Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
File:                     8C73DD2414F711F088D0424FC4F9AE02.roa (raw, json)
Hash identifier:          9o+Qw/FeSyyPIEmhCtAbhaIoXiSOwHTJpapnPBPLnq8=
Subject key identifier:   15:B2:98:2F:5E:C7:D2:23:1B:FD:0A:8A:EA:10:20:9E:1F:7B:C3:72
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       017A
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:32:51 +0000
ROA not before:           Sat 03 May 2025 05:12:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     23838
IP address blocks:        115.126.128.0/24 maxlen: 24
                          202.162.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: May  3 05:12:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59f93-14ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:c3:a3:bd:7c:a9:4d:c8:ac:51:a3:00:fc:
                    6c:cb:77:5b:1a:2f:94:60:8f:83:9f:40:1d:32:3c:
                    ad:c8:68:f7:b7:54:b7:87:bf:86:7e:07:d9:76:2b:
                    18:5a:ca:8d:1c:fc:f6:93:02:34:a1:66:9d:8f:c2:
                    16:ed:11:b1:f6:0a:25:8c:aa:2c:d5:d7:d8:03:65:
                    09:12:e5:df:67:99:45:fa:32:58:3a:6c:99:85:18:
                    fa:85:d4:5c:f5:65:c6:1f:4f:7c:64:32:ce:7c:2b:
                    89:9e:b0:c8:ab:c1:56:35:b6:af:ef:f4:92:8a:12:
                    06:4e:45:2a:e5:0b:b0:c6:d0:26:31:83:dc:46:23:
                    8a:16:87:b9:b2:50:c2:0d:3d:00:83:a7:0c:23:85:
                    19:91:82:da:66:3d:04:85:3d:e2:71:eb:e5:cd:16:
                    d6:62:a4:46:71:f3:96:d0:a8:9e:82:d1:7d:e5:16:
                    fb:f4:c8:61:7f:86:57:a6:9d:f5:cc:ee:6c:5e:eb:
                    73:36:86:62:77:1b:73:59:cf:4c:34:ec:b6:dd:0f:
                    d9:30:31:3c:15:b0:e6:dd:ae:fb:d5:f2:e7:f8:ab:
                    93:f3:67:89:7e:65:36:e4:15:22:26:0c:22:3a:6b:
                    d9:33:d8:3a:50:eb:49:33:08:b9:95:0a:93:81:86:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B2:98:2F:5E:C7:D2:23:1B:FD:0A:8A:EA:10:20:9E:1F:7B:C3:72
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.126.128.0/24
                  202.162.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c1:84:0e:ac:76:bd:6b:4f:a5:67:23:f5:57:e0:39:70:b8:
         18:3d:b9:d7:18:24:7d:85:48:94:e9:17:83:c0:c2:19:b7:c5:
         20:10:2f:a6:e6:29:de:1d:0e:78:9a:dc:4a:95:c7:fa:ae:5f:
         b4:b2:d9:5c:ef:b4:0c:cd:21:70:16:05:4e:dd:a5:38:3f:3d:
         46:60:ac:20:49:ec:f7:30:bd:77:7d:8f:56:4a:50:e8:95:6a:
         97:eb:b8:7d:4a:b8:87:20:7c:49:3e:01:ff:9f:58:f3:cb:3b:
         44:c0:38:de:c1:52:ce:01:df:60:fd:c2:9e:1a:f8:16:89:21:
         29:13:c4:bd:25:c3:a8:29:c2:75:fd:80:f6:bd:ec:3b:1b:1c:
         e3:ce:a0:16:f9:7b:7b:52:8e:da:04:c4:49:0e:19:6e:15:fb:
         48:fb:46:9a:20:55:40:38:00:07:e9:24:77:92:91:e0:7e:ba:
         a7:39:25:0f:33:66:9a:cf:cc:a2:fe:b6:37:54:9b:f0:19:63:
         76:11:52:6d:04:24:d1:64:fe:86:f4:2b:07:70:76:4f:9b:6d:
         72:58:5c:f7:8c:d1:6e:a7:11:b6:60:f0:d1:0a:a0:fa:24:e4:
         b8:44:e5:eb:a2:c3:52:70:f7:70:88:87:43:15:7a:3f:1c:9a:
         7a:78:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 22:46:15 2026 by rpki-client