Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/DE855A124AB511F186C8A41FBA833773.roa
File:                     DE855A124AB511F186C8A41FBA833773.roa (raw, json)
Hash identifier:          ScIghqDWppAWwbM1BLEgvwmTm4H8VUwSI8pSLWmzvV4=
Subject key identifier:   46:51:B3:15:0D:C8:00:74:A4:8B:7A:81:21:EB:B3:3A:64:14:70:F4
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0C27
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/DE855A124AB511F186C8A41FBA833773.roa
Signing time:             Fri 08 May 2026 08:14:01 +0000
ROA not before:           Fri 08 May 2026 08:14:01 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140641
IP address blocks:        45.115.26.0/24 maxlen: 24
                          45.115.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3111 (0xc27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: May  8 08:14:01 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69fd9b49-f89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:38:e3:09:fd:b6:15:55:3e:30:70:56:f9:
                    86:3c:e0:fc:46:2f:c8:1c:74:ab:63:93:25:49:85:
                    a5:a4:8d:10:cf:c8:41:05:4e:e2:28:85:d9:15:80:
                    64:8c:ef:8f:ba:88:20:d8:06:b4:5d:ec:a9:2a:27:
                    fd:1f:e8:ff:0c:cd:bb:a3:c6:60:51:a7:38:02:80:
                    95:f0:89:6d:b0:ea:86:5e:9b:a5:6a:10:92:80:8b:
                    00:54:f9:c6:17:67:1f:41:f7:8e:8c:62:c8:17:3f:
                    05:ea:9b:2f:e1:4d:67:9d:5a:d9:40:73:96:5a:31:
                    3a:41:6c:a6:7c:d9:ab:52:e4:4c:59:2b:86:f9:14:
                    39:10:92:b9:d1:ff:2d:1f:18:86:57:23:4a:3e:86:
                    a3:de:6e:bb:b4:da:87:47:45:77:fc:ff:98:aa:96:
                    16:6e:78:db:c2:28:60:d5:ec:99:de:f7:16:67:6d:
                    e7:b4:b4:a3:67:e2:2e:cf:ed:b6:59:16:fc:5d:d1:
                    6a:be:26:c0:1c:8b:cb:ac:08:3a:d7:e3:7b:5f:bb:
                    c8:ed:88:02:2b:49:9c:8a:01:c9:af:78:27:ec:3e:
                    fd:d4:68:5f:c5:c0:f6:62:c7:b5:1c:a2:b8:b7:27:
                    f5:50:8c:75:ad:fb:40:84:37:ad:05:39:c5:48:0f:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:B3:15:0D:C8:00:74:A4:8B:7A:81:21:EB:B3:3A:64:14:70:F4
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/DE855A124AB511F186C8A41FBA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:82:43:fe:41:a2:9c:d2:97:6a:ff:82:19:af:5d:36:fa:e6:
         32:cf:7b:0a:14:ee:6d:b6:c1:c6:20:9d:88:8f:ab:c8:bb:37:
         69:e5:57:9a:08:03:21:3c:7f:f7:7e:52:88:25:dc:39:90:21:
         6c:3e:49:9e:db:07:60:d5:04:00:c3:6e:f2:db:fd:0b:34:d7:
         9f:9f:13:4f:03:79:8a:5c:97:31:64:25:66:45:7c:58:6d:ec:
         10:15:e7:e2:8f:7e:fc:00:70:10:0b:18:ae:6d:10:f9:0c:ba:
         f8:18:23:ab:8a:6f:ce:1f:96:2c:02:94:33:06:37:5e:9f:a3:
         6d:d1:6c:f5:34:6e:6f:56:c5:58:21:1b:55:95:cd:43:e6:b6:
         fc:c7:fa:f3:76:8d:50:f8:57:31:8d:0d:b9:70:b8:88:d2:7e:
         ac:da:4d:e6:0c:95:fa:ba:8b:87:1e:b5:0e:38:ac:15:2b:8f:
         33:21:7c:d9:b3:67:e7:4d:0b:d3:ee:44:9b:b9:d2:5e:7e:0f:
         73:e0:0b:db:00:60:7c:73:0f:8d:bc:c6:f7:ae:95:f2:d9:ba:
         cb:ec:1e:43:bc:b3:65:40:8b:6d:c9:f8:94:11:df:82:db:72:
         c5:ad:1a:16:ca:87:e2:56:59:72:b8:91:a6:77:d8:56:fa:fe:
         0d:32:c8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:23 2026 by rpki-client