Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/078FA91C44EA11F09EB11858C4F9AE02.roa
File:                     078FA91C44EA11F09EB11858C4F9AE02.roa (raw, json)
Hash identifier:          C/ZGqWc8u20kL8eL26pbZWd67Dk6EABUUd6GG9DsIEU=
Subject key identifier:   7E:D8:0D:B2:D8:EE:F8:00:5C:C3:3E:05:55:AD:65:18:63:A4:93:92
Certificate issuer:       /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial:       AC
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/078FA91C44EA11F09EB11858C4F9AE02.roa
Signing time:             Fri 01 May 2026 07:40:44 +0000
ROA not before:           Fri 01 May 2026 07:40:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        163.223.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
                          rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
        Validity
            Not Before: May  1 07:40:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f458fc-085a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:e9:de:85:52:43:2c:70:92:29:36:1e:93:
                    08:78:a7:c5:4e:30:66:6f:92:a9:2a:0b:01:2a:82:
                    cc:8b:82:23:88:d1:7a:be:0a:d3:d8:1c:95:47:96:
                    ee:00:82:aa:77:fd:c3:bb:d4:48:f8:5d:a4:69:2e:
                    c8:37:23:d0:2a:8b:a3:09:1a:bd:44:c8:35:f7:14:
                    12:24:ac:6b:98:2e:ad:0a:44:28:42:0b:66:27:69:
                    e6:85:15:9f:00:97:5f:09:f5:64:c3:26:3a:4b:e0:
                    11:9a:57:a1:cf:0f:63:61:94:ff:f5:ee:f9:96:f2:
                    54:35:40:c1:c8:74:a1:87:4b:9e:ef:a5:36:e2:f5:
                    e1:09:77:05:6f:c2:7c:d0:12:5e:61:a2:6c:43:dc:
                    c6:3f:09:bd:66:11:6e:c1:d9:92:d7:fd:46:94:4a:
                    20:42:fb:4b:61:9e:74:4f:ed:a7:fc:00:f3:e9:64:
                    01:a3:73:f9:02:61:92:9a:72:1f:66:8e:c4:17:36:
                    52:72:94:ba:69:8b:5a:87:4d:43:10:f0:54:a1:7a:
                    08:41:21:de:04:10:b2:9e:ee:14:b3:2d:c2:d5:01:
                    ca:f8:85:c8:71:c2:e7:4e:3d:55:eb:d5:ef:03:12:
                    fe:a8:63:6d:9a:12:82:cd:09:42:4c:11:32:4f:01:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D8:0D:B2:D8:EE:F8:00:5C:C3:3E:05:55:AD:65:18:63:A4:93:92
            X509v3 Authority Key Identifier:
                keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/078FA91C44EA11F09EB11858C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:39:2f:07:25:93:dd:9b:00:37:3f:94:17:f0:2c:bf:41:
         1e:05:d8:06:5c:6b:94:bd:b4:93:02:93:7c:19:55:2d:3f:63:
         de:67:08:81:49:f7:45:02:99:20:88:60:c9:fa:83:96:0b:49:
         65:f0:e4:19:40:60:3a:d7:29:20:22:4e:b7:d5:31:c7:b2:a3:
         39:12:6a:c3:e4:85:04:05:dd:3f:01:d8:00:28:1c:12:f3:6b:
         28:05:a2:02:02:70:25:41:a2:8e:7e:2b:ed:c3:26:3c:19:bd:
         b0:61:55:2e:9a:64:82:7d:88:93:58:6d:7b:f5:0f:ba:26:e9:
         3e:08:fb:e8:45:8b:a3:1c:37:cb:e6:7d:09:7b:d3:71:38:5f:
         83:d9:77:d6:0e:35:72:6b:2c:b4:a1:0c:d2:b8:37:bd:3e:99:
         bc:a1:36:37:fe:8a:75:43:fa:4a:24:11:83:2d:e9:0d:af:17:
         a6:96:d5:4d:19:c9:6c:a6:c8:a1:6e:a3:91:93:20:f7:16:b3:
         b1:63:a8:2a:f0:94:26:60:5a:a9:81:4d:88:a6:fc:b3:a4:8f:
         aa:6e:f0:e1:ce:7f:87:de:91:59:98:06:6b:b9:17:5d:fc:ef:
         53:9a:0c:4d:23:09:b1:03:63:cb:cc:e5:25:7d:4f:a3:22:8d:
         69:e2:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:04 2026 by rpki-client