Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E193F4564E6211F1AB39E4A4A7833773.roa
File:                     E193F4564E6211F1AB39E4A4A7833773.roa (raw, json)
Hash identifier:          dbIe4B0zJxFLNPoALmSY+SwnLW+AV2GWsY1Du365hao=
Subject key identifier:   D3:7D:2E:98:40:55:D1:69:55:66:A5:FB:70:62:B7:9F:F9:DF:9E:84
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3CD4
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E193F4564E6211F1AB39E4A4A7833773.roa
Signing time:             Wed 13 May 2026 00:30:02 +0000
ROA not before:           Wed 13 May 2026 00:30:02 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     18328
IP address blocks:        45.120.65.0/24 maxlen: 24
                          45.120.66.0/24 maxlen: 24
                          121.0.96.0/24 maxlen: 24
                          121.0.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15572 (0x3cd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: May 13 00:30:02 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a03c60a-45b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:63:8a:38:5c:3b:bd:d5:ad:a2:66:7f:ba:
                    18:41:54:ab:c1:f3:52:b7:b9:52:c1:d6:12:a9:c4:
                    2d:66:17:0f:c3:cf:e3:67:3a:14:77:dd:72:a8:bd:
                    26:69:0f:21:40:84:71:32:c9:6e:d8:1f:86:92:1a:
                    dd:9f:0a:88:a4:cb:67:86:54:2e:71:28:eb:51:85:
                    b7:3b:05:36:02:ba:1d:62:4f:9d:73:a2:84:0e:f2:
                    97:e6:3e:07:db:0f:3b:61:f4:40:fb:5b:72:2e:18:
                    0b:39:0b:dc:14:fd:10:a1:bb:e5:e9:6b:4a:72:d5:
                    44:4d:1e:4e:1e:74:11:67:84:7f:1f:89:2a:d6:bf:
                    5b:db:14:8c:35:1a:9a:8e:3c:ff:70:a2:58:d0:a7:
                    86:c9:d5:40:e1:64:f5:2f:c2:38:5a:10:55:1b:31:
                    08:a5:99:7a:f5:bf:29:b3:60:af:15:fa:21:bb:74:
                    f7:4e:a0:f6:21:5a:23:8e:4d:f7:76:af:47:33:b6:
                    e3:bf:dc:bd:3d:c6:0b:3e:3a:5f:7e:70:1e:40:4d:
                    e4:ae:2d:6b:52:8a:e6:f1:3a:c6:66:f1:c2:19:67:
                    c8:fa:74:31:58:0e:f1:5d:0b:7f:03:dc:5b:6d:4b:
                    30:9c:6a:52:43:69:69:6e:db:69:4f:59:ac:8f:cd:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7D:2E:98:40:55:D1:69:55:66:A5:FB:70:62:B7:9F:F9:DF:9E:84
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E193F4564E6211F1AB39E4A4A7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.65.0-45.120.66.255
                  121.0.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:91:a9:75:7a:c1:bd:b4:7b:e3:40:9c:c9:f0:85:e3:fb:76:
         0b:7b:84:5d:7a:e4:89:f3:31:33:3c:fa:b8:f4:b8:bf:8b:3d:
         6e:be:28:27:15:9d:b9:d5:1c:97:9a:a6:71:c9:36:91:00:d9:
         a2:f8:e9:06:12:f7:e7:89:6d:16:d1:51:bc:0e:d7:7b:b2:ec:
         5f:26:bf:3b:19:92:04:77:6e:06:e5:cc:74:e4:0b:cf:80:5e:
         09:11:27:fb:18:a7:41:56:e7:81:6b:59:44:e7:dc:86:e3:a1:
         df:1c:c1:2f:11:b5:27:42:41:b1:ff:cb:fd:cd:65:6e:18:ee:
         f0:83:08:16:ef:94:1a:28:43:e7:d2:80:89:2a:6a:00:cc:94:
         2e:b5:0b:65:ad:80:23:07:a0:9e:09:0c:b2:15:2a:86:b1:d8:
         e0:be:fd:f3:b8:3a:49:61:df:8f:78:de:e6:8f:c5:d4:b4:5e:
         05:95:12:40:24:8e:b0:a7:a0:99:45:dd:00:ed:f2:11:76:e8:
         65:4e:8b:24:3f:bf:53:66:dd:f6:69:07:a0:74:6a:33:ff:d4:
         2f:3c:3e:f9:9d:49:b9:4e:60:d2:72:53:02:61:90:0e:69:dd:
         0f:fb:4e:b4:e0:02:df:e7:fe:6f:ea:ac:d1:ff:fc:c2:48:a2:
         69:4e:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:28 2026 by rpki-client