Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9DE197A2168511EAB282BB44C4F9AE02.roa
File:                     9DE197A2168511EAB282BB44C4F9AE02.roa (raw, json)
Hash identifier:          okPNLIYHqUe2+LRXDuE5SiF4zzmmje5rGzctyXR1y8I=
Subject key identifier:   2A:BE:CF:C9:EA:26:BB:DC:6B:AA:C0:72:CC:A4:48:D4:8B:42:DD:40
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       110E
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9DE197A2168511EAB282BB44C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:12:42 +0000
ROA not before:           Fri 06 Feb 2026 17:14:58 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138946
IP address blocks:        2404:9ec0:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4366 (0x110e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  6 17:14:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48199-9ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:25:0f:26:ba:36:8f:18:0b:44:ab:30:31:
                    2f:a6:90:bb:d7:25:17:03:9c:dd:44:0c:cf:ac:fe:
                    8d:6d:0c:f7:7b:23:85:27:41:1c:d4:6c:83:58:36:
                    10:dc:40:65:00:2d:cc:f4:57:3f:16:3d:b9:b7:39:
                    de:4e:e9:af:96:53:ad:e4:29:f9:63:25:93:79:f4:
                    20:83:78:50:f5:49:a8:5a:a7:e5:ba:bd:be:f1:5d:
                    d7:e4:be:72:48:bb:d2:79:6c:e2:2f:e9:5d:a2:c6:
                    37:82:2a:44:fa:5c:04:c9:b6:c8:5c:0a:b7:c4:35:
                    4b:fe:16:ab:60:78:63:f8:a2:f3:55:f1:c2:8c:5d:
                    cc:36:96:81:bc:9c:52:63:7d:af:6d:e1:bb:1f:c2:
                    2e:1f:b3:45:da:72:df:94:5f:54:ca:b2:6b:3c:10:
                    32:9f:91:ad:74:1d:8e:7c:f7:84:c8:a9:f4:4c:bc:
                    79:99:53:82:7e:97:6d:cc:4e:74:ad:6a:e3:13:1c:
                    0c:93:f4:ec:6f:fd:6a:fe:99:b1:a4:1d:ad:75:4f:
                    57:90:6f:4e:54:ba:c7:77:5c:a9:24:d1:cb:3f:c2:
                    a5:db:99:9d:a1:ba:24:4d:58:97:ef:fc:0b:2a:be:
                    76:38:55:0a:2b:dd:84:f8:e2:21:cb:dd:44:8d:eb:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BE:CF:C9:EA:26:BB:DC:6B:AA:C0:72:CC:A4:48:D4:8B:42:DD:40
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9DE197A2168511EAB282BB44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9ec0:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:bc:43:34:1f:c6:ec:20:bb:70:41:e1:3f:96:18:fa:49:84:
         08:be:c1:90:1d:a6:09:65:04:a3:3c:48:50:aa:67:89:10:57:
         80:82:12:4f:3c:53:c3:d7:bd:6f:2e:63:0f:4c:be:c9:49:2e:
         2f:78:01:e3:d3:b4:de:92:f5:1f:ab:c1:c3:bf:61:fb:cc:6a:
         9f:a8:1f:5b:28:da:25:91:2f:72:89:11:19:5a:0f:33:71:69:
         74:82:fb:df:12:e6:4d:15:45:91:c0:b2:55:24:11:d3:12:6e:
         05:44:3f:e5:d0:19:f8:14:42:cc:a1:7d:c9:cb:13:9c:ea:96:
         57:1d:6c:7a:73:17:74:0c:33:b8:5a:d5:8a:4f:36:7d:2d:64:
         70:96:2b:c9:e6:f8:27:91:05:96:64:a1:f8:3c:0b:64:2e:c2:
         02:d1:9b:17:3a:61:63:63:b2:bc:96:56:4b:b3:4f:1f:e7:d9:
         1c:92:d0:27:70:1d:1b:e0:08:c6:0b:2d:c7:1a:3d:50:f3:51:
         3f:aa:62:2a:06:46:fd:bd:4c:12:e2:5f:60:dd:2d:59:72:dc:
         02:0e:39:a3:f2:ed:d2:e6:2d:dd:96:3a:0b:b8:3e:22:91:29:
         a7:38:ea:7c:75:af:f2:2b:15:e9:7a:a2:0a:38:49:a8:91:8b:
         21:ba:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:38 2026 by rpki-client