Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/4E3439122B4111F19D37C4AC90833773.roa
File:                     4E3439122B4111F19D37C4AC90833773.roa (raw, json)
Hash identifier:          QQvgNRDiPl6A65a2LWGiXcir6fcA9w1PwW/VYZpOkXQ=
Subject key identifier:   5A:8B:91:E5:79:B0:2F:5D:41:C5:3D:62:62:80:86:B1:8F:02:AE:D9
Certificate issuer:       /CN=A9173204/serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Certificate serial:       02
Authority key identifier: 0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/4E3439122B4111F19D37C4AC90833773.roa
Signing time:             Sun 29 Mar 2026 07:31:31 +0000
ROA not before:           Sun 29 Mar 2026 07:31:31 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154429
IP address blocks:        144.79.140.0/23 maxlen: 23
                          144.79.140.0/24 maxlen: 24
                          144.79.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
                          rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173204, serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
        Validity
            Not Before: Mar 29 07:31:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69c8d553-76c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:72:3c:9e:15:44:c7:fa:2c:9a:46:87:27:
                    df:17:1b:c0:b0:46:8f:57:e6:bb:f9:5a:6b:a4:f7:
                    06:03:af:9f:ce:6c:8c:c1:b5:fe:7c:f8:aa:e1:4a:
                    d7:9f:42:6d:1f:f2:e2:a7:91:b9:24:07:2f:ae:4d:
                    04:3c:65:06:2a:b2:57:61:29:f8:6c:f6:45:65:c9:
                    19:8c:4f:b2:41:0e:04:8d:d9:bc:60:f7:cc:4c:8b:
                    ae:3c:8c:06:f4:0e:b9:e1:5c:38:15:23:5d:2c:0c:
                    7f:89:21:56:99:05:2f:8a:f4:63:91:5d:69:b7:b9:
                    5a:65:6e:55:70:46:f4:9a:c1:a8:8c:fc:08:b1:5b:
                    91:88:f7:79:07:fc:cf:35:df:69:55:9e:45:a8:cb:
                    af:46:16:c0:2b:37:4a:46:6c:ac:76:8c:b9:fc:63:
                    2b:76:ce:ee:08:00:10:f9:3e:1c:b5:b2:f4:23:a2:
                    0b:d2:44:d5:d8:c3:47:23:55:ea:3b:46:18:1b:b5:
                    c1:88:1d:8a:6c:77:4d:52:cf:ce:c0:37:2c:13:7f:
                    f7:d2:39:26:ff:4b:69:19:9e:49:05:fe:39:da:62:
                    f9:00:63:d6:8e:7f:4c:d1:5e:14:b5:a9:91:31:d1:
                    b4:c0:af:57:c2:ed:5d:3a:7f:53:d3:8b:02:d6:db:
                    2d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8B:91:E5:79:B0:2F:5D:41:C5:3D:62:62:80:86:B1:8F:02:AE:D9
            X509v3 Authority Key Identifier:
                keyid:0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/4E3439122B4111F19D37C4AC90833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:e0:34:55:e3:e0:ef:b6:94:b4:f6:41:b0:22:e2:83:e4:a0:
         2d:6f:30:93:12:65:da:e6:c7:c1:f2:26:7b:20:d9:82:3b:47:
         5d:ff:da:33:11:c8:0f:8b:d7:84:cd:e5:21:3f:89:61:87:fa:
         1d:81:7b:66:af:43:78:2d:47:a0:2d:36:a8:e8:e0:14:fe:25:
         52:fd:b7:b3:cf:7b:f5:f3:d1:95:da:86:d7:90:04:e1:fa:34:
         b2:7f:7d:68:1f:81:83:8a:4b:b9:c1:a6:7b:b0:00:8a:74:ab:
         b4:3d:ec:e3:4c:d8:74:6f:42:89:1d:e4:3a:f3:bf:26:1e:6a:
         bb:27:7f:ea:e1:5a:5a:54:94:cc:9c:e3:b0:98:b2:ea:a6:d8:
         ae:66:22:3f:e7:60:1a:63:a7:f1:cb:e0:9f:23:04:31:be:ab:
         95:7b:6d:9f:14:1a:bf:12:31:bf:c5:cb:c3:77:1a:7b:15:12:
         e1:a5:79:0a:7e:94:05:02:05:f6:1d:21:3c:01:44:2b:80:1d:
         66:7c:21:65:66:9d:a2:48:89:47:05:a6:eb:ba:b6:19:eb:62:
         dc:fa:88:b3:4c:bc:1d:3b:a8:01:30:84:e9:20:a4:aa:be:6d:
         6f:31:a2:b9:d1:5a:85:6e:36:0c:17:07:36:7d:ca:40:a3:6f:
         b1:a3:e9:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:56 2026 by rpki-client