Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/EC5F60DE06AD11F1867726090C3D8C67.roa
File:                     EC5F60DE06AD11F1867726090C3D8C67.roa (raw, json)
Hash identifier:          VTpoI2guLq437kVCDfWE+6xBdUMZG9YGPiTEp6Ng2tk=
Subject key identifier:   62:4A:63:23:B6:6E:52:4B:9B:9A:88:0C:CC:3F:1A:5C:0D:4A:FB:BB
Certificate issuer:       /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial:       0101
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/EC5F60DE06AD11F1867726090C3D8C67.roa
Signing time:             Sat 05 Sep 2026 06:56:58 +0000
ROA not before:           Sat 05 Sep 2026 06:56:58 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     131464
IP address blocks:        202.12.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
        Validity
            Not Before: Sep  5 06:56:58 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9bbd3a-97f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:0a:b2:47:d8:73:95:ec:30:07:8a:6f:ea:
                    2b:a6:c2:bd:98:63:d9:b5:20:aa:8b:0a:23:14:ab:
                    a1:b6:87:7c:43:b0:b9:0e:d8:8d:ca:61:ec:e3:67:
                    d7:6f:c3:6f:40:4b:75:23:3a:11:f0:82:a8:a6:eb:
                    43:44:22:04:35:12:50:49:1a:8a:3c:f1:df:89:22:
                    fc:38:11:93:5d:f9:0e:a2:ba:d5:d8:eb:82:1a:5d:
                    a1:f9:7c:7f:a4:c1:a8:5c:f9:e3:65:e9:71:f2:36:
                    a4:9f:17:6f:09:37:00:b8:c9:dc:ab:4d:78:2f:cd:
                    14:86:9e:e8:7e:16:97:83:b9:67:fb:57:01:d6:80:
                    57:53:3b:85:47:c4:14:da:6d:12:16:0b:fb:dc:94:
                    c7:fe:64:d2:53:8d:e5:d9:a9:2e:a0:98:ea:0b:97:
                    26:7a:46:11:4b:cf:c1:28:8f:c1:ba:bd:41:45:3b:
                    c7:07:fe:59:69:f8:6b:6f:42:62:0f:b3:fd:44:84:
                    95:9e:94:47:0f:5d:1a:a9:75:be:79:d1:3e:4d:9f:
                    39:4c:77:ca:f2:65:54:9f:88:4f:60:2c:ce:20:5c:
                    64:e1:5a:60:64:4e:e0:ca:92:38:3f:6f:82:0d:a2:
                    05:2d:e2:46:97:e5:c2:54:40:69:d8:97:ec:98:29:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4A:63:23:B6:6E:52:4B:9B:9A:88:0C:CC:3F:1A:5C:0D:4A:FB:BB
            X509v3 Authority Key Identifier:
                keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/EC5F60DE06AD11F1867726090C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:d0:98:66:81:05:64:c0:91:d9:56:44:f9:85:5d:9e:d8:e7:
         8e:52:a2:90:a4:a3:50:66:7a:4d:7e:bf:50:f4:4d:1c:af:5b:
         1b:23:6d:43:b6:ce:35:08:4a:f9:b3:30:26:b4:38:78:be:a9:
         73:c0:48:4b:d5:43:68:11:cc:ad:fe:15:93:db:44:04:32:58:
         21:d2:79:24:6b:83:8d:18:cb:a3:ad:68:9c:e2:18:90:8b:90:
         37:a9:f0:3d:7e:36:d6:bc:39:c9:d6:3c:ba:0e:d4:9d:60:2e:
         8a:8d:4d:93:5b:30:76:1d:51:ea:2a:3e:03:e7:71:8a:31:24:
         28:10:fc:b7:c8:74:f7:28:85:7a:3f:3f:33:b9:26:0a:aa:61:
         0c:7e:58:39:10:e7:92:7b:aa:cc:1c:e8:25:d3:ad:25:4e:44:
         25:6c:be:22:54:0d:a6:95:56:c8:19:f2:c6:4d:7b:e0:61:71:
         37:2a:c7:fe:d5:52:dc:0a:26:3b:64:ae:b6:e3:20:50:d9:3b:
         40:3e:6b:0e:e4:33:d5:df:c8:4b:83:94:86:1e:27:c9:3f:f2:
         f0:de:6d:dc:af:99:bd:20:fe:82:3e:90:52:f9:c6:09:08:31:
         c2:6a:54:9c:77:d6:31:59:85:1f:59:b5:53:07:02:97:e1:ef:
         47:c3:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:28:16 2026 by rpki-client