Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/BAF4AD0418B211EB8C78F510C4F9AE02.roa
File:                     BAF4AD0418B211EB8C78F510C4F9AE02.roa (raw, json)
Hash identifier:          MNmEtRhSiej8vW24lgP+GFGaF8Fx+WYyqufjdJ+XNQ4=
Subject key identifier:   EB:73:92:E1:E5:DC:54:71:25:B4:79:EE:8F:31:F0:DC:46:57:8C:73
Certificate issuer:       /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial:       0898
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/BAF4AD0418B211EB8C78F510C4F9AE02.roa
Signing time:             Tue 22 Sep 2026 20:41:16 +0000
ROA not before:           Tue 22 Sep 2026 20:41:16 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     141197
IP address blocks:        202.0.159.0/24 maxlen: 24
                          2407:1240:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
                          rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D26, serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
        Validity
            Not Before: Sep 22 20:41:16 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ab2e7ec-a571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:65:0c:7b:d4:2f:3f:38:a1:f2:ca:18:40:
                    2f:76:1b:09:9c:f6:c0:3b:bf:1d:14:92:65:7e:b8:
                    46:b2:36:20:ce:77:da:4a:d4:c3:b5:3e:12:a8:96:
                    0e:ba:08:e9:02:a3:7e:b3:d6:1a:bf:5d:4e:d0:15:
                    d4:f8:33:6b:98:c0:e4:47:9e:06:d3:29:2e:3a:41:
                    05:a2:e7:f3:b5:9a:30:29:99:f1:2d:ad:cd:c9:c2:
                    13:42:1d:c5:70:1d:bb:a2:48:20:d7:3a:0f:d9:8c:
                    91:67:4a:15:60:56:f0:23:b4:c8:eb:76:49:b7:d2:
                    68:f0:ad:7b:5c:d1:fe:8a:bd:0d:6c:8b:91:8e:37:
                    99:74:37:b1:66:32:2c:cb:aa:1c:d9:a8:66:bd:ca:
                    76:a0:b9:16:a8:4d:e1:16:d5:3a:e3:c3:4b:32:62:
                    31:60:9c:ca:ea:57:05:02:8e:b6:c3:77:00:25:df:
                    f7:f3:0f:37:3b:a4:c2:06:d0:e8:e3:7f:8b:35:be:
                    8a:4e:5b:c0:7c:ea:79:1d:75:de:a7:d3:96:c0:d8:
                    9a:69:06:ea:17:73:43:07:0d:31:f4:7f:fe:f1:9c:
                    a8:94:9a:54:9a:cc:e2:20:7a:4e:78:ab:ae:b4:b7:
                    e5:4e:9d:44:d8:07:eb:b6:ae:84:41:82:6d:20:90:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:73:92:E1:E5:DC:54:71:25:B4:79:EE:8F:31:F0:DC:46:57:8C:73
            X509v3 Authority Key Identifier:
                keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/BAF4AD0418B211EB8C78F510C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.159.0/24
                IPv6:
                  2407:1240:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:70:39:f9:21:b8:c6:c1:cc:96:e7:6e:98:76:f6:f1:b9:3e:
         f0:84:de:2c:e8:fe:fd:5d:6b:94:a1:75:2c:29:89:61:6a:fd:
         70:76:8f:61:5c:c1:d8:40:b1:74:32:a4:83:33:9d:b2:51:30:
         d7:37:d7:13:d7:dc:7f:45:29:bb:9b:e3:ea:2f:43:68:ff:e4:
         a3:e2:e6:15:4c:e5:fa:67:ca:4e:e0:d9:f8:cb:a2:b8:0c:75:
         ee:7f:c2:ec:63:9c:74:2b:29:92:5e:9d:9b:5c:5f:f7:83:47:
         9c:ea:94:13:c6:94:1c:3e:18:13:1f:af:b1:20:b6:7e:54:7f:
         75:d0:96:36:7f:f0:69:5b:69:77:61:37:e0:29:01:c9:6d:27:
         49:65:db:c1:67:f3:87:f8:15:c4:d2:e4:c2:8a:f8:ce:95:ce:
         7c:d0:7e:07:fb:a8:43:86:cc:7e:ef:23:39:b1:88:a0:40:5c:
         a8:47:09:1c:e2:72:cc:3d:f1:e9:33:b9:e7:57:da:77:3b:b3:
         1c:aa:46:62:44:30:0f:9f:af:a3:19:c1:ca:72:20:bd:0b:99:
         f6:29:74:cd:ba:3a:c3:27:a6:65:92:9b:3a:e1:2b:b9:54:4b:
         7a:21:7a:2e:ac:10:6f:aa:18:4f:01:2d:88:e0:c0:e8:f1:cf:
         6f:ca:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:28:57 2026 by rpki-client