Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/2DC99380C58211F1BAD397785D11F970.roa
File:                     2DC99380C58211F1BAD397785D11F970.roa (raw, json)
Hash identifier:          2/foxtcEKA4yJHioeZ2mg/7XILvHj26AvHttGK/h28M=
Subject key identifier:   93:9E:D7:C3:32:D2:EC:F3:C4:BD:61:DF:70:68:BA:19:68:2D:28:6A
Certificate issuer:       /CN=A9192DB4/serialNumber=682DCDBCF5BB8644C1FB5E67E3F4BCA345B3B0F4
Certificate serial:       11
Authority key identifier: 68:2D:CD:BC:F5:BB:86:44:C1:FB:5E:67:E3:F4:BC:A3:45:B3:B0:F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aC3NvPW7hkTB-15n4_S8o0WzsPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/2DC99380C58211F1BAD397785D11F970.roa
Signing time:             Sun 11 Oct 2026 14:43:53 +0000
ROA not before:           Sun 11 Oct 2026 14:43:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154675
IP address blocks:        74.122.26.0/23 maxlen: 24
                          162.4.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aC3NvPW7hkTB-15n4_S8o0WzsPQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 09:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192DB4, serialNumber=682DCDBCF5BB8644C1FB5E67E3F4BCA345B3B0F4
        Validity
            Not Before: Oct 11 14:43:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6acba0a9-cc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:dc:bb:76:7f:6c:fa:53:6c:a9:bd:3f:53:
                    df:30:7b:e2:7a:c5:e8:d9:91:3f:f6:7a:ed:67:90:
                    4f:64:9f:9f:44:e2:14:d4:5b:a1:02:eb:ff:39:9d:
                    46:e0:c4:51:16:9f:82:88:bb:28:49:71:94:df:f6:
                    04:28:02:6c:69:20:7e:71:82:dc:16:98:6e:46:12:
                    03:48:3c:b3:93:e3:40:ff:0c:09:33:da:4a:cf:ad:
                    9a:ed:5a:2d:91:06:36:42:33:f6:82:f4:31:09:a5:
                    86:e4:6c:e5:13:4f:db:95:d0:4f:25:a5:e2:26:74:
                    58:9d:48:1f:d4:ff:e6:7c:71:51:c3:e3:c0:17:cc:
                    81:85:98:1b:aa:8d:33:df:fe:cb:f5:0d:90:74:c8:
                    2e:b8:2a:ec:a7:74:bd:ff:cf:7d:6b:12:22:a5:db:
                    d0:ee:3b:ec:66:fc:05:09:56:3c:cc:46:5e:be:66:
                    af:07:d7:90:d4:0a:da:a5:35:c4:fd:a3:a9:4f:d9:
                    1e:c7:52:16:5a:81:38:55:ce:2b:93:18:df:58:2b:
                    fd:c0:14:29:3b:64:57:bd:62:17:70:f7:c6:af:dd:
                    62:6f:e4:f6:c1:b4:80:2c:c3:e5:73:7b:92:94:d2:
                    ee:48:9b:c0:a3:6e:b7:a4:9a:8d:32:15:5e:02:9c:
                    18:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9E:D7:C3:32:D2:EC:F3:C4:BD:61:DF:70:68:BA:19:68:2D:28:6A
            X509v3 Authority Key Identifier:
                keyid:68:2D:CD:BC:F5:BB:86:44:C1:FB:5E:67:E3:F4:BC:A3:45:B3:B0:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/aC3NvPW7hkTB-15n4_S8o0WzsPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aC3NvPW7hkTB-15n4_S8o0WzsPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192DB4/8576A906B72711F18B303CA47011F970/2DC99380C58211F1BAD397785D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.26.0/23
                  162.4.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:52:e6:ad:7c:70:69:ec:d5:4e:aa:f8:f0:46:89:a8:9a:14:
         06:34:13:b5:34:8f:30:31:fe:99:88:1e:e0:8c:e1:85:3a:6e:
         fc:f3:33:23:82:1d:5d:00:ac:88:e3:aa:a2:e3:c3:1d:9b:d0:
         a6:24:81:39:9b:4b:8f:f1:e4:d1:92:13:d7:46:39:21:4f:05:
         0b:1d:11:17:67:c2:17:78:f9:a8:8d:3f:00:0c:e4:3c:80:2c:
         02:49:9c:76:3a:e5:c3:d2:b9:14:ce:37:54:21:10:85:63:92:
         ac:a2:d3:a2:81:3d:67:c6:e3:4c:88:54:d2:03:ab:37:f6:f4:
         66:00:9f:48:72:30:24:1e:e9:5b:1f:8c:ae:cb:d6:d6:b0:fb:
         d3:20:69:42:8a:5c:0b:7e:c1:a7:5b:db:49:a3:c5:bc:66:27:
         18:7e:b4:be:f7:59:74:40:b4:40:f1:29:6c:0f:47:a8:d5:db:
         33:05:da:cd:bb:da:df:3d:08:32:53:43:a7:49:e5:06:49:49:
         b3:1a:f6:78:7d:f5:f3:06:80:50:51:ff:4c:55:f7:29:b3:3d:
         48:77:48:86:b0:13:29:e5:c9:7a:98:93:b6:b9:10:77:68:f5:
         31:48:fb:e1:c9:9d:b7:bf:a4:f4:23:8b:3d:58:9b:30:42:2b:
         53:c7:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:43 2026 by rpki-client