Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/C6D6646ECB5E11F0BCC7A882C4F9AE02.roa
File:                     C6D6646ECB5E11F0BCC7A882C4F9AE02.roa (raw, json)
Hash identifier:          OXUdIHwjzJMlb7PzfBCuO91SJp6lBM8gcOwFKOIk7G8=
Subject key identifier:   E6:FF:B3:DA:B2:0C:EA:D3:88:1E:A1:EE:52:25:4B:06:69:01:72:2F
Certificate issuer:       /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial:       2441
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/C6D6646ECB5E11F0BCC7A882C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 16:29:10 +0000
ROA not before:           Tue 18 Aug 2026 16:29:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45282
IP address blocks:        123.176.57.0/24 maxlen: 24
                          123.176.59.0/24 maxlen: 24
                          202.129.192.0/24 maxlen: 24
                          202.129.194.0/24 maxlen: 24
                          202.129.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9281 (0x2441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Validity
            Not Before: Aug 18 16:29:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a848856-a51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:d7:00:54:27:8e:cb:80:2b:1b:5e:92:50:
                    e4:4e:aa:c8:2c:0a:c5:09:44:72:4b:18:94:bb:f4:
                    34:7b:fe:f5:8c:c4:fc:ad:17:a6:81:bb:ed:65:de:
                    88:f9:6b:ce:24:d7:b1:78:08:43:11:ef:fb:75:2e:
                    b4:8d:73:88:58:9d:9f:b5:4b:ef:a1:75:45:7b:37:
                    2d:45:09:7e:20:2e:c7:c0:47:14:2f:92:6a:a8:82:
                    15:5e:83:96:52:4c:93:17:54:e3:60:88:f7:aa:6e:
                    71:c9:c9:af:b9:93:ee:87:15:b8:8a:8e:b1:a1:f5:
                    3a:ba:a8:f3:bc:f5:a1:81:91:ca:b4:c0:13:b1:58:
                    55:4a:c5:df:1d:f3:d1:6d:fe:17:a1:3f:e0:5e:94:
                    63:9d:5a:c1:03:97:49:5b:16:3b:a3:80:25:b7:09:
                    0b:43:91:a8:56:5a:36:57:60:00:47:0c:9f:b7:f6:
                    ec:dc:b5:98:fd:fc:a0:e6:f8:7f:3b:67:33:3a:01:
                    67:c7:3d:77:10:3d:8c:34:8d:5a:74:d4:6a:97:4d:
                    4c:db:be:54:00:c1:b6:22:00:ff:64:d7:38:9f:7c:
                    bc:89:95:35:9f:57:e2:15:4d:8d:a9:47:39:31:4a:
                    f5:d7:45:46:db:ed:2c:5f:27:7a:e4:15:7b:19:ba:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FF:B3:DA:B2:0C:EA:D3:88:1E:A1:EE:52:25:4B:06:69:01:72:2F
            X509v3 Authority Key Identifier:
                keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/C6D6646ECB5E11F0BCC7A882C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.176.57.0/24
                  123.176.59.0/24
                  202.129.192.0/24
                  202.129.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:27:79:9e:2a:2a:3c:b2:c0:a4:19:86:59:8f:ef:00:60:1b:
         6a:52:32:51:bf:f0:5e:bd:14:18:de:56:2f:28:13:bb:c2:3e:
         04:c8:b4:c0:33:96:bb:b4:8b:e7:8c:9a:d5:a2:f3:b6:65:1b:
         d2:c2:a5:9c:1e:f2:59:a6:8c:82:5c:8f:49:60:f4:25:91:e5:
         f6:12:2a:71:df:37:5e:f3:18:0b:ae:6a:74:e3:dc:5f:23:b4:
         7c:31:c2:2c:40:48:fa:b9:02:0e:96:c6:3c:83:0e:1a:92:42:
         fd:88:7d:88:a8:e5:a1:8d:ff:5e:9d:87:cf:0d:32:aa:61:e3:
         31:bd:be:21:d6:94:f0:8b:a4:2f:d0:74:8e:3b:7a:5f:82:7e:
         5a:c3:7f:c9:64:d6:70:39:36:2a:5a:4e:25:79:fe:d7:37:2a:
         22:eb:d0:f3:84:f7:56:a6:c4:47:98:84:0a:fe:55:64:d3:c5:
         35:fa:16:d6:c5:1c:d1:b6:ee:e4:d2:00:7c:a0:ec:f4:d0:58:
         47:d8:d7:8e:b4:df:45:f8:ac:13:ad:72:7b:44:62:4d:7d:fb:
         10:9b:ec:3c:72:75:71:01:10:35:d4:17:06:82:67:fe:21:00:
         55:63:49:ef:e4:ba:8a:dd:75:af:1c:85:e5:08:ed:bb:e5:27:
         db:32:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:38 2026 by rpki-client