Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/7E43D97816DD11F18A14954A343D8C67.roa
File:                     7E43D97816DD11F18A14954A343D8C67.roa (raw, json)
Hash identifier:          Sh1P0Dpi0gzhoXiIUXSmjEQ8/VuarxM29H03qaSJnUA=
Subject key identifier:   84:E9:CD:8E:47:9D:9C:35:5E:F1:70:3B:F5:D1:97:30:2A:A2:E8:7B
Certificate issuer:       /CN=A9114ECC/serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Certificate serial:       67
Authority key identifier: 42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/7E43D97816DD11F18A14954A343D8C67.roa
Signing time:             Wed 09 Sep 2026 08:58:02 +0000
ROA not before:           Wed 09 Sep 2026 08:58:02 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154236
IP address blocks:        121.0.58.0/23 maxlen: 23
                          121.0.58.0/24 maxlen: 24
                          121.0.59.0/24 maxlen: 24
                          2402:2c60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
                          rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114ECC, serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
        Validity
            Not Before: Sep  9 08:58:02 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa11f9a-3226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:ee:61:cb:ae:37:12:67:67:b2:ab:2b:24:
                    f8:92:c3:47:73:c5:da:2a:0b:52:de:6c:01:58:16:
                    75:c8:f4:ee:2d:7f:7b:4a:08:a1:2d:94:50:9b:be:
                    62:73:37:6b:d1:6b:df:3e:a7:ac:18:73:16:f7:32:
                    c2:70:c7:8f:d3:3c:47:d5:79:61:5c:33:51:33:20:
                    2a:58:79:7b:50:08:2a:f9:c4:67:fd:3f:69:cd:50:
                    1c:68:3b:a0:30:17:26:bf:12:7a:fe:e3:e9:5c:18:
                    38:40:44:5c:57:54:1c:72:52:37:eb:4d:8a:6c:27:
                    b6:d6:3b:e4:f3:c1:32:d5:ec:4b:bd:d7:0d:ac:7a:
                    10:ec:aa:bc:54:22:52:04:38:2d:cc:e6:fb:52:5e:
                    ce:ec:dc:08:22:ce:0c:47:31:de:b4:0c:e5:04:d2:
                    ea:33:d9:95:e3:3b:41:92:b4:d2:f8:96:3c:de:d2:
                    c3:15:18:6d:c5:b2:36:ce:95:87:5d:7d:59:73:a3:
                    d7:4e:91:d7:1e:62:23:d4:fb:a0:c9:6a:43:9b:08:
                    e6:77:61:e8:7c:ca:51:8b:66:85:f7:ab:2c:9d:1a:
                    95:f3:e2:22:1f:ab:72:64:7f:f0:c4:d7:2e:73:50:
                    97:bd:2d:43:0d:72:11:2c:b5:d6:53:c4:21:c9:b4:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:CD:8E:47:9D:9C:35:5E:F1:70:3B:F5:D1:97:30:2A:A2:E8:7B
            X509v3 Authority Key Identifier:
                keyid:42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/7E43D97816DD11F18A14954A343D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.0.58.0/23
                IPv6:
                  2402:2c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:61:30:80:16:6c:e7:d4:45:68:b7:44:17:d7:ae:89:4b:
         e7:86:7c:b8:5a:d1:1c:3c:ae:b5:94:17:93:d1:09:3c:c5:d9:
         71:9b:1e:44:67:40:1f:09:c4:7d:5c:83:a4:20:00:91:17:9e:
         55:0c:8b:e1:d7:f6:36:c6:7c:6a:a0:cd:bf:51:31:25:ed:62:
         3d:3d:5c:0d:8b:7f:85:65:9b:b0:6a:b0:45:88:6d:63:19:85:
         e8:f3:c1:c6:05:27:41:be:61:a2:37:f9:56:62:54:c1:66:a2:
         96:a7:6a:89:fa:6d:88:a3:77:2e:18:98:23:7c:1c:12:9d:76:
         b6:6b:a7:b8:35:c8:53:95:7c:91:1f:44:b3:8d:a4:c9:7c:22:
         28:d5:75:bc:e1:e7:2b:07:e3:24:44:97:89:dc:a4:0d:a6:d9:
         c6:75:f3:fc:71:1f:f5:01:e5:17:51:0e:54:57:ee:79:52:09:
         ea:fe:c9:ff:ea:88:c5:91:5a:69:52:70:c6:c5:c1:5c:e2:57:
         86:1a:87:a0:f8:9b:d5:5f:80:42:31:cc:35:9c:d9:23:87:30:
         08:b0:25:89:0a:03:ae:1a:48:2a:b5:b8:f5:7a:16:2d:b8:ed:
         df:45:c8:9a:84:12:bc:6b:83:d7:71:30:55:be:e3:8b:2a:e0:
         5b:81:05:2b
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NEVDQzExMC8GA1UEBRMoNDIxNDI0ODYzRUZDNkY5QkIyMUEzMjFGQkQ1MDM2NjFF
NEE4QTNGRDAeFw0yNjA5MDkwODU4MDJaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTExZjlhLTMyMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEtu5hy643EmdnsqsrJPiSw0dzxdoqC1LebAFYFnXI9O4tf3tKCKEtlFCbvmJz
N2vRa98+p6wYcxb3MsJwx4/TPEfVeWFcM1EzICpYeXtQCCr5xGf9P2nNUBxoO6Aw
Fya/Enr+4+lcGDhARFxXVBxyUjfrTYpsJ7bWO+TzwTLV7Eu91w2sehDsqrxUIlIE
OC3M5vtSXs7s3AgizgxHMd60DOUE0uoz2ZXjO0GStNL4ljze0sMVGG3FsjbOlYdd
fVlzo9dOkdceYiPU+6DJakObCOZ3Yeh8ylGLZoX3qyydGpXz4iIfq3Jkf/DE1y5z
UJe9LUMNchEstdZTxCHJtH6jAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUhOnNjked
nDVe8XA79dGXMCqi6HswHwYDVR0jBBgwFoAUQhQkhj78b5uyGjIfvVA2YeSoo/0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUNDLzQ1Qjg5RTNDMTU5
QzExRjFCN0NGNEM3MjA2M0Q4QzY3L1FoUWtoajc4YjV1eUdqSWZ2VkEyWWVTb29f
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUWhRa2hqNzhiNXV5R2pJZnZWQTJZZVNvb18wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEVDQy80NUI4OUUzQzE1OUMxMUYxQjdDRjRDNzIwNjNEOEM2Ny83RTQzRDk3ODE2
REQxMUYxOEExNDk1NEEzNDNEOEM2Ny5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAF5ADowDQQCAAIwBwMFACQCLGAwDQYJKoZIhvcNAQELBQADggEBADoh
YTCAFmzn1EVot0QX166JS+eGfLha0Rw8rrWUF5PRCTzF2XGbHkRnQB8JxH1cg6Qg
AJEXnlUMi+HX9jbGfGqgzb9RMSXtYj09XA2Lf4Vlm7BqsEWIbWMZhejzwcYFJ0G+
YaI3+VZiVMFmopanaon6bYijdy4YmCN8HBKddrZrp7g1yFOVfJEfRLONpMl8IijV
dbzh5ysH4yREl4ncpA2m2cZ18/xxH/UB5RdRDlRX7nlSCer+yf/qiMWRWmlScMbF
wVziV4Yah6D4m9VfgEIxzDWc2SOHMAiwJYkKA64aSCq1uPV6Fi247d9FyJqEErxr
g9dxMFW+44sq4FuBBSs=
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:50:17 2026 by rpki-client