Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa
File:                     EC75126616CA11ED8E290A59C4F9AE02.roa (raw, json)
Hash identifier:          b4Mbu4iJxYvFzuuxlrwY1fYXDm4OesBsgsde61mBuWk=
Subject key identifier:   56:D0:D7:4E:AA:52:1A:6D:B8:70:B1:8D:8D:DC:7D:9A:97:9F:2D:31
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       0392
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa
Signing time:             Mon 07 Sep 2026 00:50:42 +0000
ROA not before:           Mon 07 Sep 2026 00:50:42 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     24324
IP address blocks:        202.27.170.0/24 maxlen: 24
                          202.27.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Sep  7 00:50:42 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e0a62-0966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:75:7d:df:5c:e6:a5:bf:46:89:75:97:c4:
                    2b:1d:cb:45:bf:f0:5a:ad:1e:20:94:ef:24:71:3e:
                    d1:8f:3f:fb:6e:cf:79:5e:99:f7:79:7b:96:7b:28:
                    b3:ae:9a:98:76:80:9b:ef:ed:0a:48:66:98:40:6e:
                    c8:e7:90:8e:5c:74:f1:dd:4d:61:0b:b6:20:6d:93:
                    dd:2f:35:bb:a3:aa:b7:85:15:4e:07:44:41:fd:8c:
                    24:3b:39:3a:2b:23:3e:7f:7d:d2:47:87:73:0b:b6:
                    e6:28:67:74:82:0f:f1:2d:8f:85:b1:83:01:ac:bd:
                    26:a8:3c:20:eb:8c:54:6c:59:cd:82:55:78:59:01:
                    8e:2a:a2:9a:ad:89:03:a0:cf:a3:79:33:4b:29:cf:
                    36:d8:96:df:63:b3:f2:60:85:3b:51:16:fc:c0:f6:
                    42:b5:d7:56:9a:62:00:8a:cb:0d:86:74:07:e9:87:
                    48:ea:6e:af:c9:d0:a1:4e:19:95:b3:ac:cd:f4:a3:
                    3a:02:04:4d:f5:90:7e:f0:1d:25:b7:aa:92:be:04:
                    82:76:3f:ef:19:5d:47:c8:f6:ce:a4:10:ad:7e:4e:
                    85:bc:4d:7d:ae:14:18:d9:c9:28:e6:12:a9:80:0b:
                    15:e9:c3:f4:3f:11:a0:ac:61:ef:6e:d2:c0:00:b7:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:D7:4E:AA:52:1A:6D:B8:70:B1:8D:8D:DC:7D:9A:97:9F:2D:31
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:56:53:2b:db:3e:c7:01:58:ee:03:5a:a7:e2:2d:4f:6c:35:
         72:9f:93:76:0f:1c:ae:b4:fd:20:a7:8e:87:4e:72:e2:d0:c3:
         4a:2e:97:f9:e7:a4:4a:96:58:34:4e:6a:55:65:00:29:17:d4:
         a4:a3:03:1e:a1:6c:b6:ae:02:ec:e0:70:7c:72:3c:c5:94:ca:
         6a:b3:44:cc:74:43:78:99:23:07:1c:a5:9b:ec:be:fc:a8:e1:
         ae:54:4a:bc:b0:05:87:13:29:25:37:3c:fb:9f:23:54:ff:3d:
         3e:31:72:c1:34:26:d4:de:35:de:0d:ba:c7:9e:fe:db:88:aa:
         ef:51:4c:cf:ae:dd:fd:a5:62:21:5b:c0:66:04:e9:b8:bb:fc:
         0e:ce:70:a5:13:cb:82:86:0b:47:b4:a3:81:8e:35:69:c9:6c:
         87:51:31:93:cd:75:89:10:9c:1c:6e:5e:b5:77:6c:24:97:7a:
         06:17:81:f6:f3:12:02:bf:62:a6:2a:a5:71:6a:99:1c:5a:f6:
         22:3e:62:65:e2:03:1e:1e:3c:6b:63:69:73:c5:60:52:0d:b1:
         86:ac:bf:6f:07:8d:5b:84:c9:32:b2:96:f6:58:90:55:3e:37:
         5f:c6:67:92:e7:37:64:d5:7d:b7:52:da:63:ea:d9:eb:1c:aa:
         f2:41:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:23:11 2026 by rpki-client