Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa
File:                     EC75126616CA11ED8E290A59C4F9AE02.roa (raw, json)
Hash identifier:          xCZ8Pmp/DfujdT07uerGjkQxfEJEaTaMR2ab3oAlRio=
Subject key identifier:   AB:65:94:03:F5:47:15:A6:8B:DF:ED:49:C8:4C:80:13:1F:4A:91:4E
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       02AA
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:20:12 +0000
ROA not before:           Thu 25 Sep 2025 02:20:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     24324
IP address blocks:        202.27.170.0/24 maxlen: 24
                          202.27.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Sep 25 02:20:12 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d4a6dc-695e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:8a:03:e7:78:84:a5:ff:b2:4b:47:64:01:
                    77:9f:d5:a8:a1:12:f8:2e:ad:d7:06:45:fb:b9:7b:
                    2e:4e:2b:39:e6:cb:6e:fe:a3:58:bf:34:4d:49:fa:
                    c6:de:86:e8:ae:5f:03:e7:fb:2f:76:48:c9:9b:97:
                    50:23:b8:ce:7e:bf:d8:e2:c0:1d:eb:b7:cd:7f:e9:
                    41:64:c2:39:af:ee:ac:1b:39:33:17:fb:5c:e1:f7:
                    94:26:f4:4e:4f:a3:04:71:dd:01:c4:7d:63:ee:21:
                    b0:0e:d3:44:64:7a:75:73:db:cc:cb:25:e3:4f:2f:
                    f3:c4:f4:11:aa:61:bb:9c:23:73:e1:c0:d0:7b:ea:
                    7e:e9:b9:8c:85:b5:da:1b:7b:5f:68:a9:6a:43:c7:
                    f9:0e:9e:f0:c5:cb:8c:26:a1:42:68:33:ce:ea:16:
                    82:00:31:6a:c3:ac:4c:f1:cb:30:92:84:a5:f5:40:
                    16:3e:45:7d:c8:94:6a:4d:5a:64:be:c6:3f:d1:56:
                    99:fa:d2:03:96:51:d1:e2:13:68:b5:22:e8:85:25:
                    c3:f2:be:ee:13:3d:6d:ba:89:40:76:64:11:c9:9a:
                    dd:ef:19:1c:c2:b5:9a:36:0e:48:04:f9:6a:23:34:
                    37:5c:1a:7b:bd:80:eb:99:16:af:3b:4a:03:27:1b:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:65:94:03:F5:47:15:A6:8B:DF:ED:49:C8:4C:80:13:1F:4A:91:4E
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/EC75126616CA11ED8E290A59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:69:92:7f:b7:0e:4c:f0:5e:ef:92:91:81:8e:8f:76:f3:99:
         26:e3:1f:5c:ca:34:6b:2b:09:57:b8:97:da:5e:d8:d6:af:21:
         78:eb:05:8e:f8:42:2a:5e:fb:b2:3c:fe:65:72:47:6b:12:e5:
         93:c5:7a:95:47:98:df:89:aa:88:c8:5e:10:2c:94:68:be:95:
         1a:eb:e4:bf:5a:6f:b8:86:3a:a4:d4:d2:96:12:91:18:f2:85:
         3e:75:d6:d0:63:1f:9b:46:1c:73:e7:b3:64:2e:8c:04:23:c9:
         9c:00:f6:5c:9a:83:c1:d8:04:bd:ca:eb:25:4f:4a:4a:b2:d2:
         00:4a:9b:c1:d8:e8:70:78:04:ab:fe:88:94:8b:ee:38:2e:5a:
         b1:51:2c:9b:aa:bf:be:14:91:3b:08:6e:5c:bd:7d:a6:28:83:
         42:16:45:48:d8:11:95:88:d4:04:1e:a2:84:1a:26:65:fa:f4:
         28:9f:24:bd:60:0f:ef:2a:67:8a:07:0f:65:b0:30:9f:31:bc:
         c7:51:20:68:01:21:0b:a1:09:08:5a:f3:bf:be:d9:29:9d:c2:
         24:bb:7e:ad:a1:26:f5:b2:aa:c2:5b:d8:96:7b:ef:e7:30:07:
         8a:e6:a0:e8:15:58:f2:73:45:7a:e3:87:07:92:61:e1:88:4b:
         08:cb:08:ee
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz
Rjg2MDI5QTIwHhcNMjUwOTI1MDIyMDEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGQ0YTZkYy02OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr7SKA+d4hKX/sktHZAF3n9WooRL4Lq3XBkX7uXsuTis55stu/qNYvzRNSfrG
3oborl8D5/svdkjJm5dQI7jOfr/Y4sAd67fNf+lBZMI5r+6sGzkzF/tc4feUJvRO
T6MEcd0BxH1j7iGwDtNEZHp1c9vMyyXjTy/zxPQRqmG7nCNz4cDQe+p+6bmMhbXa
G3tfaKlqQ8f5Dp7wxcuMJqFCaDPO6haCADFqw6xM8cswkoSl9UAWPkV9yJRqTVpk
vsY/0VaZ+tIDllHR4hNotSLohSXD8r7uEz1tuolAdmQRyZrd7xkcwrWaNg5IBPlq
IzQ3XBp7vYDrmRavO0oDJxtsZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKtllAP1
RxWmi9/tSchMgBMfSpFOMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2
QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTY3NDAvMzUyOEIwQ0MxNkMwMTFFRDgwMDg5QTIxQzRGOUFFMDIvRUM3NTEyNjYx
NkNBMTFFRDhFMjkwQTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHKG6owDQYJKoZIhvcNAQELBQADggEBADVpkn+3DkzwXu+S
kYGOj3bzmSbjH1zKNGsrCVe4l9pe2NavIXjrBY74Qipe+7I8/mVyR2sS5ZPFepVH
mN+JqojIXhAslGi+lRrr5L9ab7iGOqTU0pYSkRjyhT511tBjH5tGHHPns2QujAQj
yZwA9lyag8HYBL3K6yVPSkqy0gBKm8HY6HB4BKv+iJSL7jguWrFRLJuqv74UkTsI
bly9faYog0IWRUjYEZWI1AQeooQaJmX69CifJL1gD+8qZ4oHD2WwMJ8xvMdRIGgB
IQuhCQha87++2SmdwiS7fq2hJvWyqsJb2JZ77+cwB4rmoOgVWPJzRXrjhweSYeGI
SwjLCO4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:26:46 2025 by rpki-client