Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/6F0C4648BAD411F19FACF2655111F970.roa
File:                     6F0C4648BAD411F19FACF2655111F970.roa (raw, json)
Hash identifier:          KGuPhaCUK6U3dA09geGf8uE0dfr9WfFz3W0RYKdpPPE=
Subject key identifier:   33:83:65:27:24:96:25:9A:57:72:5B:3B:E4:BB:82:C6:CD:89:CF:E1
Certificate issuer:       /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial:       0743
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/6F0C4648BAD411F19FACF2655111F970.roa
Signing time:             Mon 28 Sep 2026 00:34:59 +0000
ROA not before:           Mon 28 Sep 2026 00:34:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        203.10.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
                          rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859 (0x743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
        Validity
            Not Before: Sep 28 00:34:58 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ab9b632-3786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:a5:40:ab:84:e4:5e:55:fe:25:b4:c5:5e:
                    e8:0d:10:05:e7:15:e4:e9:49:ab:da:17:4f:38:63:
                    88:55:9d:36:1b:03:f9:f6:6f:5e:c7:35:dd:59:4e:
                    23:80:1d:b9:a6:05:19:9c:0f:27:28:35:80:cd:64:
                    84:22:c7:07:93:d5:00:9a:9f:99:84:21:34:23:ff:
                    7f:24:92:7c:df:6a:32:9e:18:36:c7:08:c2:99:b9:
                    c9:2e:fd:f5:97:e9:ca:1d:28:81:45:22:1e:b6:50:
                    22:02:b4:63:c6:92:59:38:17:84:37:1c:b2:5f:20:
                    ca:fc:b5:a8:48:56:c2:a1:1e:d9:f9:4b:06:a2:75:
                    57:d4:d1:c3:99:bc:15:78:cc:eb:65:fb:2b:8e:5e:
                    7b:ad:93:f2:1d:a5:2a:81:74:0a:96:52:47:29:c8:
                    4e:38:93:53:8b:2c:a9:5b:7f:73:a7:02:57:8c:22:
                    34:13:1b:9e:45:40:4e:40:90:c3:eb:17:74:3d:b1:
                    e9:02:d6:4e:a3:fb:08:91:4f:95:de:13:f3:2a:7d:
                    40:3f:44:83:8c:42:01:eb:e7:c6:97:8f:83:e2:21:
                    b1:5b:a6:37:19:ce:da:58:bf:8d:22:68:85:5c:5a:
                    ad:62:01:c9:ff:1c:52:5a:ac:79:25:55:de:77:c4:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:83:65:27:24:96:25:9A:57:72:5B:3B:E4:BB:82:C6:CD:89:CF:E1
            X509v3 Authority Key Identifier:
                keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/6F0C4648BAD411F19FACF2655111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:47:6d:6d:2c:9b:16:2f:7d:4a:76:cb:16:6d:c9:ba:4c:83:
         0e:47:c0:c5:3b:25:8e:58:cb:69:98:db:b0:5e:2a:6d:ec:ef:
         03:76:2b:62:2e:fd:da:8d:85:03:ad:43:8a:da:20:35:0c:29:
         d3:b9:fe:1e:d1:92:12:05:74:2b:bc:b2:6a:b6:62:05:49:e8:
         20:2e:47:ba:f6:32:cf:a4:42:44:f6:19:7d:4d:8e:0a:bc:ee:
         ae:32:5e:0e:4c:1f:aa:92:d3:ea:7b:33:f4:c0:f5:71:cf:c6:
         f5:7d:72:9a:f0:95:f8:bc:63:53:91:da:4c:23:22:c5:21:22:
         12:a2:31:0b:d5:97:f3:1c:21:8e:8c:8c:b1:3a:95:39:42:4a:
         43:40:90:5c:95:47:0a:54:1f:cb:ad:b2:03:c7:80:08:30:d0:
         28:19:5c:84:94:ea:bb:c4:39:f6:87:35:19:2c:ad:f8:3e:9b:
         50:0e:b7:d4:20:35:17:5e:46:bd:c4:cb:29:b2:8a:2b:b7:89:
         2c:91:f6:fd:7b:29:7b:37:24:d5:89:45:86:41:ae:4a:6d:d8:
         9c:32:d9:db:7c:5c:70:2a:e9:99:01:f8:b4:1e:80:b0:c8:2f:
         38:c0:f2:83:fd:bb:0f:17:8c:23:ca:76:c1:24:bc:a3:7d:24:
         4c:cf:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:57:52 2026 by rpki-client