Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/C6EB4BB695C411EFB4437E46C4F9AE02.roa
File:                     C6EB4BB695C411EFB4437E46C4F9AE02.roa (raw, json)
Hash identifier:          q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=
Subject key identifier:   12:4C:9E:28:93:9A:99:74:09:79:ED:89:29:F9:66:7C:C0:2A:C8:40
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7E20
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/C6EB4BB695C411EFB4437E46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:06:47 +0000
ROA not before:           Tue 02 Sep 2025 17:36:25 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55845
IP address blocks:        202.9.114.120/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32288 (0x7e20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Sep  2 17:36:25 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48036-9797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:ec:f5:3b:0f:06:26:2c:3d:c7:70:6d:30:
                    ec:5e:38:84:65:0c:db:0a:4d:80:14:fd:42:ee:b3:
                    56:8f:78:b7:ee:c0:74:b9:64:0f:36:55:d2:07:d6:
                    72:45:9a:53:0a:0d:2b:d9:ac:62:29:e4:30:cb:14:
                    58:32:d5:da:ff:ff:db:0c:dd:35:d3:bc:0d:83:6f:
                    21:c7:e5:1f:67:46:ff:0b:19:86:07:d0:16:0a:f0:
                    88:6e:a4:80:fd:1b:3f:d3:95:dd:41:8e:73:30:8c:
                    ad:bf:d4:15:66:db:97:a1:54:44:3a:2d:6a:83:6d:
                    73:d1:77:7e:73:12:23:cf:83:70:6f:69:6c:c8:6c:
                    90:08:0f:a0:59:08:41:6c:36:4c:01:ef:5a:36:7e:
                    bc:21:36:2f:7b:5c:67:40:28:45:a8:3b:bc:6f:2c:
                    50:1c:de:56:9a:6f:09:3f:49:b9:43:b3:9d:eb:01:
                    f4:15:49:27:b8:a7:60:d3:0d:5d:50:20:f0:8b:16:
                    28:94:20:08:1a:a0:d0:0e:b6:be:9f:cd:8b:85:6c:
                    e5:01:96:62:d6:b7:01:b5:46:6d:1f:3e:af:4e:61:
                    3e:8c:90:35:9f:5b:df:68:50:7e:6a:50:ef:b9:15:
                    36:34:62:08:5a:eb:95:a9:db:b0:f9:89:6d:38:c2:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4C:9E:28:93:9A:99:74:09:79:ED:89:29:F9:66:7C:C0:2A:C8:40
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/C6EB4BB695C411EFB4437E46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.114.120/29

    Signature Algorithm: sha256WithRSAEncryption
         c3:dd:d9:e4:2f:16:96:11:9c:de:14:a3:8d:00:bd:5b:c0:4f:
         c4:98:cb:37:85:71:66:32:b5:e4:34:cf:92:19:bd:32:19:3b:
         86:a4:c4:93:87:82:1b:7e:7d:ed:2b:a2:2b:c8:1a:21:18:4d:
         41:1c:0d:a7:7a:d8:79:8b:cf:b3:70:f1:05:be:d6:30:c2:3e:
         1f:19:5a:6f:e5:02:8c:a6:2d:fd:ef:5f:5a:00:1d:fd:44:9c:
         72:cb:a4:a7:11:84:71:29:4a:c8:32:a2:0b:51:87:a1:0d:d0:
         8c:1c:d3:50:47:60:ba:50:22:bb:51:a1:88:11:f7:8a:ad:26:
         4f:81:3b:7f:98:e0:f9:d7:a6:3b:c6:b1:c9:38:dc:35:d6:b3:
         45:bb:72:e6:d5:b7:78:7a:4b:eb:5d:84:c8:32:9c:1e:35:db:
         7c:10:1f:4a:e9:53:35:16:d2:35:e4:22:d2:3e:ab:4c:92:66:
         2e:73:f8:e1:eb:c2:37:a0:40:3a:75:b1:98:2c:01:1a:c5:f7:
         ef:87:df:46:c7:ff:d3:88:a8:db:0a:d0:df:8e:34:53:f2:03:
         21:ac:00:17:ec:9e:63:50:66:7d:8a:00:94:f2:98:d7:14:b9:
         f2:7e:7f:43:58:53:78:2d:d3:31:a5:c6:a7:6f:a5:f1:0f:91:
         e7:93:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:35:08 2026 by rpki-client