Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/9E042B40426711F1AD7785F0A4833773.roa
File:                     9E042B40426711F1AD7785F0A4833773.roa (raw, json)
Hash identifier:          DvDS2Q+V1SLNcDatI04IG5vSAcTuYj/rSehqEU7/mWU=
Subject key identifier:   3D:8E:6F:A3:DF:6B:95:73:A2:CF:C9:2D:65:7B:7E:55:04:8F:C0:3B
Certificate issuer:       /CN=A914855F/serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Certificate serial:       02
Authority key identifier: 3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/9E042B40426711F1AD7785F0A4833773.roa
Signing time:             Mon 27 Apr 2026 18:33:42 +0000
ROA not before:           Mon 27 Apr 2026 18:33:42 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141380
IP address blocks:        163.128.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
                          rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914855F, serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
        Validity
            Not Before: Apr 27 18:33:42 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69efac06-d12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:12:f7:6c:30:3b:a0:60:68:f8:7f:96:86:
                    19:ce:05:ed:73:2a:0a:96:79:6e:1d:c3:eb:00:59:
                    3b:8e:e0:7b:68:34:a5:96:80:5d:cf:97:c3:1f:3c:
                    7b:99:1d:a6:4d:83:fe:a7:b4:f6:a0:6d:80:f1:71:
                    b5:bc:15:98:27:96:a9:c4:79:dd:cc:c7:b0:46:f7:
                    67:22:79:b8:0b:f1:7d:6b:af:31:8c:02:2c:74:f4:
                    1b:b9:59:67:b3:6a:bc:85:a4:72:01:54:f9:0f:f2:
                    e6:aa:63:c8:28:d0:b1:ee:c2:ee:13:ac:60:47:ed:
                    37:0b:cc:a6:62:5d:25:ce:64:d7:e6:34:cf:60:3e:
                    8c:db:cb:d8:f2:79:f4:81:f8:4e:bb:95:ba:1d:9b:
                    7c:63:0e:a3:68:26:99:34:26:b1:ff:99:5b:13:5a:
                    fe:7a:7e:cc:d7:73:9d:c3:7c:a7:e2:42:12:47:d5:
                    da:0c:4c:b7:df:c1:ba:8b:dc:be:1d:fd:9b:ee:ff:
                    6d:f1:eb:9d:62:26:54:d2:f5:53:8f:9b:15:28:65:
                    35:6a:99:51:ef:84:04:ff:dd:d3:7c:6e:5d:2e:b9:
                    d5:67:2d:46:8f:10:2b:28:9a:23:3d:65:a4:b6:2c:
                    ed:58:55:03:ae:c0:49:4b:e3:a0:20:71:56:f6:d1:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8E:6F:A3:DF:6B:95:73:A2:CF:C9:2D:65:7B:7E:55:04:8F:C0:3B
            X509v3 Authority Key Identifier:
                keyid:3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/9E042B40426711F1AD7785F0A4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:9f:b1:84:83:68:10:50:44:4f:a2:29:63:ea:5c:43:6c:be:
         f9:46:03:2d:4e:f8:b7:8d:c1:f5:d4:68:8b:33:ea:ec:24:d3:
         dc:4c:ff:6e:7f:86:69:34:c6:9c:cc:ee:f5:77:93:64:42:e6:
         91:d4:bf:5b:a6:a1:0f:91:e1:db:d3:a5:60:79:3f:fe:03:45:
         03:f1:57:87:02:7c:02:98:53:ef:85:eb:ae:12:d5:5d:01:3f:
         01:c5:df:47:1b:35:01:ad:eb:81:af:44:1c:b7:57:cf:eb:bf:
         06:69:7a:33:4d:ec:86:71:62:b7:87:f8:1a:ba:97:16:d6:91:
         5f:3c:00:fc:ec:2d:1c:42:3d:1a:96:8e:a3:91:7f:5c:e8:88:
         b3:77:7d:48:17:cc:65:63:56:9c:c5:74:17:3d:42:93:03:15:
         7d:30:09:bd:12:f2:86:fb:72:70:5a:18:99:cd:e2:e5:74:d5:
         7a:d3:2f:57:bb:f6:b1:2d:2b:9c:ce:90:d5:77:0a:8c:de:33:
         39:41:14:90:35:2f:19:2f:25:ea:75:f2:9e:c6:b3:e0:b8:99:
         55:f8:5d:3a:dd:dd:a8:a6:68:62:ea:14:a7:dc:ba:7c:d1:7d:
         7f:24:a2:fa:1f:4c:07:41:61:d8:fa:ab:bd:0e:c6:74:d2:19:
         25:fe:e5:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:38:16 2026 by rpki-client