Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/CEC68F44973211E9954F0565C4F9AE02.roa
File:                     CEC68F44973211E9954F0565C4F9AE02.roa (raw, json)
Hash identifier:          kFvEU1sBx2v9u00o7M6vLkd+IZa0dJEcb2rZMVFeoNs=
Subject key identifier:   E0:AD:A4:70:52:07:C5:B8:E0:1A:FE:5F:80:E0:57:01:18:0C:1C:07
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3709
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/CEC68F44973211E9954F0565C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:11:38 +0000
ROA not before:           Thu 30 Jul 2026 15:11:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     7470
IP address blocks:        203.155.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14089 (0x3709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:11:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b69aa-8074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:4a:33:15:d3:27:1c:c6:b0:77:2f:83:ee:
                    29:e5:35:d1:be:92:d4:4c:08:82:da:e9:dc:35:da:
                    31:7f:a5:f8:20:1a:f0:30:c3:8c:74:75:e1:7f:82:
                    22:43:72:12:17:8a:7b:fe:4b:52:a8:56:3c:bc:88:
                    87:7f:ef:a0:13:04:ad:d8:6f:6d:67:d7:a3:75:b6:
                    2b:f8:a9:9d:1c:f2:c3:bd:ed:23:84:f2:a0:89:31:
                    10:23:82:5e:d4:cd:3c:e4:27:fe:dc:73:c5:50:28:
                    49:6f:b9:de:2b:67:4e:a7:85:f6:57:ce:cb:ec:ab:
                    70:0c:5e:d1:79:4d:ff:51:5b:c1:98:ef:b4:cf:92:
                    66:43:f4:c5:83:e8:eb:fa:98:8b:04:2d:27:3c:db:
                    a7:e9:e5:a0:ce:5d:ed:d6:f2:35:01:76:22:a5:30:
                    cb:0b:0d:83:c7:90:44:0b:be:b5:67:c7:b8:f3:b4:
                    09:6a:8d:4f:5a:60:78:bb:4d:37:bf:0f:a6:ff:53:
                    81:8f:b3:7f:3e:36:f9:52:c0:3d:42:67:e4:9d:25:
                    8e:e9:19:19:8a:ce:25:d5:5f:ab:d4:d9:94:02:89:
                    02:ec:96:8a:bd:8e:8f:b4:96:9b:02:1e:1c:20:46:
                    0f:37:68:76:de:84:9f:76:41:5e:7f:d9:ca:bb:2c:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AD:A4:70:52:07:C5:B8:E0:1A:FE:5F:80:E0:57:01:18:0C:1C:07
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/CEC68F44973211E9954F0565C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:a1:17:8e:e2:04:42:74:2f:c3:b6:3f:ff:c0:80:d6:40:
         39:e6:c3:ab:2d:0f:de:58:30:d5:6e:b9:ca:ff:3f:01:21:3c:
         dc:63:df:d7:1c:f2:87:0d:5b:b3:cd:4a:b6:51:a1:ef:79:bb:
         cd:a8:8b:2c:ba:f1:1c:b3:36:30:c5:8a:81:47:02:bd:13:cb:
         a2:94:93:3d:04:be:f8:98:0c:c3:ae:77:ad:8e:0e:6e:4c:35:
         ff:95:a5:dd:ad:08:7f:a2:e5:4f:d5:b8:aa:b1:35:73:2c:fb:
         53:17:24:42:c7:2b:43:a6:80:b4:77:93:8d:54:36:a8:8f:0a:
         4d:aa:b9:36:67:a8:06:35:9b:ae:fa:55:09:dc:60:2f:c6:f7:
         78:5e:98:8e:93:a7:28:7b:93:da:e0:e9:79:dc:83:4c:c5:da:
         77:16:bf:f4:8e:98:78:5c:c3:16:35:77:81:87:9a:94:ec:0a:
         3d:3c:7e:03:f8:50:79:77:0d:09:44:0f:f2:44:7f:52:3e:9d:
         48:be:a1:06:6c:c1:46:2e:d9:71:8f:8e:6e:77:66:99:88:80:
         25:ee:4f:4f:93:05:43:9a:ed:fb:00:b2:67:02:37:58:9a:e6:
         c9:fc:5f:db:07:f1:73:60:fd:06:f6:ad:10:35:29:ef:8f:2b:
         68:8a:ae:3f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjYwNzMwMTUxMTM4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiNjlhYS04MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiOZKMxXTJxzGsHcvg+4p5TXRvpLUTAiC2uncNdoxf6X4IBrwMMOMdHXhf4Ii
Q3ISF4p7/ktSqFY8vIiHf++gEwSt2G9tZ9ejdbYr+KmdHPLDve0jhPKgiTEQI4Je
1M085Cf+3HPFUChJb7neK2dOp4X2V87L7KtwDF7ReU3/UVvBmO+0z5JmQ/TFg+jr
+piLBC0nPNun6eWgzl3t1vI1AXYipTDLCw2Dx5BEC761Z8e487QJao1PWmB4u003
vw+m/1OBj7N/Pjb5UsA9QmfknSWO6RkZis4l1V+r1NmUAokC7JaKvY6PtJabAh4c
IEYPN2h23oSfdkFef9nKuyy+IwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOCtpHBS
B8W44Br+X4DgVwEYDBwHMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvQ0VDNjhGNDQ5
NzMyMTFFOTk1NEYwNTY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy5uWMA0GCSqGSIb3DQEBCwUAA4IBAQBZvaEXjuIEQnQvw7Y//8CA
1kA55sOrLQ/eWDDVbrnK/z8BITzcY9/XHPKHDVuzzUq2UaHvebvNqIssuvEcszYw
xYqBRwK9E8uilJM9BL74mAzDrnetjg5uTDX/laXdrQh/ouVP1biqsTVzLPtTFyRC
xytDpoC0d5ONVDaojwpNqrk2Z6gGNZuu+lUJ3GAvxvd4XpiOk6coe5Pa4Ol53INM
xdp3Fr/0jph4XMMWNXeBh5qU7Ao9PH4D+FB5dw0JRA/yRH9SPp1IvqEGbMFGLtlx
j45ud2aZiIAl7k9PkwVDmu37ALJnAjdYmubJ/F/bB/FzYP0G9q0QNSnvjytoiq4/
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:51:05 2026 by rpki-client