Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/0C90021C735211F1B7F2DC995DA30FBC.roa
File:                     0C90021C735211F1B7F2DC995DA30FBC.roa (raw, json)
Hash identifier:          /6wG8T7y5jphVIaQ27nmCxCQRFiPxmttix4a8H0tW50=
Subject key identifier:   C8:12:A7:F8:A6:65:5C:FA:3F:15:4C:09:7D:A1:0E:59:F7:21:4F:37
Certificate issuer:       /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial:       089B
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/0C90021C735211F1B7F2DC995DA30FBC.roa
Signing time:             Tue 22 Sep 2026 20:41:22 +0000
ROA not before:           Tue 22 Sep 2026 20:41:22 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        202.62.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
                          rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203 (0x89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D26, serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
        Validity
            Not Before: Sep 22 20:41:22 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ab2e7f2-ed7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:06:de:04:1e:0f:70:5a:4f:63:26:60:f4:
                    a7:09:e0:19:ab:36:d2:77:c4:57:6f:63:c2:b8:e4:
                    a3:c0:11:ac:de:3c:e6:8e:5e:52:a3:a8:7c:15:28:
                    4e:b4:dd:2b:9d:f1:b2:3f:b9:9f:d7:c4:ad:68:fd:
                    6d:4d:f6:28:d6:b1:4c:41:88:67:c8:55:7e:5a:87:
                    35:2a:d5:1f:a5:93:e8:ab:87:8e:96:cb:96:54:d8:
                    f6:c0:8f:be:54:93:d8:52:73:43:6d:75:12:ce:6d:
                    c6:3f:d0:f8:ac:00:b0:b4:9d:27:f3:33:91:14:dd:
                    89:b0:bd:0b:b8:1f:47:cf:a8:cf:11:b5:3f:a7:c6:
                    96:b7:a0:67:7c:0f:4d:55:c6:9d:0d:17:9c:ac:4b:
                    bd:e6:40:72:13:2b:df:04:9a:40:eb:ab:bd:05:f0:
                    c4:af:04:3a:22:5c:10:05:53:af:12:6e:6b:72:92:
                    58:59:17:cf:40:67:77:c1:10:a0:34:87:01:5f:ba:
                    fa:a6:d1:10:84:5f:d2:99:43:2a:67:d2:6d:b7:df:
                    c4:4b:8f:0d:bb:8f:46:4b:fe:19:89:2e:a0:57:11:
                    3a:2d:5d:7a:de:d0:59:9d:aa:36:fe:4c:11:a0:25:
                    6a:4a:96:6f:5e:74:6a:cf:be:87:95:8f:35:3c:4d:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:A7:F8:A6:65:5C:FA:3F:15:4C:09:7D:A1:0E:59:F7:21:4F:37
            X509v3 Authority Key Identifier:
                keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/0C90021C735211F1B7F2DC995DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:71:05:11:8f:02:e8:d4:3c:ef:68:11:39:48:d6:82:39:5c:
         4d:a5:08:39:5f:8f:20:ad:e1:7e:95:a4:bf:5a:96:ef:3d:77:
         d1:41:18:81:05:ff:2a:e6:80:83:7d:66:83:7e:9a:73:2c:52:
         ee:a2:cb:f3:06:df:b4:e2:3a:e8:d3:ce:a6:12:74:c9:34:c7:
         89:64:3a:c6:4c:8e:2e:20:c6:09:1d:37:61:66:b2:d5:d4:9a:
         0e:03:e4:fb:61:81:02:44:e0:69:de:af:67:c9:9a:50:96:44:
         f2:74:75:b5:49:fb:77:3e:e8:b1:5f:eb:66:67:a0:a0:fb:fc:
         e3:60:4b:94:21:4f:fd:e1:6c:e3:99:1e:2b:4f:c3:a0:e2:bf:
         3d:6a:27:9c:2c:59:0e:3f:38:83:79:37:00:77:9e:64:a0:61:
         ab:d1:be:1f:e1:65:74:8a:0e:ea:79:9d:d3:99:96:60:2c:d6:
         94:7d:4f:e2:7c:5b:0c:4f:f8:23:ee:d1:8f:c2:ce:2c:b4:21:
         79:2e:de:dd:35:5f:9e:db:21:f6:92:5d:d7:9e:19:46:1d:2b:
         63:86:e0:57:46:84:30:99:16:c6:83:55:7f:d9:ee:1b:43:5f:
         c2:c2:1f:ea:52:50:55:15:f9:c5:54:63:5b:62:62:e7:90:f3:
         83:d7:bf:07
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjFEMjYxMTAvBgNVBAUTKEU5NUVGRkMyOTQxNjU4NEJGMzdDMEM4RjlFQjczQjky
MEY5QTQxQUQwHhcNMjYwOTIyMjA0MTIyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIyZTdmMi1lZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJYG3gQeD3BaT2MmYPSnCeAZqzbSd8RXb2PCuOSjwBGs3jzmjl5So6h8FShO
tN0rnfGyP7mf18StaP1tTfYo1rFMQYhnyFV+Woc1KtUfpZPoq4eOlsuWVNj2wI++
VJPYUnNDbXUSzm3GP9D4rACwtJ0n8zORFN2JsL0LuB9Hz6jPEbU/p8aWt6BnfA9N
VcadDRecrEu95kByEyvfBJpA66u9BfDErwQ6IlwQBVOvEm5rcpJYWRfPQGd3wRCg
NIcBX7r6ptEQhF/SmUMqZ9Jtt9/ES48Nu49GS/4ZiS6gVxE6LV163tBZnao2/kwR
oCVqSpZvXnRqz76HlY81PE0PMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMgSp/im
ZVz6PxVMCX2hDln3IU83MB8GA1UdIwQYMBaAFOle/8KUFlhL83wMj563O5IPmkGt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQyNi8wN0YwODQ4MDE4
QUQxMUVCOUVFMzM0ODVDNEY5QUUwMi82Vjdfd3BRV1dFdnpmQXlQbnJjN2tnLWFR
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZWN193cFFXV0V2emZBeVBucmM3a2ctYVFhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjFEMjYvMDdGMDg0ODAxOEFEMTFFQjlFRTMzNDg1QzRGOUFFMDIvMEM5MDAyMUM3
MzUyMTFGMUI3RjJEQzk5NURBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyj4GMA0GCSqGSIb3DQEBCwUAA4IBAQBBcQURjwLo1DzvaBE5SNaC
OVxNpQg5X48greF+laS/WpbvPXfRQRiBBf8q5oCDfWaDfppzLFLuosvzBt+04jro
086mEnTJNMeJZDrGTI4uIMYJHTdhZrLV1JoOA+T7YYECROBp3q9nyZpQlkTydHW1
Sft3PuixX+tmZ6Cg+/zjYEuUIU/94WzjmR4rT8Og4r89aiecLFkOPziDeTcAd55k
oGGr0b4f4WV0ig7qeZ3TmZZgLNaUfU/ifFsMT/gj7tGPws4stCF5Lt7dNV+e2yH2
kl3XnhlGHStjhuBXRoQwmRbGg1V/2e4bQ1/Cwh/qUlBVFfnFVGNbYmLnkPOD178H
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:09:09 2026 by rpki-client