Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/EC5BF06C8A3411EFBF173E5BC4F9AE02.roa
File:                     EC5BF06C8A3411EFBF173E5BC4F9AE02.roa (raw, json)
Hash identifier:          bLF9Qna0qP9uytxYo8IrGU+/S6ioRz9f5NPwRbsI6g0=
Subject key identifier:   A9:BD:C1:93:17:A4:B5:F2:22:C2:89:93:8E:6A:7F:34:13:5A:F1:D1
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2971
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/EC5BF06C8A3411EFBF173E5BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:25:14 +0000
ROA not before:           Tue 02 Sep 2025 16:03:48 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     38491
IP address blocks:        121.127.4.0/24 maxlen: 24
                          121.127.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10609 (0x2971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Sep  2 16:03:48 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4929a-b864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:c1:da:e7:0f:66:49:6b:5e:cf:c3:b1:29:
                    7b:b3:83:6a:ae:8b:03:2e:73:3c:2e:50:30:58:d8:
                    e3:aa:1b:9c:69:d6:81:c6:ba:60:fb:49:8b:ea:e6:
                    bf:1b:6c:eb:64:01:7e:97:ec:0a:f4:43:8f:9f:d0:
                    8f:e5:8f:32:4a:aa:4b:7b:65:ab:04:40:fd:4c:c1:
                    69:8b:99:18:d0:62:36:8c:30:78:40:b0:60:0d:97:
                    33:84:44:0e:df:2b:74:71:74:a1:0a:e3:21:52:f9:
                    e2:c3:8c:27:74:4a:9a:12:f4:6a:f4:1e:3a:a3:7c:
                    f0:14:2f:4d:94:53:76:8b:15:2e:f2:c5:13:73:a8:
                    3f:a6:b8:7e:df:fd:15:66:6f:9d:20:51:56:3e:b0:
                    c9:11:2d:e9:6e:3e:ac:f3:98:80:13:76:30:18:79:
                    62:c5:f2:1a:ea:9b:5c:f6:ea:8c:98:b2:1c:10:42:
                    76:6e:04:97:b6:49:b8:e9:6d:6b:ec:48:c9:4a:77:
                    48:d5:0a:d3:a3:8b:15:bf:71:80:e9:29:4b:c9:2f:
                    a5:fa:15:f3:aa:c1:65:71:4f:2a:72:d6:e4:b1:d1:
                    70:bf:2f:1f:09:27:c1:1b:16:d4:ba:be:58:6f:c4:
                    1c:9d:18:07:7d:71:5d:4c:84:cd:cd:64:4a:7e:b1:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:C1:93:17:A4:B5:F2:22:C2:89:93:8E:6A:7F:34:13:5A:F1:D1
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/EC5BF06C8A3411EFBF173E5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.127.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:5a:f8:01:6f:9c:c7:cd:90:3f:53:ef:be:12:ce:24:c0:3e:
         c2:36:07:fa:7e:66:00:84:c7:92:2a:78:3f:d6:29:ca:93:b4:
         c3:07:2a:4a:43:23:69:c2:85:99:0f:88:1d:2c:2d:28:37:e0:
         bc:ba:9b:95:be:ef:5f:1e:e9:a1:b3:89:49:5e:a3:95:da:df:
         5e:a8:48:2f:d5:89:80:cc:52:6d:d8:00:1a:3f:3d:f2:59:1e:
         6b:c3:e9:c0:c3:61:a4:62:0b:55:2c:fc:42:d3:72:fc:c8:56:
         b0:1e:bb:f6:a3:6a:af:4c:51:5b:0a:0c:14:9c:74:be:78:9a:
         55:99:ea:61:41:14:45:8a:81:20:3d:61:22:a2:9d:2c:b5:eb:
         7c:66:fc:4a:a7:98:e3:75:03:c2:29:91:2d:28:c1:7b:95:c8:
         b1:18:95:d1:21:94:e1:98:45:6c:02:6a:09:40:d0:1e:f7:ba:
         82:08:33:1f:46:bf:2c:f5:1d:45:c8:eb:8f:63:d1:24:c0:12:
         ce:f2:5c:9a:09:a4:3d:57:d4:c3:71:79:df:8d:0a:93:b3:7c:
         db:bc:7c:e8:0e:19:ea:a6:21:c6:1b:55:85:6b:ef:23:5d:c0:
         ec:93:7a:42:6d:a2:70:76:8e:2a:bf:20:75:ce:cc:84:db:cb:
         cd:bc:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:59 2026 by rpki-client