Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa
File:                     9D164714168511EAB282BB44C4F9AE02.roa (raw, json)
Hash identifier:          DSZNEJ4bi4o5CgyqC1+84x7Rm378M2iKs/nwItolD0A=
Subject key identifier:   6E:1D:28:D3:9D:A2:8E:73:5A:F0:5D:7B:5B:CA:6E:3A:9A:02:0F:60
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       110D
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:12:41 +0000
ROA not before:           Fri 06 Feb 2026 17:14:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138919
IP address blocks:        2404:9ec0:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4365 (0x110d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  6 17:14:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48199-e581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:80:c1:68:df:f9:16:0a:92:2d:9f:73:c1:
                    ed:07:6d:93:fa:4e:8a:5d:69:e0:0b:e6:04:66:d2:
                    30:50:c4:7f:0f:b6:ab:12:3b:2c:20:7b:0b:d0:42:
                    ef:39:f7:46:6f:51:05:ff:b0:be:69:38:d9:9f:96:
                    55:d3:fe:41:08:38:ea:b4:a8:85:5a:ce:18:60:6d:
                    4f:35:fa:60:2e:91:f4:f6:b4:c9:c4:f2:19:06:0c:
                    aa:2c:ff:d2:57:87:46:34:a3:14:f6:ee:31:3c:5a:
                    60:cc:7a:5b:ea:da:aa:09:60:cc:8c:83:bd:7f:20:
                    eb:1a:09:65:6d:14:49:9a:bd:8a:31:39:ef:86:ba:
                    79:72:20:b8:6f:25:18:0f:4f:7e:ca:4e:56:b5:f8:
                    9e:1f:9f:c9:8b:27:9e:23:98:cd:95:f9:49:03:a5:
                    21:d8:c5:94:a1:d6:a2:02:7d:b0:50:5e:15:19:d1:
                    71:f0:f3:16:5b:03:be:97:d4:29:a6:da:e1:c9:97:
                    0c:ec:bf:6c:04:c1:79:8b:63:7c:29:90:e6:d8:fb:
                    97:3b:72:02:ad:6c:48:f7:bc:ce:5c:02:f8:0b:58:
                    e5:bd:80:f2:04:bb:63:0e:7f:73:ee:93:9a:ff:f2:
                    cf:1b:4e:19:e9:0e:0b:71:79:53:34:65:88:b5:6a:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1D:28:D3:9D:A2:8E:73:5A:F0:5D:7B:5B:CA:6E:3A:9A:02:0F:60
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9ec0:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:17:90:0f:d5:88:79:e4:20:16:98:c1:49:88:a4:fc:1c:45:
         62:ac:40:5e:cc:e6:cf:45:2d:5d:b0:a6:59:67:f0:b2:5b:1e:
         02:10:06:e2:51:90:5a:e9:ff:cc:23:74:3e:65:86:d6:19:0e:
         2f:ee:71:80:70:e1:ba:7a:d6:41:65:67:2a:8e:52:12:52:26:
         2c:30:89:7d:03:35:59:c2:56:13:33:18:4b:2a:cc:df:65:e8:
         27:2c:9c:98:7a:c2:9a:73:bc:0b:ae:1c:dd:01:86:37:82:7e:
         77:ff:8e:6c:92:ee:73:b4:ef:d1:18:8a:51:2d:d4:46:7a:82:
         65:e5:41:a3:cc:68:0d:ce:bf:93:bb:83:d8:55:7f:7b:74:eb:
         c1:2c:6d:c3:8e:ca:f8:25:a8:4b:41:8e:06:e6:d0:6d:53:71:
         94:2e:fb:3c:2d:2c:3d:dd:82:52:b5:31:4b:85:d6:3b:3b:15:
         3f:c6:5c:a7:bf:b6:28:dd:51:df:57:66:85:0d:c1:8d:fa:b1:
         fd:bb:32:49:46:b5:40:ee:dc:c9:c2:cf:4f:e8:07:95:98:cc:
         6d:ef:f8:3a:4d:2a:c1:f7:24:eb:56:3e:64:ce:1b:bb:80:ba:
         ec:9d:83:3f:3b:d8:da:bc:15:00:5e:c9:e6:8d:6b:96:43:46:
         2a:87:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:58 2026 by rpki-client