Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F62C/A69C4E56A7A511F1A8143D4E4C11F970/7AB763ECA84611F1B17C88213B11F970.roa
File:                     7AB763ECA84611F1B17C88213B11F970.roa (raw, json)
Hash identifier:          bV4vMqoOpbV+K708Qp+LScaITr1Ct4qBQpkgQCTwoD0=
Subject key identifier:   C1:3B:34:CE:C3:3B:54:E5:7E:7F:BF:71:37:77:44:5B:90:E5:C7:8A
Certificate issuer:       /CN=A911F62C/serialNumber=C1819A07F34254DB3973B806076E19CB08EFE15C
Certificate serial:       0D
Authority key identifier: C1:81:9A:07:F3:42:54:DB:39:73:B8:06:07:6E:19:CB:08:EF:E1:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYGaB_NCVNs5c7gGB24Zywjv4Vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F62C/A69C4E56A7A511F1A8143D4E4C11F970/7AB763ECA84611F1B17C88213B11F970.roa
Signing time:             Thu 17 Sep 2026 10:00:10 +0000
ROA not before:           Thu 17 Sep 2026 10:00:10 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132065
IP address blocks:        202.142.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F62C/A69C4E56A7A511F1A8143D4E4C11F970/wYGaB_NCVNs5c7gGB24Zywjv4Vw.crl
                          rsync://rpki.apnic.net/member_repository/A911F62C/A69C4E56A7A511F1A8143D4E4C11F970/wYGaB_NCVNs5c7gGB24Zywjv4Vw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYGaB_NCVNs5c7gGB24Zywjv4Vw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F62C, serialNumber=C1819A07F34254DB3973B806076E19CB08EFE15C
        Validity
            Not Before: Sep 17 10:00:10 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aabba2a-907c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d8:80:30:ba:a9:ff:51:5b:d7:6d:78:01:69:
                    25:b3:8b:a9:7d:e5:51:a2:9a:bf:04:95:fc:9d:9d:
                    6e:d4:be:8b:67:bd:fd:8d:ad:91:f6:d3:84:d6:ae:
                    31:5f:70:c1:9c:59:bb:12:cd:5d:06:42:f4:f2:0a:
                    56:a3:a6:2b:d0:5c:c5:79:a4:f9:86:6c:47:35:3c:
                    fe:03:b5:ec:f6:80:3c:c1:85:ed:5e:29:dc:b7:b9:
                    44:e7:85:97:2c:3e:ae:78:31:88:d3:68:db:ab:9f:
                    58:8a:d8:c5:fa:cf:11:c1:b6:07:4f:25:22:81:cf:
                    0a:db:b7:58:c0:b9:8e:54:2f:6a:0d:d8:84:2e:f2:
                    1d:4f:fa:b7:45:c2:7e:48:ae:3d:62:b7:e7:39:2d:
                    81:cd:6d:ba:f7:2e:97:d6:86:a0:78:dd:2c:68:14:
                    15:00:fa:10:26:59:20:36:21:c5:15:9d:75:6b:00:
                    11:ac:61:34:ed:3e:d7:30:2e:21:c4:5f:b6:d3:4d:
                    41:14:77:09:24:47:1f:97:43:0b:b6:a5:26:56:a1:
                    25:07:e0:28:8f:e5:af:ed:81:11:40:21:66:ae:3e:
                    eb:d7:6b:3a:9d:87:ff:c3:06:70:d9:0a:3e:53:61:
                    74:c6:93:5c:4d:85:80:0e:c7:ca:9e:00:2f:f7:ce:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3B:34:CE:C3:3B:54:E5:7E:7F:BF:71:37:77:44:5B:90:E5:C7:8A
            X509v3 Authority Key Identifier:
