Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa
File:                     C78E4E640BC111F19AB158B3293D8C67.roa (raw, json)
Hash identifier:          iBnvey2w1CD1G33AJZCTqUkiJ/9udD23Qpc3pr39tfM=
Subject key identifier:   01:3D:C2:66:34:29:CD:22:D7:61:CC:FE:BE:2A:61:13:DD:80:F5:4F
Certificate issuer:       /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Certificate serial:       1E1C
Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa
Signing time:             Sun 01 Mar 2026 16:41:33 +0000
ROA not before:           Tue 17 Feb 2026 06:50:13 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135407
IP address blocks:        45.249.8.0/22 maxlen: 24
                          103.217.176.0/22 maxlen: 24
                          2407:aa80::/32 maxlen: 40
                          2407:aa80:110::/44 maxlen: 48
                          2407:aa80:120::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
                          rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7708 (0x1e1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
        Validity
            Not Before: Feb 17 06:50:13 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a46c3c-3fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:aa:a3:55:80:48:1f:97:2b:d0:79:76:d2:
                    91:df:7e:a2:93:dd:32:a8:ac:47:60:db:be:5e:1c:
                    24:5d:b4:eb:e7:31:c5:02:d9:21:f1:21:62:be:0f:
                    14:45:19:fe:8a:62:0d:ec:95:d0:26:8f:6f:07:e1:
                    45:96:29:3b:04:7e:d3:c6:79:31:5e:6a:db:41:06:
                    9a:c9:05:82:be:b8:2c:b3:31:d0:e9:29:b9:7d:f5:
                    05:f4:6a:3d:88:26:b2:86:7e:3a:e2:b6:aa:28:cb:
                    e6:39:ad:fe:4d:49:e9:f5:ea:75:ae:2d:5e:b6:1d:
                    bf:2b:ca:ec:5d:dd:ae:2c:d0:b4:52:4f:81:1c:4b:
                    cb:cf:d6:13:ed:2d:58:55:53:77:8b:4c:c2:02:60:
                    44:fd:95:02:42:9c:b1:2b:83:99:a5:09:24:28:30:
                    a6:05:0a:a9:d2:52:13:e2:e9:b3:41:f8:20:45:51:
                    89:5a:6d:00:78:99:01:c9:54:7d:88:0a:6e:c4:54:
                    3d:a5:7f:8b:78:30:01:01:e9:7b:38:d7:c6:ca:36:
                    5f:c5:bd:c7:4c:e4:c3:84:ae:4e:cd:76:b4:63:0e:
                    89:62:6b:f1:1e:f1:0a:68:b1:2d:f0:52:bc:5d:97:
                    98:29:5d:ea:da:e6:1d:51:7d:ae:4c:c3:52:40:30:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3D:C2:66:34:29:CD:22:D7:61:CC:FE:BE:2A:61:13:DD:80:F5:4F
            X509v3 Authority Key Identifier:
                keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.8.0/22
                  103.217.176.0/22
                IPv6:
                  2407:aa80::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:92:b2:f4:b1:73:f3:ff:ab:d2:7d:b3:37:be:f4:fe:0e:
         38:be:7a:5d:d8:7c:12:cb:8d:4d:ae:c6:7d:c5:a3:38:87:5f:
         52:ed:f6:26:53:9a:cc:5e:48:3e:4b:c5:52:04:e2:68:ef:1a:
         2f:90:47:fc:2e:ae:83:3d:2f:e5:35:f4:88:26:66:99:7a:28:
         11:57:c9:31:47:63:2c:c4:93:cd:00:75:90:72:7b:fb:e4:d0:
         c5:25:83:8c:54:f4:40:43:f0:a0:91:02:06:45:97:70:15:6f:
         03:69:55:77:f8:5b:7f:46:10:8c:c7:c1:77:e5:62:36:1b:78:
         b8:bf:9f:f9:33:6d:25:3d:55:ef:2e:3d:50:be:73:30:cf:e8:
         48:62:a4:26:af:b8:02:6a:28:7c:bc:3f:47:8e:3f:3e:e9:38:
         e4:f7:3f:3c:e3:92:5d:ca:6f:87:a5:73:e0:81:8c:2c:f1:dd:
         06:cc:9a:41:23:51:97:69:1a:d6:60:d8:e1:9e:cc:b4:0b:36:
         30:1d:b4:73:fb:60:c3:52:f5:cb:03:e7:d6:01:0f:34:75:bf:
         86:ae:31:88:05:d2:f0:f3:8a:61:0a:33:ec:59:77:dc:dc:65:
         4b:0e:69:fc:bf:b4:e8:eb:9d:99:54:78:94:d4:f5:b5:71:00:
         9d:b6:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:28 2026 by rpki-client