Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/C6D6646ECB5E11F0BCC7A882C4F9AE02.roa
File:                     C6D6646ECB5E11F0BCC7A882C4F9AE02.roa (raw, json)
Hash identifier:          aCr2ZrH5f1RnZmTmyJ5g/z1LtQRu33OI656p6b8Gmu8=
Subject key identifier:   14:9E:D6:B6:75:9D:BD:6B:8E:E1:85:4C:D6:4C:67:20:D2:B1:EC:06
Certificate issuer:       /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial:       23E8
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/C6D6646ECB5E11F0BCC7A882C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:47:28 +0000
ROA not before:           Thu 27 Nov 2025 07:02:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45282
IP address blocks:        123.176.57.0/24 maxlen: 24
                          123.176.59.0/24 maxlen: 24
                          202.129.192.0/24 maxlen: 24
                          202.129.194.0/24 maxlen: 24
                          202.129.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9192 (0x23e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Validity
            Not Before: Nov 27 07:02:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61380-8083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:31:91:dd:6c:f4:61:98:ac:70:d8:be:4f:be:
                    a6:1b:3e:ff:56:cb:b2:2f:91:f8:82:1f:56:01:5e:
                    8a:98:76:cc:e5:d2:ba:8b:da:4d:a2:a5:34:8f:91:
                    39:3d:1e:dc:2f:6e:19:d1:63:36:97:ac:0a:aa:17:
                    b5:98:33:42:b2:c4:0b:3c:3b:a7:40:28:76:5e:8d:
                    d5:94:61:25:0a:22:bc:88:69:aa:bd:da:a4:ad:7b:
                    8f:72:cb:a0:2b:dc:9e:a4:7e:0b:a8:41:82:99:60:
                    b7:0b:58:c6:d9:33:31:58:1d:46:89:2b:1b:8b:0b:
                    ec:32:1d:ac:46:79:7f:a1:a3:95:a0:c2:f7:d8:ca:
                    0f:45:17:5c:1c:a9:d7:6f:e7:18:63:7c:ca:79:d6:
                    aa:3e:4b:3e:ff:d5:2e:22:85:a5:9a:76:d9:b4:14:
                    ee:d9:a6:a5:53:72:6d:88:41:ea:ae:1a:e8:d4:62:
                    87:52:52:49:09:88:81:fd:11:09:0e:9d:d1:5f:f8:
                    14:50:b6:89:db:6f:90:50:58:a3:a7:e5:40:a1:e5:
                    00:a6:82:7b:6b:da:c7:7c:4e:cd:1f:18:23:91:32:
                    d6:bf:ca:d0:3a:4d:90:d5:1d:87:81:75:42:e4:2d:
                    03:90:5b:24:73:e7:c3:f0:08:18:ba:0b:78:d9:6b:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9E:D6:B6:75:9D:BD:6B:8E:E1:85:4C:D6:4C:67:20:D2:B1:EC:06
            X509v3 Authority Key Identifier:
                keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/C6D6646ECB5E11F0BCC7A882C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.176.57.0/24
                  123.176.59.0/24
                  202.129.192.0/24
                  202.129.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:ba:2b:f9:76:23:c3:51:2a:d1:2f:15:27:56:88:05:a9:15:
         78:bb:42:fc:ec:84:ac:47:17:8a:52:39:fa:ca:f8:8d:47:27:
         ad:dd:e4:df:ee:3f:56:0b:19:1d:3f:eb:ba:85:13:68:62:40:
         dd:d7:7f:20:13:9f:66:a0:8f:b5:b9:4d:52:bb:dc:a8:c3:15:
         2a:80:67:20:a0:78:f8:08:80:ac:b3:1a:a9:4a:e0:4e:b7:19:
         fb:6e:03:67:cf:7b:6c:2c:e9:90:2f:c5:22:a2:a2:b8:4d:3f:
         17:c2:0b:40:e1:9d:32:a1:e0:ee:25:5a:bc:76:d8:ec:84:7e:
         e8:58:8c:fd:ef:c1:15:ed:1d:25:a9:f8:60:5f:6c:14:d5:73:
         15:54:28:49:23:1d:07:f2:e4:29:c9:3b:49:f6:65:ea:26:3c:
         0b:df:93:c7:45:81:12:55:79:f5:cb:8d:01:24:64:be:c2:b4:
         86:b1:b6:c3:40:97:4a:fc:1e:3c:d0:1b:9e:8d:f3:bc:16:ad:
         6f:06:2f:35:6c:97:b7:7f:42:d3:de:19:be:cc:03:b6:f8:92:
         09:a8:24:67:d9:9a:f7:3a:14:33:0d:6f:f2:b4:41:d9:a7:87:
         03:00:ad:2a:d7:8d:f0:63:80:13:a6:57:d7:aa:4b:0a:54:37:
         68:68:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:20 2026 by rpki-client