                keyid:C1:81:9A:07:F3:42:54:DB:39:73:B8:06:07:6E:19:CB:08:EF:E1:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F62C/A69C4E56A7A511F1A8143D4E4C11F970/wYGaB_NCVNs5c7gGB24Zywjv4Vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYGaB_NCVNs5c7gGB24Zywjv4Vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F62C/A69C4E56A7A511F1A8143D4E4C11F970/7AB763ECA84611F1B17C88213B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.142.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:f1:17:b8:0a:f2:2a:10:a0:c4:a8:54:c5:fe:aa:5b:d9:
         49:3d:01:cc:d2:be:2b:8c:3a:b7:ad:ee:a4:2c:c3:d7:e0:c1:
         69:19:c6:42:1d:8e:d3:97:d2:ed:3d:8d:24:04:f3:ec:b7:3a:
         ac:9c:f6:ba:51:14:02:04:26:3d:70:d7:54:da:45:ef:e8:7a:
         6c:a4:f6:ed:22:98:aa:4e:82:4d:83:f9:75:29:4f:d2:84:fa:
         14:e1:be:30:20:74:e6:c1:ea:81:3c:1a:36:e1:61:99:ea:3f:
         69:0f:16:97:64:83:69:a7:0e:60:3c:80:ff:93:a4:21:14:45:
         5a:91:e7:6b:0c:2c:17:e8:53:fe:ce:60:85:05:fd:4f:d4:9b:
         a3:5e:eb:ed:d0:ec:47:0e:ef:e0:4f:88:24:c6:18:4c:02:43:
         14:39:8a:e0:c5:65:c5:ae:dc:4a:27:92:bf:c0:77:49:e8:60:
         74:ed:78:b1:f8:fe:78:90:a7:6c:4a:f3:34:f5:7d:11:ab:8f:
         df:1f:58:cd:04:21:a5:07:91:8c:c2:c6:06:1b:2f:d4:6a:81:
         3c:cf:cd:b0:6a:0a:06:f4:03:d7:50:f9:4f:3b:5a:59:f7:40:
         54:25:11:58:8a:56:46:01:19:ba:6e:3b:6c:7a:60:86:d8:44:
         a6:76:44:ea
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RjYyQzExMC8GA1UEBRMoQzE4MTlBMDdGMzQyNTREQjM5NzNCODA2MDc2RTE5Q0Iw
OEVGRTE1QzAeFw0yNjA5MTcxMDAwMTBaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYWJiYTJhLTkwN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDf2IAwuqn/UVvXbXgBaSWzi6l95VGimr8ElfydnW7Uvotnvf2NrZH204TWrjFf
cMGcWbsSzV0GQvTyClajpivQXMV5pPmGbEc1PP4Dtez2gDzBhe1eKdy3uUTnhZcs
Pq54MYjTaNurn1iK2MX6zxHBtgdPJSKBzwrbt1jAuY5UL2oN2IQu8h1P+rdFwn5I
rj1it+c5LYHNbbr3LpfWhqB43SxoFBUA+hAmWSA2IcUVnXVrABGsYTTtPtcwLiHE
X7bTTUEUdwkkRx+XQwu2pSZWoSUH4CiP5a/tgRFAIWauPuvXazqdh//DBnDZCj5T
YXTGk1xNhYAOx8qeAC/3zk1tAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUwTs0zsM7
VOV+f79xN3dEW5Dlx4owHwYDVR0jBBgwFoAUwYGaB/NCVNs5c7gGB24Zywjv4Vww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNjJDL0E2OUM0RTU2QTdB
NTExRjFBODE0M0Q0RTRDMTFGOTcwL3dZR2FCX05DVk5zNWM3Z0dCMjRaeXdqdjRW
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd1lHYUJfTkNWTnM1YzdnR0IyNFp5d2p2NFZ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjYyQy9BNjlDNEU1NkE3QTUxMUYxQTgxNDNENEU0QzExRjk3MC83QUI3NjNFQ0E4
NDYxMUYxQjE3Qzg4MjEzQjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADKjgYwDQYJKoZIhvcNAQELBQADggEBAGUf8Re4CvIqEKDEqFTF/qpb
2Uk9AczSviuMOret7qQsw9fgwWkZxkIdjtOX0u09jSQE8+y3Oqyc9rpRFAIEJj1w
11TaRe/oemyk9u0imKpOgk2D+XUpT9KE+hThvjAgdObB6oE8GjbhYZnqP2kPFpdk
g2mnDmA8gP+TpCEURVqR52sMLBfoU/7OYIUF/U/Um6Ne6+3Q7EcO7+BPiCTGGEwC
QxQ5iuDFZcWu3Eonkr/Ad0noYHTteLH4/niQp2xK8zT1fRGrj98fWM0EIaUHkYzC
xgYbL9RqgTzPzbBqCgb0A9dQ+U87Wln3QFQlEViKVkYBGbpuO2x6YIbYRKZ2ROo=
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:27:03 2026 by rpki-client