Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/B5AC177E3E0411ECABD9496CC4F9AE02.roa
File:                     B5AC177E3E0411ECABD9496CC4F9AE02.roa (raw, json)
Hash identifier:          yeDD3azucqTXwa0Gdb8W5tD9O2qrp+zwpH6Y+zEBWbM=
Subject key identifier:   D2:14:76:32:CA:9A:4D:A4:2A:1F:85:BC:1D:38:75:DF:56:D6:97:5C
Certificate issuer:       /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Certificate serial:       0553
Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/B5AC177E3E0411ECABD9496CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:37:15 +0000
ROA not before:           Thu 05 Feb 2026 09:23:26 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9744
IP address blocks:        141.193.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
        Validity
            Not Before: Feb  5 09:23:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46b3b-a1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:79:da:63:95:5f:8b:22:67:93:aa:88:66:
                    79:ff:42:5b:d3:cc:fa:b4:45:16:9e:3f:16:6b:6b:
                    5f:2c:31:2c:28:a5:29:fa:88:f4:f4:e8:b3:07:94:
                    38:9f:61:b0:3b:41:35:27:e0:e1:97:70:d4:55:e0:
                    8c:97:b0:49:31:de:63:1e:ab:4b:54:91:b4:86:b2:
                    ee:cf:97:20:be:15:ae:c1:9e:92:92:b8:00:a3:cb:
                    b6:32:5d:7e:12:a8:2f:64:cc:35:57:43:7b:bc:89:
                    67:d3:b9:e2:c9:67:92:b9:85:d2:40:3d:83:87:15:
                    49:68:49:1a:7a:0f:b6:b3:96:00:92:7d:bc:11:8e:
                    82:fd:a8:43:bf:17:dd:ab:7d:55:46:2a:44:e7:54:
                    ea:ad:cd:a9:56:91:5b:9b:65:9a:f9:f8:80:19:c7:
                    ed:b3:af:47:a1:61:0c:3a:af:23:bf:58:ca:e5:d4:
                    3c:e2:f7:ea:a1:3d:87:4d:c8:98:33:17:7d:74:32:
                    dc:64:9c:cc:e9:fe:94:3d:2e:ca:ca:c9:3f:83:73:
                    2a:b2:0a:9e:97:d4:38:f4:ae:63:aa:ff:41:3b:e7:
                    3d:f3:11:f7:93:29:f5:f2:0e:5a:39:76:9d:6c:29:
                    a4:6a:d2:94:39:10:09:c5:53:8d:3f:aa:a0:61:71:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:14:76:32:CA:9A:4D:A4:2A:1F:85:BC:1D:38:75:DF:56:D6:97:5C
            X509v3 Authority Key Identifier:
                keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/B5AC177E3E0411ECABD9496CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:76:cd:fc:83:0a:b6:66:4e:ba:60:fd:12:8e:7f:a7:d9:
         42:b8:94:92:b9:4d:8a:8c:1a:c3:24:6d:8e:2a:1a:f3:6e:e5:
         59:a5:4a:ac:ae:e1:42:37:a8:3b:a2:c7:25:7b:e7:bd:57:e9:
         6d:1d:9e:a9:10:f6:3a:ec:ba:9e:f4:d6:de:a4:3b:fa:d2:69:
         88:99:1c:1d:ee:75:ee:ca:ce:f8:04:42:e2:f1:1b:34:5d:a4:
         86:18:1e:88:c0:34:89:f2:eb:d7:75:de:68:02:42:ba:e2:9d:
         bc:cd:64:e7:67:22:50:99:b2:b5:4b:cc:4a:4a:c9:14:30:d0:
         6f:d3:d1:46:7a:16:22:cb:71:a7:a0:47:65:10:4d:ec:8b:55:
         a3:f0:52:05:5e:78:23:3b:d1:c2:1d:9b:5c:e5:c4:09:00:04:
         8a:84:21:67:0a:93:6a:8b:c0:7c:51:9e:2c:09:7a:71:6a:98:
         57:ae:06:7b:d9:9f:42:ec:ac:64:cc:9f:51:33:4c:36:70:d6:
         ee:7d:35:e3:11:02:a3:57:8e:6c:62:5f:5f:f8:b6:ad:73:97:
         71:0f:1b:1e:28:50:ee:e4:a8:de:4d:6b:7c:d1:aa:32:fd:b7:
         3e:94:7e:6d:87:c3:67:37:be:0e:2a:cd:58:b7:c4:3c:20:34:
         13:1e:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:47 2026 by rpki-client