Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/0C90021C735211F1B7F2DC995DA30FBC.roa
File:                     0C90021C735211F1B7F2DC995DA30FBC.roa (raw, json)
Hash identifier:          kSKB4fmeGpKRTnS7NMXpU4QFv3VUluoz5Y3Jq+1W/j0=
Subject key identifier:   83:DB:9A:F3:0E:EE:B4:19:7D:0B:67:2A:81:40:B3:8A:89:94:BA:BC
Certificate issuer:       /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial:       0869
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/0C90021C735211F1B7F2DC995DA30FBC.roa
Signing time:             Mon 29 Jun 2026 00:32:46 +0000
ROA not before:           Mon 29 Jun 2026 00:32:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        202.62.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
                          rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 21:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D26, serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
        Validity
            Not Before: Jun 29 00:32:46 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a41bd2e-a9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:41:ec:5b:32:45:2e:1e:77:4e:8f:52:c0:
                    5c:60:48:9b:52:59:a1:aa:9a:11:cf:0f:79:da:61:
                    3f:dd:c3:23:9e:fb:7a:af:02:40:fd:da:d3:36:3d:
                    97:b9:dc:86:10:31:59:e3:6d:45:6d:c3:9a:68:08:
                    7a:11:99:9f:56:06:26:a0:4f:5b:53:c6:66:03:15:
                    f2:7e:61:2f:fe:e6:ac:07:e5:c6:d3:60:20:6a:34:
                    86:ed:89:7c:0e:50:68:f0:02:bb:ec:29:fa:61:f6:
                    d1:92:1a:46:7c:8a:12:cc:6e:f1:4f:f4:3a:d6:6c:
                    94:16:ba:ac:6c:5b:5d:ee:61:3d:c9:63:32:d2:a8:
                    ec:bf:e8:2c:ff:d9:3b:7d:0e:a0:48:85:89:3e:15:
                    3a:c4:78:b5:c7:12:b8:cd:21:6c:46:3a:88:eb:f7:
                    9f:e3:08:f5:c5:5e:ae:b4:6b:dc:d4:13:d9:25:e9:
                    99:b1:9f:79:da:6e:e7:63:b7:d2:e6:5b:db:0d:72:
                    00:fd:0d:34:f0:74:8b:73:64:2f:25:cb:56:c0:36:
                    dd:2c:00:40:4f:90:27:7e:19:36:e0:60:e7:ed:4e:
                    c1:a4:9e:47:56:45:75:51:58:b8:ad:2b:99:02:96:
                    0b:34:0a:c6:d4:9f:ac:5e:da:75:87:81:5c:d2:14:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DB:9A:F3:0E:EE:B4:19:7D:0B:67:2A:81:40:B3:8A:89:94:BA:BC
            X509v3 Authority Key Identifier:
                keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/0C90021C735211F1B7F2DC995DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:34:3d:0a:c4:ca:46:8c:25:83:ce:f9:81:e0:a3:6b:c6:a1:
         e8:e5:15:1e:17:12:7a:16:b4:4d:47:20:b8:02:26:56:eb:74:
         c3:36:ec:7e:9b:ab:97:a9:2f:57:dc:1f:21:9f:3a:c4:a8:84:
         de:5d:60:76:10:53:1a:9a:42:61:84:13:f5:2b:c2:65:8b:c7:
         34:7b:94:98:fe:58:e0:8a:cb:00:ca:d1:ca:fe:2a:ef:f8:4a:
         91:dc:a7:d3:ca:c1:21:97:ef:7d:ee:17:74:dd:c8:34:38:c2:
         21:7c:b0:bb:63:ef:20:bb:92:c4:36:83:80:6c:3d:e9:b3:f9:
         3e:b7:af:62:15:41:ba:12:05:5c:de:bf:0b:b8:01:b5:da:d8:
         45:e0:af:34:38:90:4f:d1:dd:9f:f1:60:78:8e:de:75:57:5d:
         0d:6f:f9:d1:b2:db:e0:ad:6f:b1:32:f2:57:f0:11:8e:41:a9:
         b0:54:23:88:71:3c:60:e0:46:b4:53:62:3b:17:74:92:9e:c8:
         13:b1:41:f4:6c:d9:b9:bb:89:27:fa:84:23:af:11:75:30:3c:
         c3:7c:37:9a:d9:d7:bf:24:ec:a7:db:f6:8e:38:76:29:e2:4e:
         8d:c9:87:bc:6f:32:db:33:35:39:08:a9:a1:6b:e9:9c:74:51:
         af:75:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:13 2026 by rpki-client