Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/605C88EC362811F08A82E10DC4F9AE02.roa
File:                     605C88EC362811F08A82E10DC4F9AE02.roa (raw, json)
Hash identifier:          CGs40+aol+xWoOZNaUP5JXbvindhbNJ3rxtLBcaqmRw=
Subject key identifier:   27:74:F3:77:97:D5:1F:8B:18:D3:0B:F2:7F:3F:D0:30:4A:55:48:96
Certificate issuer:       /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
Certificate serial:       AB
Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/605C88EC362811F08A82E10DC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 07:40:53 +0000
ROA not before:           Fri 03 Apr 2026 07:40:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153715
IP address blocks:        163.223.174.0/23 maxlen: 23
                          163.223.174.0/24 maxlen: 24
                          163.223.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl
                          rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
        Validity
            Not Before: Apr  3 07:40:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69cf6f05-2d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:f2:f7:1c:38:bd:2c:2a:66:93:75:37:cc:
                    5e:46:7e:70:09:03:a5:6d:2d:4b:08:9f:bc:f9:cf:
                    0c:87:a1:cf:57:e3:21:c5:52:1e:9d:3b:bc:b7:42:
                    0d:1f:cc:62:2c:0b:af:94:d5:1c:39:9c:3c:61:4e:
                    41:c7:19:a8:4c:4e:fc:17:74:46:f5:58:1e:0a:a0:
                    89:5d:a4:21:72:c1:8d:41:3f:17:aa:f7:f3:b1:ca:
                    96:66:2e:6b:8a:76:b7:78:3a:47:57:22:77:04:c5:
                    a4:4a:98:63:57:d1:4f:ab:4a:a4:a6:a6:e9:84:b4:
                    b3:95:04:10:de:93:f3:1c:15:47:39:74:16:39:b3:
                    54:b3:3d:5f:fa:33:72:1c:bb:6a:81:8b:95:43:55:
                    2f:f6:40:bd:6c:e9:70:04:7a:ed:f2:29:4b:78:fd:
                    4c:6f:b2:d9:ca:3c:9f:b6:73:57:f5:d2:5d:fb:d8:
                    7f:ba:db:6c:ba:43:7e:4b:00:f8:fe:f1:7b:22:13:
                    49:82:be:76:99:80:da:a8:68:c5:bb:52:86:2d:ab:
                    df:04:0e:40:1b:4c:00:3f:83:ce:0e:5a:33:25:61:
                    32:ad:6a:30:3d:b9:0d:01:a8:14:6d:c9:41:97:42:
                    08:3e:96:95:4e:ef:46:b8:dc:5e:31:da:65:82:b2:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:74:F3:77:97:D5:1F:8B:18:D3:0B:F2:7F:3F:D0:30:4A:55:48:96
            X509v3 Authority Key Identifier:
                keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/605C88EC362811F08A82E10DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:97:54:8e:7d:65:39:12:a3:3a:7a:29:27:e7:c5:77:24:33:
         fd:b2:e2:c6:e2:8a:b7:45:33:cb:12:9c:d8:4b:51:51:c6:a6:
         9a:6e:84:b8:6d:bf:3a:86:cd:7b:0c:d8:57:19:5e:cc:6f:81:
         89:b8:2c:06:93:5c:91:a1:6e:43:7c:8d:32:90:82:6b:ef:a0:
         4d:9d:17:d4:38:24:ff:14:30:f8:43:9e:67:91:af:ad:e9:ac:
         da:4b:fc:ea:b8:ef:9d:62:db:ab:d3:b4:9a:6c:be:4f:f4:ae:
         c2:24:40:8e:07:33:0c:f8:70:93:49:e4:f0:ad:a7:76:7e:ba:
         0e:1d:7c:2c:b2:00:3f:46:7b:96:ea:49:08:69:32:d4:26:cd:
         6d:76:a3:31:1b:9a:b8:c3:d8:35:da:d0:89:87:87:2d:d5:35:
         26:bb:3e:cf:a7:ef:7a:90:e6:6a:dd:0f:7b:3c:1f:fe:62:9f:
         b4:80:71:95:c0:b0:d8:49:fa:9a:ef:a7:a9:ac:da:93:5c:f7:
         b8:f7:be:f3:21:83:9a:4c:b2:7a:37:c7:d2:fd:47:e3:1d:e0:
         0e:50:0f:c4:33:40:a6:25:d1:a1:6e:50:6b:d0:7d:1b:d0:31:
         52:6a:7e:fc:90:20:9c:5c:cc:26:31:4d:aa:fe:2b:8e:02:fd:
         2d:6f:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:05 2026 by rpki-client