Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/7ECD6624D8F411F0885FED3572D3641D.roa
File:                     7ECD6624D8F411F0885FED3572D3641D.roa (raw, json)
Hash identifier:          osWTaD90eaUod4M2mtFUGx/ILvZVLt6yce2mfjd99p4=
Subject key identifier:   4B:B7:5A:52:94:61:BC:E9:02:8C:58:D5:0B:99:90:0D:49:CB:51:42
Certificate issuer:       /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial:       E4
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/7ECD6624D8F411F0885FED3572D3641D.roa
Signing time:             Sun 27 Sep 2026 07:56:29 +0000
ROA not before:           Sun 27 Sep 2026 07:56:29 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     153522
IP address blocks:        210.56.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
                          rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
        Validity
            Not Before: Sep 27 07:56:29 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab8cc2d-bdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:d3:42:81:3a:9a:4f:8a:b1:65:2a:91:f4:
                    0d:49:35:d8:25:f7:c4:14:a8:2e:56:74:6a:a2:22:
                    0f:7e:5b:1b:ed:7f:b7:8b:b7:41:10:9f:a8:c0:cd:
                    82:af:2e:02:c7:12:3f:04:16:49:22:d7:87:39:56:
                    e1:b1:12:20:58:d5:32:29:6b:f1:a2:15:c5:44:25:
                    bc:dd:02:89:e9:3a:bf:10:29:a4:4f:12:57:ae:85:
                    f5:03:6b:10:1d:e3:35:19:dc:bd:a6:4d:28:48:d3:
                    03:98:a6:85:fb:58:ad:1f:77:30:77:bb:fa:69:48:
                    23:8e:12:77:a0:27:54:33:8c:47:b3:d4:84:07:d7:
                    c2:38:32:4e:7a:9e:9c:3d:b4:01:d4:59:4c:ad:c9:
                    a9:1d:6e:0f:77:3d:64:37:4a:c1:bb:d3:d6:02:a0:
                    d8:4a:f2:aa:f3:b0:4f:4c:01:e7:12:f9:7c:a4:e0:
                    65:67:16:cc:e8:40:49:2d:98:ff:9f:32:d0:9e:c6:
                    91:1e:d2:17:33:ac:92:7d:10:22:bd:df:ac:06:1e:
                    78:38:86:e9:eb:aa:30:2e:03:4a:b3:4c:6c:d6:8f:
                    f9:d3:cb:63:d7:94:cf:a4:9d:f9:12:15:e8:db:3b:
                    76:a5:b5:9a:e0:6c:56:c1:b7:af:eb:79:97:f1:a2:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:5A:52:94:61:BC:E9:02:8C:58:D5:0B:99:90:0D:49:CB:51:42
            X509v3 Authority Key Identifier:
                keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/7ECD6624D8F411F0885FED3572D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:e8:9a:69:65:d6:69:7b:cb:fb:77:15:54:17:23:df:08:
         1e:50:40:f9:93:9e:3d:49:6a:ea:ce:a9:fc:40:e3:5f:cf:22:
         37:d3:da:ca:69:d2:06:a4:13:dd:75:b8:c0:fa:11:da:54:bc:
         c4:52:d1:51:be:3c:18:5e:ed:e8:83:52:81:8c:ca:54:ed:b9:
         71:ff:9c:81:55:54:17:54:80:9f:fb:09:08:44:dd:d9:38:f6:
         1e:36:57:d5:bf:f0:1d:91:a7:5f:0d:57:38:8f:2c:f3:ea:1d:
         8d:94:db:49:52:af:86:3a:63:65:16:f4:c9:12:37:ce:4a:47:
         04:37:15:44:ce:4b:7c:d1:aa:0b:c2:cd:83:e7:47:a7:14:07:
         95:9b:32:bb:a5:96:94:db:db:56:83:ad:f4:24:dc:fe:19:fa:
         00:10:45:89:2c:e1:0c:38:e9:a6:ae:c3:bd:76:0b:ae:e5:bb:
         5a:8f:e9:bc:1c:e5:fe:ec:f4:e0:1e:46:3e:7c:26:e3:03:09:
         cf:4e:9b:2b:94:eb:62:2c:e4:9f:bf:50:e5:42:5f:cd:01:77:
         7f:d6:6e:64:8d:53:64:5a:81:c6:be:4e:45:09:17:5d:11:ea:
         58:64:57:67:0d:d8:2a:10:24:d8:e7:cb:ba:63:1c:1a:45:26:
         10:cb:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:36 2026 by rpki-client