Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa
File:                     9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (raw, json)
Hash identifier:          9H79gXHSwUdpcvM5+oXzZJV/1PlUxOkSuGSAKDEy/aw=
Subject key identifier:   85:FC:53:81:03:EA:5C:7D:BF:63:14:05:AE:0B:68:2D:41:5C:37:6F
Certificate issuer:       /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Certificate serial:       053E
Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa
Signing time:             Thu 05 Feb 2026 09:23:26 +0000
ROA not before:           Thu 05 Feb 2026 09:23:26 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     963
IP address blocks:        141.193.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
        Validity
            Not Before: Feb  5 09:23:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6984618e-f1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:e7:d4:7d:86:b5:e9:46:4a:97:c3:9d:71:
                    3b:66:0f:c5:1c:0a:9e:ec:2a:f0:84:69:2e:73:66:
                    d1:cd:d9:14:fb:a7:ff:9b:f2:89:f2:d6:b8:d5:01:
                    f5:b0:a3:4d:2b:bd:a1:60:b8:d5:36:9c:54:de:25:
                    c9:a3:78:ed:16:8c:3f:6b:b9:b3:0d:f7:d0:d8:43:
                    0c:76:9b:db:ba:72:6e:2b:19:c6:ff:b5:24:fb:8f:
                    9d:a0:18:17:43:15:02:af:8c:64:5f:c8:06:a8:62:
                    c6:95:4f:4e:53:fd:34:b8:55:ad:36:9d:d5:35:72:
                    ff:c0:9b:b6:f7:09:9f:77:e7:f4:62:de:a2:90:39:
                    49:36:d3:46:e3:19:e2:1d:4e:31:da:9d:62:5b:42:
                    61:7f:a5:44:2a:70:c4:b7:12:8f:fb:fb:b7:56:4c:
                    7f:1a:b3:f0:fc:36:af:fd:ca:96:a1:7e:1d:82:ff:
                    a9:1a:58:fd:bc:8c:7b:a7:4c:d1:e0:bd:65:39:56:
                    99:f3:a5:cd:ae:d4:07:f7:2d:b6:b5:9b:d9:9e:52:
                    72:1b:67:04:5e:63:f8:fa:1e:d3:53:4e:ef:34:bf:
                    69:97:69:6d:73:16:a6:03:2d:1a:9e:62:f4:04:4e:
                    9e:55:bd:13:8c:db:52:48:d4:7f:b3:66:6a:8f:a4:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FC:53:81:03:EA:5C:7D:BF:63:14:05:AE:0B:68:2D:41:5C:37:6F
            X509v3 Authority Key Identifier:
                keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:02:ef:38:a1:42:99:17:24:88:ec:7d:fa:18:35:bb:71:d2:
         45:08:23:90:4e:13:16:da:4a:77:f7:75:f4:b7:6b:ca:db:a9:
         65:44:69:19:58:68:d7:dc:64:41:f1:a8:34:b9:b4:be:e0:65:
         e3:8e:8d:b0:74:51:7a:54:45:23:d4:95:68:8b:9c:d2:c7:41:
         f8:e3:7d:88:73:61:a9:65:8c:75:71:15:48:0c:0d:64:6d:cc:
         24:82:45:36:cb:31:e2:a2:03:3a:66:1e:4a:1b:34:14:3b:94:
         21:93:4a:25:96:71:af:16:04:71:49:83:55:fb:f7:2b:2a:c9:
         15:45:47:b3:06:4e:d9:52:61:44:76:d9:8a:04:83:cd:90:8a:
         37:0a:27:07:44:71:9d:64:a8:e3:a8:2f:29:40:80:d6:98:a7:
         6c:4d:03:de:d9:07:a8:7d:f9:9d:95:1a:1f:7e:39:70:1e:f6:
         5e:a1:61:43:c0:2b:75:82:6c:91:52:a0:28:13:d4:52:62:d5:
         89:10:1c:61:5f:53:11:79:56:07:50:da:08:b0:fd:24:5a:45:
         a9:54:15:b4:9d:13:8c:46:47:56:11:74:bd:8a:5d:7b:c0:ab:
         6b:dc:fd:89:92:5e:7e:20:50:fa:70:2e:86:f1:f8:a6:27:4f:
         98:9c:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:52:07 2026 by rpki-client