Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/C9BF0D7E062411F18804EBB0243D8C67.roa
File:                     C9BF0D7E062411F18804EBB0243D8C67.roa (raw, json)
Hash identifier:          wO3mec8xdd91WT387pkQUqKKOEEjpd4BzfDV95lhBN4=
Subject key identifier:   0C:2E:B6:5F:7A:79:6D:43:65:BC:FA:D7:C9:2E:1B:FE:F4:63:83:42
Certificate issuer:       /CN=A9144633/serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Certificate serial:       0891
Authority key identifier: 11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/C9BF0D7E062411F18804EBB0243D8C67.roa
Signing time:             Sun 01 Mar 2026 14:51:10 +0000
ROA not before:           Tue 10 Feb 2026 02:04:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     19551
IP address blocks:        202.146.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
                          rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144633, serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
        Validity
            Not Before: Feb 10 02:04:10 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4525e-9462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:09:98:57:18:cd:32:d2:34:be:2d:70:2d:
                    7a:cb:29:bf:92:64:05:30:0b:d7:e4:47:f0:f6:dd:
                    ce:5b:6c:3c:69:cb:d7:1b:d4:3c:02:74:a4:e5:6e:
                    4e:c4:8d:06:64:1d:21:86:96:f9:42:60:dc:17:9e:
                    c3:7f:e9:6b:b1:23:5a:3a:af:cc:98:03:cd:0f:2b:
                    f4:1b:74:4d:52:4b:8d:78:87:17:60:2d:a7:d8:fb:
                    b6:a2:91:79:2c:1a:cd:ef:9f:24:62:51:c8:6b:34:
                    a8:73:a0:e0:88:ef:6f:d1:d4:6b:d2:e6:74:48:ce:
                    0b:36:98:70:0d:b3:70:af:af:e8:4d:c6:bf:d6:cc:
                    38:60:2e:dd:c4:f3:db:d0:75:b1:39:50:f1:f4:76:
                    c9:c3:4c:12:3a:c8:3b:87:af:d3:cd:51:32:77:e2:
                    d8:c7:e3:b3:af:8d:a4:07:83:25:2e:1b:1c:af:26:
                    71:50:1e:92:c3:36:db:2c:f2:ca:df:29:e1:d2:63:
                    e2:4d:c4:b7:2a:7c:25:2d:dd:b0:b9:72:8f:d4:d7:
                    23:00:a1:a4:30:0e:e6:24:b2:49:04:22:06:a8:c6:
                    e5:31:55:1f:61:54:4d:83:b3:e4:ba:2b:70:90:5f:
                    f6:9e:d5:7e:62:e7:f6:d2:5b:57:5b:7e:ab:91:90:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2E:B6:5F:7A:79:6D:43:65:BC:FA:D7:C9:2E:1B:FE:F4:63:83:42
            X509v3 Authority Key Identifier:
                keyid:11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/C9BF0D7E062411F18804EBB0243D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.146.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:54:49:99:f1:9f:1c:97:32:d8:cb:55:f2:e0:32:38:2b:
         3b:11:29:46:a4:cf:fd:25:8a:32:9e:72:a7:e5:c5:ff:ec:04:
         78:7c:ad:c9:fb:4a:76:be:84:31:0b:e1:68:97:83:8c:5a:ca:
         65:23:0c:d2:69:95:6e:fa:58:20:c4:ef:e2:e1:88:ba:9a:0c:
         35:64:c0:ba:ca:84:3e:c0:4f:61:58:8e:4f:24:e6:2e:2f:03:
         cc:58:99:ed:48:6b:6a:ec:06:50:74:85:da:4f:52:13:03:c6:
         57:a6:e2:91:0d:c4:c4:9e:d0:15:87:bb:9b:44:71:e6:1e:1f:
         de:84:cc:e0:25:c8:da:ec:29:38:57:91:22:c8:79:02:aa:72:
         2c:e0:94:d3:e3:e4:7f:27:49:2b:d7:42:7d:f5:fb:5e:c4:f1:
         f2:73:f2:06:1a:ad:8d:db:cf:18:17:8a:74:6e:0b:64:82:e0:
         21:69:9a:2c:20:f6:3f:77:1b:2d:81:ad:93:22:a1:6b:a1:b8:
         1b:53:34:e8:ab:f8:05:9e:b2:9e:06:77:6e:b5:f6:18:6c:c4:
         77:52:73:c2:d1:d9:b1:93:73:a4:2c:ce:14:12:1f:80:0b:bf:
         e3:21:e5:2f:03:5e:70:a4:fa:ec:f4:13:28:5f:b7:7b:80:69:
         1c:7c:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:56 2026 by rpki-client