e:b9:aa:40:a5:3f:36:36:81:59:cc:a2:2c:00:
                    19:68:a0:24:a5:9b:ce:9b:9e:ce:46:22:71:d9:4b:
                    05:c5:b3:55:5c:8e:dd:4a:c3:ac:c9:8d:51:a9:fb:
                    75:56:fd:5e:01:34:e0:11:2c:cc:31:0a:d9:aa:b7:
                    37:67:be:f3:5b:f2:86:9c:28:6b:f9:2f:e3:7f:79:
                    3e:82:72:9c:58:17:e9:4d:72:b7:97:e8:39:7b:18:
                    0c:5d:de:31:13:cb:58:08:07:0b:72:9f:98:52:58:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8D:E5:2B:08:BB:6B:3B:B8:BF:2D:A5:B5:FA:8E:29:8A:6D:61:F3
            X509v3 Authority Key Identifier:
                keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/B11136C4BA5411F0A7CF623BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.220.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:3a:4d:33:c2:a9:27:38:e8:be:4a:40:d1:e0:02:6c:49:9d:
         72:5c:5b:85:56:48:5a:15:27:7d:31:8e:27:43:5a:49:89:cd:
         a7:4b:8e:38:4b:f7:e0:2a:8b:1e:12:29:2b:58:86:40:43:82:
         c7:aa:b9:08:7d:76:94:49:6b:e0:91:87:78:43:97:0b:26:26:
         b5:57:c5:2c:d7:83:11:21:d0:12:a3:a7:01:a8:6e:be:c0:00:
         b8:0e:ed:a1:50:48:4c:e9:c2:ec:d5:a1:29:e9:5d:5f:c8:83:
         04:84:ec:72:85:86:1b:95:8b:d6:92:bf:9a:ea:07:3e:90:96:
         15:bf:2a:1c:98:70:db:48:fe:fc:31:92:1b:6b:17:b3:5d:c7:
         70:8b:67:67:1e:91:fe:cf:9b:77:9b:d1:b0:1b:38:69:02:e5:
         b4:ec:85:36:d3:69:4a:4a:67:14:a2:af:f5:0d:c2:73:10:28:
         1e:a7:8b:c3:d3:a2:eb:90:b1:01:a8:80:e4:cf:a2:13:37:ce:
         80:2a:ab:1c:83:c8:7b:83:68:6f:d1:e5:65:ce:ea:6d:21:4f:
         56:6f:ab:35:b9:25:41:7a:f1:e3:c5:fb:a1:9a:42:c9:61:4c:
         48:a0:0f:d3:1f:b7:86:6a:73:b0:84:74:54:ca:70:1c:02:58:
         7c:cb:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:34 2026 by rpki-client