Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/8CCD4284ECEB11F08F189C11746F56BC.roa
File:                     8CCD4284ECEB11F08F189C11746F56BC.roa (raw, json)
Hash identifier:          B9wwelihVNbWqG3EWwGK+ZW8jF7M6pX43MoH5Y0lk+Y=
Subject key identifier:   59:C6:EF:03:0E:DD:60:86:31:0E:86:E0:54:2D:3E:AD:06:90:3A:1E
Certificate issuer:       /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial:       20
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/8CCD4284ECEB11F08F189C11746F56BC.roa
Signing time:             Sun 01 Mar 2026 05:46:42 +0000
ROA not before:           Thu 08 Jan 2026 23:41:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        192.43.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
                          rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
        Validity
            Not Before: Jan  8 23:41:27 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3d2c1-0d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:db:44:36:2e:1d:37:f9:f7:e0:95:cc:cb:22:
                    08:fe:7c:b2:0e:5d:e0:ac:10:b4:0d:7e:81:82:b5:
                    c1:4e:c0:6e:a3:bb:cc:a4:e3:75:70:cd:07:04:a0:
                    f6:6b:6c:59:4d:00:dd:60:4f:61:da:b7:d3:3d:8e:
                    1c:90:00:01:49:4a:0e:1d:a2:d2:02:01:cf:cd:ef:
                    e6:b1:d6:ab:62:9f:30:91:dd:d9:d9:cd:a9:1f:ec:
                    0c:86:5e:47:f6:62:7a:b5:4c:7e:61:60:21:97:0f:
                    24:bc:8d:f7:ab:9d:af:87:a7:8c:6a:25:7e:20:00:
                    d9:ab:62:57:07:3a:b7:15:a3:f1:95:1e:11:48:5e:
                    c7:92:a8:17:e4:cf:2e:6b:3d:61:fc:cb:4a:2f:47:
                    e1:91:22:fe:4f:e2:9e:b9:ee:d9:55:bb:83:8c:3b:
                    9e:f8:da:83:ed:70:cb:f3:6a:63:2d:d0:43:00:ea:
                    91:f8:06:40:55:b9:1b:3e:9b:8a:bb:bd:dd:7d:cc:
                    e0:0b:1a:c7:17:31:a9:e3:7f:8a:b5:7e:29:d8:1b:
                    27:d4:36:53:8a:8e:24:1c:96:1f:98:e7:1d:18:85:
                    75:b2:62:6c:e0:86:e2:97:ae:22:37:43:01:ae:b0:
                    ef:2a:a3:c5:0a:9c:94:96:87:e6:0a:ae:6e:31:37:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:EF:03:0E:DD:60:86:31:0E:86:E0:54:2D:3E:AD:06:90:3A:1E
            X509v3 Authority Key Identifier:
                keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/8CCD4284ECEB11F08F189C11746F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:8c:15:29:66:d2:7f:60:13:14:77:df:88:e1:f0:94:d1:c2:
         12:08:88:14:52:9f:1c:97:b6:ed:2d:8b:14:18:58:94:d1:b8:
         87:38:d9:ed:57:e1:03:c0:ed:93:89:4b:4f:04:e1:b3:0a:be:
         8f:1b:ac:b6:c2:d4:9a:e0:38:c0:7b:37:6f:09:b3:77:e6:d1:
         2c:28:b5:de:11:10:16:41:ce:ea:66:18:c9:24:be:d3:8a:bc:
         bb:fb:1d:97:8d:55:a0:8e:cf:9f:3f:85:4a:e9:ec:df:fe:24:
         85:b9:b8:8d:d8:00:82:59:63:89:78:93:ef:23:0d:28:61:f8:
         08:96:c8:a6:aa:f0:15:c9:0f:7d:e1:ec:54:b0:ed:40:7e:fd:
         6b:a2:f7:51:9f:dc:06:6d:43:43:82:4d:23:80:2d:d2:78:a4:
         d9:75:bb:fd:fe:ac:f6:bc:34:86:e8:b6:46:ae:55:15:06:a2:
         1d:ab:45:de:e4:1b:a6:bd:49:36:46:04:2a:91:bf:33:43:35:
         1a:3c:6e:79:58:28:0a:8b:1a:df:c4:77:0b:60:2f:e5:a5:b0:
         9e:e5:c0:35:98:ef:19:f9:3c:dc:15:8c:e6:66:22:5d:b4:8e:
         8f:8f:48:67:49:f7:89:8f:53:5a:14:e1:d1:fa:40:a0:13:e0:
         4c:a6:59:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:52 2026 by rpki-client