Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/ECF347EC790211F0AEB6EC56C4F9AE02.roa
File:                     ECF347EC790211F0AEB6EC56C4F9AE02.roa (raw, json)
Hash identifier:          0/zUGUggZuOuHhSO/RhqXCHzt2FyzS+mBpPChTmDqUo=
Subject key identifier:   B9:54:9F:86:27:B1:CD:63:02:F4:7D:D1:DB:3F:B9:0D:D1:C6:A2:FC
Certificate issuer:       /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial:       0192
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/ECF347EC790211F0AEB6EC56C4F9AE02.roa
Signing time:             Fri 11 Sep 2026 04:55:31 +0000
ROA not before:           Fri 11 Sep 2026 04:55:31 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153164
IP address blocks:        202.12.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
        Validity
            Not Before: Sep 11 04:55:31 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa389c3-567a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:74:b0:f6:d6:9b:d1:82:91:0d:74:94:ce:79:
                    88:8e:91:2d:10:3e:27:bd:5b:2c:5d:54:37:00:a2:
                    8a:65:a8:2a:3c:0f:3e:78:a7:1b:2f:92:c4:55:ce:
                    0d:14:24:8a:58:49:be:74:f9:e6:f1:9e:c0:97:7a:
                    59:77:3c:e4:77:4f:97:16:af:23:79:30:0a:05:54:
                    ce:ca:20:80:f8:c5:ce:87:59:bf:6e:32:e0:d3:c7:
                    ed:06:52:d5:6d:b8:7b:3c:9d:c8:e3:29:3f:45:e9:
                    c1:31:a8:6f:c7:ea:23:df:f2:95:7a:4b:3d:a7:08:
                    47:28:c8:14:f2:b6:3f:ad:4c:c7:ef:f7:1a:cb:5c:
                    0b:77:03:1d:88:11:35:03:ff:75:21:99:e1:60:36:
                    30:5c:b9:07:7f:0e:7c:d1:c3:67:fb:9f:70:72:1a:
                    7c:1d:6b:a4:cb:35:71:8f:a3:20:98:6e:aa:46:c9:
                    05:8b:8b:f6:e6:51:2c:a2:7e:a6:84:d2:a0:80:40:
                    26:3a:c0:ac:b4:ae:36:4a:50:89:0f:ac:38:0a:16:
                    9f:33:19:cd:8f:87:28:88:14:94:b7:a1:21:83:99:
                    9f:94:78:7a:a7:02:47:4f:61:b5:41:54:32:56:3b:
                    89:4d:f4:59:66:36:83:0a:96:87:e4:f6:59:bc:c2:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:54:9F:86:27:B1:CD:63:02:F4:7D:D1:DB:3F:B9:0D:D1:C6:A2:FC
            X509v3 Authority Key Identifier:
                keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/ECF347EC790211F0AEB6EC56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:a8:b7:bf:4e:3a:c7:a5:cf:db:b7:3e:9b:58:e4:09:10:
         0e:ec:44:0e:3e:85:1c:52:6e:93:60:29:82:1c:20:99:10:16:
         89:f6:91:59:65:d3:42:f9:6c:5d:19:03:7b:bb:2c:41:d1:52:
         14:2f:81:62:dc:90:2b:6f:33:f6:05:e5:f7:69:70:53:49:ca:
         37:d7:35:0f:cb:8d:71:d5:d0:6a:6d:18:32:bb:50:03:6e:e3:
         32:7d:28:23:b0:ed:d1:1f:91:28:c3:c0:03:66:fc:16:97:6d:
         24:7b:49:c1:45:07:be:fe:97:12:f0:21:2d:67:c6:a9:2a:5d:
         64:c5:65:a6:f5:ce:2b:7d:15:c4:32:90:a0:7d:a1:62:1b:64:
         8f:00:77:61:dd:90:c2:06:fd:8a:bf:c4:f2:16:71:79:fd:7a:
         1d:1d:6b:8d:e8:d0:c9:9d:4b:d3:cb:06:c5:f2:b4:2e:54:03:
         a0:12:84:82:7f:65:f3:00:eb:3e:de:cd:e2:f4:52:ed:bf:be:
         ab:d6:19:ec:cd:16:f7:b9:73:17:25:26:f1:0d:57:e1:a2:b5:
         31:fa:71:cd:6b:88:8d:4a:9f:bf:a8:6e:16:e3:c0:a1:12:84:
         db:20:c2:33:88:68:60:28:28:ea:e4:2f:f0:36:26:7f:6a:80:
         45:40:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:43:22 2026 by rpki-client