Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/7B57CA16ED1C11F09DBA53AB416F56BC.roa
File:                     7B57CA16ED1C11F09DBA53AB416F56BC.roa (raw, json)
Hash identifier:          rE5+LKtcLNIAeEHkZE2dA4pZ9Z23ugfibnsPKviYhwM=
Subject key identifier:   B3:AA:59:08:A3:16:18:6D:67:BF:17:B3:71:EC:27:E6:DB:9A:DF:AC
Certificate issuer:       /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial:       84
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/7B57CA16ED1C11F09DBA53AB416F56BC.roa
Signing time:             Thu 03 Sep 2026 07:59:44 +0000
ROA not before:           Thu 03 Sep 2026 07:59:44 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     23719
IP address blocks:        203.32.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
        Validity
            Not Before: Sep  3 07:59:44 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9928f0-6124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:de:fa:15:fd:e4:85:a9:fe:b9:b2:94:b7:
                    07:c8:0e:ea:1e:de:a8:2e:58:85:47:ba:34:68:90:
                    a5:0b:1a:d9:51:d8:00:41:be:a2:7b:fe:05:f2:b6:
                    bb:ed:27:a5:46:dc:b6:43:d6:ba:9d:bf:a8:f6:e6:
                    eb:88:4e:d9:b9:bf:df:7c:49:f9:aa:23:fb:25:56:
                    fa:76:2b:08:3e:73:d5:a5:80:33:0c:b6:18:66:4f:
                    b4:a0:37:96:60:02:46:1e:90:67:5f:fb:fe:00:c8:
                    7d:1f:0c:c2:21:09:96:9a:77:eb:f8:34:ec:ed:2d:
                    0c:8f:e6:d2:1a:1f:73:bb:34:53:7c:fc:3d:dc:0c:
                    f8:a6:e6:c2:fe:10:a4:56:0a:4f:5d:d9:02:d2:c7:
                    cc:e8:2d:5b:2d:65:2b:e1:5b:23:f7:64:1e:5b:b1:
                    7c:1c:14:2d:b5:d9:5b:0e:de:35:f6:5e:48:ff:97:
                    8d:8a:ce:90:d2:1f:c4:e6:b6:21:29:04:0d:e4:7f:
                    41:30:6b:a5:10:f6:0c:11:88:e0:7d:f5:0d:77:a9:
                    1c:17:95:cd:f1:4b:f2:c9:8e:05:43:a8:a3:2c:5e:
                    fb:8c:78:f5:83:fd:2b:74:d5:22:8c:59:e0:ab:0a:
                    4c:9c:6d:2f:b1:a7:7e:4b:d7:f8:26:cb:ef:5f:ac:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:59:08:A3:16:18:6D:67:BF:17:B3:71:EC:27:E6:DB:9A:DF:AC
            X509v3 Authority Key Identifier:
                keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/7B57CA16ED1C11F09DBA53AB416F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:49:5c:37:69:3f:d4:b5:86:34:59:d6:58:93:2d:e6:f5:
         5c:37:c1:bc:50:a7:51:7d:53:fc:46:1b:b2:3f:64:88:da:cf:
         2e:28:95:b0:27:c0:00:7a:96:d3:f2:f8:26:c5:db:de:7c:68:
         72:1c:08:90:fe:86:b2:82:9d:a7:2b:07:fd:6f:f1:f2:cc:63:
         bb:8d:9f:05:4d:50:57:8e:55:12:fb:f0:00:c5:71:5c:c0:12:
         33:96:41:ba:9c:d7:41:12:12:ad:be:24:ed:17:10:96:21:79:
         81:e8:ce:80:10:09:80:69:9a:8b:42:75:eb:e4:da:73:10:1f:
         12:3c:92:72:17:21:bd:f3:2e:88:48:c2:2b:b8:7f:89:f8:58:
         e3:ff:3d:11:28:fd:27:a8:5c:8b:16:b3:c5:53:48:d6:c7:92:
         74:79:96:9f:86:e8:61:2b:6e:c3:41:48:77:c7:4d:c7:8e:88:
         4c:ac:43:cf:0f:f2:d9:24:e1:be:98:f9:ac:8b:ae:5d:e4:ea:
         b0:60:78:96:89:ea:29:46:a4:ac:6a:d9:be:3c:61:b4:f0:ef:
         8d:b4:66:c6:f2:3b:ae:ba:28:3d:3a:05:1d:00:77:f9:4b:07:
         9f:c5:08:14:b0:90:d0:ea:1b:ce:6b:24:c1:49:a9:54:f4:f5:
         16:5c:5b:1e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU4NjQxMTAvBgNVBAUTKEZERjZENjk1ODIwQUYzRDBGMEU3QTc0REIzNDQ1MzJD
NTdEQUVFNDAwHhcNMjYwOTAzMDc1OTQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk5MjhmMC02MTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuA/e+hX95IWp/rmylLcHyA7qHt6oLliFR7o0aJClCxrZUdgAQb6ie/4F8ra7
7SelRty2Q9a6nb+o9ubriE7Zub/ffEn5qiP7JVb6disIPnPVpYAzDLYYZk+0oDeW
YAJGHpBnX/v+AMh9HwzCIQmWmnfr+DTs7S0Mj+bSGh9zuzRTfPw93Az4pubC/hCk
VgpPXdkC0sfM6C1bLWUr4Vsj92QeW7F8HBQttdlbDt419l5I/5eNis6Q0h/E5rYh
KQQN5H9BMGulEPYMEYjgffUNd6kcF5XN8UvyyY4FQ6ijLF77jHj1g/0rdNUijFng
qwpMnG0vsad+S9f4JsvvX6x0ywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLOqWQij
FhhtZ78Xs3HsJ+bbmt+sMB8GA1UdIwQYMBaAFP321pWCCvPQ8OenTbNEUyxX2u5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTg2NC8xOTIzMTVGMkVE
MTgxMUYwOEUxQzA2MDI0MDZGNTZCQy9fZmJXbFlJSzg5RHc1NmROczBSVExGZmE3
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19mYldsWUlLODlEdzU2ZE5zMFJUTEZmYTdrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU4NjQvMTkyMzE1RjJFRDE4MTFGMDhFMUMwNjAyNDA2RjU2QkMvN0I1N0NBMTZF
RDFDMTFGMDlEQkE1M0FCNDE2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyyBqMA0GCSqGSIb3DQEBCwUAA4IBAQCI4klcN2k/1LWGNFnWWJMt
5vVcN8G8UKdRfVP8RhuyP2SI2s8uKJWwJ8AAepbT8vgmxdvefGhyHAiQ/oaygp2n
Kwf9b/HyzGO7jZ8FTVBXjlUS+/AAxXFcwBIzlkG6nNdBEhKtviTtFxCWIXmB6M6A
EAmAaZqLQnXr5NpzEB8SPJJyFyG98y6ISMIruH+J+Fjj/z0RKP0nqFyLFrPFU0jW
x5J0eZafhuhhK27DQUh3x03HjohMrEPPD/LZJOG+mPmsi65d5OqwYHiWieopRqSs
atm+PGG08O+NtGbG8juuuig9OgUdAHf5SwefxQgUsJDQ6hvOayTBSalU9PUWXFse
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:45:14 2026 by rpki-client