Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/9B8EF5B2ACBF11F19E9C47286511F970.roa
File:                     9B8EF5B2ACBF11F19E9C47286511F970.roa (raw, json)
Hash identifier:          gk6TXikdOPas7u9dfEunAM6jxTL5RhVuXDGbqKVYL4g=
Subject key identifier:   57:8B:18:A9:5E:20:B3:94:53:05:DB:E3:7F:9F:29:43:8F:AC:F3:FD
Certificate issuer:       /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial:       1178
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/9B8EF5B2ACBF11F19E9C47286511F970.roa
Signing time:             Tue 15 Sep 2026 06:54:44 +0000
ROA not before:           Tue 15 Sep 2026 06:54:44 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133478
IP address blocks:        142.86.252.0/24 maxlen: 24
                          142.86.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4472 (0x1178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
        Validity
            Not Before: Sep 15 06:54:44 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6aa8ebb4-14b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:c0:ef:13:e8:72:63:46:b9:af:2d:20:a5:
                    28:b3:30:70:9b:56:f0:fb:cd:1e:5e:b9:b5:23:6f:
                    03:fa:c4:88:79:73:13:f2:35:8c:04:56:e5:ba:31:
                    33:f5:f1:06:1a:f5:1b:ea:cd:9c:0e:e9:ec:d6:fe:
                    74:23:19:e2:0e:0a:e3:c6:58:ef:78:ed:93:8c:7d:
                    09:0e:14:f5:6a:9a:ff:52:e1:9c:d4:94:ee:aa:93:
                    99:3d:65:e4:2a:00:f6:54:fa:e2:8e:b4:08:82:1e:
                    de:64:8f:07:e2:79:aa:97:e6:56:49:11:00:56:b6:
                    f2:2e:d8:62:c5:9f:41:8b:d3:eb:7c:8b:c8:54:e9:
                    8d:e0:bd:dd:fa:f5:64:5e:ee:16:63:e6:c2:f9:48:
                    00:46:c9:77:f3:3f:e7:2c:31:a0:d8:2f:ae:e6:bc:
                    97:17:ed:0d:1b:7a:bd:ae:13:d7:cc:57:aa:39:93:
                    fa:d8:c2:f2:55:09:57:a4:4f:83:ba:62:cc:0c:77:
                    9b:03:bd:10:b0:2e:9e:10:e2:19:14:cc:5e:35:07:
                    d6:f5:60:27:8e:fb:e4:12:93:ce:71:f7:6e:28:ab:
                    5b:26:a3:29:b1:69:87:0d:50:48:7e:2c:f0:d3:a5:
                    31:b0:75:9c:a0:68:9a:2f:e8:f2:88:01:58:07:61:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8B:18:A9:5E:20:B3:94:53:05:DB:E3:7F:9F:29:43:8F:AC:F3:FD
            X509v3 Authority Key Identifier:
                keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/9B8EF5B2ACBF11F19E9C47286511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.86.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:8f:5f:09:7c:53:1c:cb:13:0b:1d:39:15:a6:a9:9f:89:
         c4:44:81:a0:82:28:cf:84:8e:9e:77:86:11:19:2b:9f:dd:39:
         8a:ac:2a:ee:0c:5f:4f:e1:e9:e6:ab:3e:fc:3a:03:ad:01:16:
         29:84:a6:ed:fe:eb:54:d2:1e:e3:74:05:ff:ed:63:4a:02:49:
         e4:19:fa:e1:98:4c:46:1c:d4:02:05:10:c4:a9:59:4f:01:2c:
         db:aa:be:29:af:47:85:cf:b3:43:8d:6b:75:9c:e6:43:75:a3:
         e7:52:e1:de:60:32:18:69:c6:91:5c:62:e2:a5:34:c9:a1:fe:
         a6:e0:ca:f6:ab:3d:c5:ec:1b:e1:53:bb:37:7d:ec:88:8f:3b:
         cc:62:7a:0c:86:34:07:66:43:ec:24:d4:2d:8e:a0:50:43:bb:
         f3:f4:6a:61:5a:31:ac:aa:97:77:8f:eb:66:58:48:3e:72:57:
         4a:32:92:be:98:1a:34:68:db:89:1b:b8:40:ed:ff:84:9c:03:
         34:bf:a6:1a:87:92:8b:fc:b4:80:47:68:70:96:dc:72:31:1a:
         c5:34:97:1f:2e:96:a5:1d:6b:a2:6b:5a:d0:f9:4c:00:86:98:
         b3:ec:36:01:7a:f3:d0:13:96:b3:bd:6c:75:62:40:80:9b:4d:
         89:00:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:33 2026 by rpki-client