Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa
File:                     424FB76E5B7811EB8259662FC4F9AE02.roa (raw, json)
Hash identifier:          Ou1tkKYdcMISKTrMEWppqC5Y6bIIb0B8N+Os5veZU10=
Subject key identifier:   51:E7:5D:1A:E1:F5:FD:D1:02:7B:4B:04:1D:CC:23:AD:E9:42:B2:2F
Certificate issuer:       /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial:       0829
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:03:43 +0000
ROA not before:           Wed 22 Oct 2025 22:10:59 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     56089
IP address blocks:        202.0.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
                          rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089 (0x829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D26, serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
        Validity
            Not Before: Oct 22 22:10:59 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4635f-d2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:31:8c:36:50:3e:b0:29:b1:cb:54:1e:ff:
                    32:b0:a0:f7:89:dc:d9:72:f4:ec:96:25:d0:20:2b:
                    db:2c:92:43:3d:6c:81:85:da:62:9a:d7:ce:f2:e8:
                    f7:eb:99:b7:ba:7a:6f:7d:b0:0b:18:8a:13:f3:f3:
                    d8:bb:1e:89:42:a5:48:9d:8c:15:65:b4:af:d9:89:
                    12:c0:a4:50:d2:35:22:ad:c9:35:4f:20:36:6e:bb:
                    eb:f9:9b:df:a2:85:8c:d3:75:6b:51:e3:a2:51:5a:
                    f6:88:2c:a9:ac:c3:a0:a2:ee:fe:83:2c:17:d1:f6:
                    79:13:4d:cc:a8:d3:75:ba:d7:b8:f3:17:8a:73:73:
                    72:fe:9f:33:4f:b2:f2:09:69:61:50:f6:49:b2:c0:
                    15:5e:8b:9f:d2:8e:5d:a4:2f:85:68:2e:1a:3d:61:
                    f5:6a:a5:9d:85:9a:02:35:63:e1:aa:70:26:c8:79:
                    f7:8f:64:e7:6e:dd:3d:b9:18:30:ae:be:ee:0c:34:
                    0f:e6:8c:57:3e:62:55:89:73:62:cb:02:0f:f5:e3:
                    72:31:3c:1c:93:5f:4f:9b:eb:0b:1d:fb:28:69:2d:
                    86:a9:a6:c9:23:a6:1b:a9:13:0f:0e:eb:74:06:38:
                    0c:31:65:ba:69:35:04:c6:fb:8d:b8:68:46:3f:e0:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E7:5D:1A:E1:F5:FD:D1:02:7B:4B:04:1D:CC:23:AD:E9:42:B2:2F
            X509v3 Authority Key Identifier:
                keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:34:57:a6:b8:68:9f:ce:e6:37:dc:4b:de:2d:34:eb:44:da:
         43:10:2e:4c:1d:51:c3:44:a8:dc:34:2d:67:d5:f1:ea:11:e1:
         df:de:d4:47:19:00:95:f4:bf:44:64:ff:97:36:8f:c8:c9:21:
         dc:ca:df:17:ac:66:3c:22:ec:fe:f1:b5:a4:34:89:1c:5d:0f:
         3f:86:75:2d:4e:9b:37:54:37:b9:4c:02:0e:27:fd:da:be:d1:
         08:7c:70:4a:e3:96:8d:88:3d:3e:36:8e:c1:4c:b2:f0:02:04:
         ca:f4:13:aa:d2:e2:ff:ec:ce:3d:cb:18:9c:14:37:dc:d7:b2:
         ef:ad:fe:cd:70:70:5b:19:64:b7:ef:b6:b2:ad:4d:05:e0:f5:
         d5:e8:7b:b6:00:10:0c:c6:b2:02:07:af:27:ec:3b:f7:8d:4b:
         43:65:07:2f:56:74:58:fb:3d:0a:21:e9:d4:58:7e:59:0f:56:
         8b:06:bd:9b:8d:18:4f:01:0c:33:ef:08:6f:b1:1b:84:8e:26:
         3c:ae:6d:0c:61:26:6f:fd:39:63:69:be:0c:1f:ef:a9:09:d3:
         4b:2d:9a:39:3a:e5:25:a5:aa:8b:4d:0f:7b:61:3a:e6:15:60:
         43:e1:b7:ae:40:d9:6b:2e:46:3b:87:6d:e2:d3:76:52:e5:60:
         4a:36:4c:d4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjFEMjYxMTAvBgNVBAUTKEU5NUVGRkMyOTQxNjU4NEJGMzdDMEM4RjlFQjczQjky
MEY5QTQxQUQwHhcNMjUxMDIyMjIxMDU5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjM1Zi1kMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuuMxjDZQPrApsctUHv8ysKD3idzZcvTsliXQICvbLJJDPWyBhdpimtfO8uj3
65m3unpvfbALGIoT8/PYux6JQqVInYwVZbSv2YkSwKRQ0jUirck1TyA2brvr+Zvf
ooWM03VrUeOiUVr2iCyprMOgou7+gywX0fZ5E03MqNN1ute48xeKc3Ny/p8zT7Ly
CWlhUPZJssAVXouf0o5dpC+FaC4aPWH1aqWdhZoCNWPhqnAmyHn3j2Tnbt09uRgw
rr7uDDQP5oxXPmJViXNiywIP9eNyMTwck19Pm+sLHfsoaS2GqabJI6YbqRMPDut0
BjgMMWW6aTUExvuNuGhGP+AKSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFHnXRrh
9f3RAntLBB3MI63pQrIvMB8GA1UdIwQYMBaAFOle/8KUFlhL83wMj563O5IPmkGt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQyNi8wN0YwODQ4MDE4
QUQxMUVCOUVFMzM0ODVDNEY5QUUwMi82Vjdfd3BRV1dFdnpmQXlQbnJjN2tnLWFR
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZWN193cFFXV0V2emZBeVBucmM3a2ctYVFhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjFEMjYvMDdGMDg0ODAxOEFEMTFFQjlFRTMzNDg1QzRGOUFFMDIvNDI0RkI3NkU1
Qjc4MTFFQjgyNTk2NjJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAygCdMA0GCSqGSIb3DQEBCwUAA4IBAQATNFemuGifzuY33EveLTTr
RNpDEC5MHVHDRKjcNC1n1fHqEeHf3tRHGQCV9L9EZP+XNo/IySHcyt8XrGY8Iuz+
8bWkNIkcXQ8/hnUtTps3VDe5TAIOJ/3avtEIfHBK45aNiD0+No7BTLLwAgTK9BOq
0uL/7M49yxicFDfc17Lvrf7NcHBbGWS377ayrU0F4PXV6Hu2ABAMxrICB68n7Dv3
jUtDZQcvVnRY+z0KIenUWH5ZD1aLBr2bjRhPAQwz7whvsRuEjiY8rm0MYSZv/Tlj
ab4MH++pCdNLLZo5OuUlpaqLTQ97YTrmFWBD4beuQNlrLkY7h23i03ZS5WBKNkzU
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:34 2026 by rpki-client