Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa
File:                     C9E2B406804111EEA6703F81C4F9AE02.roa (raw, json)
Hash identifier:          s9x9gIirWntlK8Owx596ebxdwlOGog5ZPg7HYcpO694=
Subject key identifier:   DE:C2:44:56:3C:5F:01:73:79:DA:52:9C:A8:AA:DC:4C:3E:13:4B:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       03E7
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:32:12 +0000
ROA not before:           Thu 30 Oct 2025 22:12:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133206
IP address blocks:        194.127.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: Oct 30 22:12:48 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a431cc-d4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:d0:fd:57:f2:4d:be:1d:11:c0:4c:1c:84:
                    0e:b8:3f:aa:f7:e5:b6:08:44:a0:08:ad:94:a4:bc:
                    e2:d6:42:e5:7c:99:cd:26:1a:f1:a3:f5:90:77:a1:
                    93:4a:de:14:15:39:64:55:80:f9:4f:9d:20:34:bb:
                    4a:d1:61:f0:77:e6:25:d3:53:3a:b8:1e:17:29:f2:
                    38:d5:95:3b:f3:c2:60:1a:6e:66:a8:2b:48:6c:81:
                    a2:b9:76:c9:23:74:14:4c:cb:6e:b7:b0:95:d4:97:
                    b6:32:3f:3a:6f:4b:e8:e9:4f:69:94:74:4c:92:a8:
                    3b:ad:0e:0f:45:87:06:29:ff:40:55:3f:5a:4a:d1:
                    39:cd:97:5a:a2:9c:07:cf:9b:10:b7:c2:5f:f8:29:
                    3c:cd:b4:b3:94:31:37:43:47:75:e3:b5:ff:ef:01:
                    61:fd:69:59:dc:6e:9a:ab:a0:cc:50:82:5f:af:ed:
                    2d:46:ca:29:0a:b9:dd:af:67:04:fe:87:34:10:5c:
                    7b:9f:d3:37:73:bf:55:2d:8a:32:e0:a9:1c:ff:01:
                    5f:17:69:57:52:d4:f5:c2:25:b7:76:58:14:63:e9:
                    e7:39:87:62:4c:06:ad:e9:f6:22:fa:55:5f:62:fe:
                    7e:cb:bf:a5:b5:25:18:5f:06:8d:db:d7:2b:ca:9c:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C2:44:56:3C:5F:01:73:79:DA:52:9C:A8:AA:DC:4C:3E:13:4B:5C
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:47:ce:9b:0b:30:ed:9c:78:5d:fa:18:d3:28:76:0c:ac:
         5e:b9:51:21:28:a7:09:a0:43:ef:ad:97:41:af:3e:2b:3a:f7:
         99:e3:91:4e:df:b8:d8:8d:be:fe:e0:11:f8:39:59:8b:55:96:
         32:83:28:90:40:3c:8b:f5:f8:b7:b9:11:fe:cc:d9:dc:df:5e:
         74:bf:1f:2d:46:26:c1:1f:10:af:c9:c1:d1:ed:9f:a4:25:d6:
         1e:11:c3:c3:2c:82:c7:95:8c:f7:4b:27:24:2b:c5:1e:d7:30:
         3b:85:ad:e0:c3:a7:b5:3c:fe:26:47:d5:f8:78:76:f8:66:58:
         14:9e:0e:d8:18:14:81:88:0c:76:c9:66:2f:04:7f:6d:fa:01:
         82:fb:0c:5d:32:0e:61:d5:cd:97:89:be:c5:ec:13:0f:25:e3:
         70:b3:f2:46:5b:f5:ee:ac:f1:53:92:7c:c4:6a:19:23:46:ef:
         df:a7:a6:16:cd:db:39:06:c0:b9:00:3a:ca:b8:01:ae:14:46:
         ff:68:0d:8f:37:d7:a3:63:ba:a4:5a:2c:64:6f:7c:96:fd:ee:
         23:21:38:8a:6a:b4:93:4d:68:33:76:13:7b:f3:fb:3d:75:c8:
         4a:e7:08:da:7a:c2:46:c8:d7:69:c7:4e:87:7b:75:80:d8:89:
         3f:c9:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:54 2026 by rpki-client