Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa
File:                     67023924535F11EE9BC85F83C4F9AE02.roa (raw, json)
Hash identifier:          iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=
Subject key identifier:   A6:2C:4F:AD:97:67:C8:73:75:26:DF:81:C3:56:EF:84:5C:23:7B:39
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DBB
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:42:11 +0000
ROA not before:           Sun 02 Nov 2025 19:08:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4202202155
IP address blocks:        202.162.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3515 (0xdbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Nov  2 19:08:11 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48882-4bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:9c:29:a4:0b:f2:4e:00:f4:4a:39:26:67:
                    ae:27:0c:32:3b:2c:6c:10:73:97:de:66:6c:d2:87:
                    75:0b:3c:a5:8b:85:df:fa:d9:fd:c9:f6:1e:43:5c:
                    a9:60:c3:e7:74:63:65:10:18:5c:6a:2a:99:b9:41:
                    e4:29:47:e7:45:61:ba:2b:3c:7c:10:73:cf:42:0e:
                    1c:73:65:d2:c5:e4:2f:f6:fd:9b:0c:38:46:0e:8e:
                    c2:c0:4c:97:ec:6a:c1:25:bd:5b:04:8f:69:f0:29:
                    b7:e7:63:16:e4:ce:b6:8c:ad:82:17:57:fc:18:a0:
                    23:6c:1d:dc:44:d8:bd:b7:37:6e:e4:48:8a:14:36:
                    bb:19:5b:2f:87:fa:5d:a9:5d:cf:d2:dd:10:8f:84:
                    ef:d5:7b:e5:a2:ad:07:c3:1e:32:9d:80:c4:34:23:
                    01:a2:db:4e:9f:85:45:c4:0b:0c:fb:14:69:1a:4d:
                    a3:23:e0:c8:83:1a:b2:41:86:00:27:8e:26:25:fd:
                    c2:93:a5:27:3c:fd:60:27:ef:67:d3:f4:53:61:a7:
                    11:e4:df:f9:66:6d:9a:7f:7b:58:4e:36:44:21:81:
                    1e:68:f3:62:ce:de:5e:00:88:8b:ce:a7:3a:4e:32:
                    e6:3e:67:d8:34:c4:aa:73:83:9b:6f:ba:e8:b9:d5:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2C:4F:AD:97:67:C8:73:75:26:DF:81:C3:56:EF:84:5C:23:7B:39
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67023924535F11EE9BC85F83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:ee:1b:53:c5:7c:0b:bc:36:48:d5:ee:d7:07:f9:da:f9:
         a9:31:a4:e4:87:41:d9:18:8b:dd:66:aa:68:45:2d:92:59:09:
         27:38:d9:d6:6f:1b:f8:03:5a:d5:8d:d3:88:05:3a:be:ba:dc:
         00:66:81:1b:c2:7a:6a:4b:90:18:4f:c0:6a:af:5f:ae:f9:0a:
         53:64:76:b7:31:da:60:4e:b3:9a:b8:05:f5:34:44:06:b1:26:
         9f:4f:47:cb:61:7d:20:ba:1b:b9:a8:40:cc:4b:04:a8:94:cc:
         13:5b:55:74:98:e5:cf:ef:5b:d6:45:98:f8:a1:8b:47:e3:ec:
         c3:17:a1:7d:ff:59:b4:4f:a0:e0:82:88:56:1a:4c:6d:8f:73:
         48:b0:a8:a6:a0:69:e5:cd:21:2a:6e:56:15:1b:c3:92:2d:1c:
         8f:c1:5a:f9:44:37:4d:82:dc:97:4b:85:4d:16:69:0d:c6:4a:
         1a:6c:4d:93:85:5f:24:9b:ca:12:73:2f:c6:04:28:2d:58:68:
         b4:b7:4b:6e:4e:3d:ba:af:35:5e:c0:c7:1b:9c:39:43:a3:a9:
         f7:c1:b9:26:a4:6d:53:73:4c:01:95:54:8d:f8:de:8c:66:ea:
         b4:9e:af:90:7b:90:f9:12:4a:88:6a:56:db:88:cb:00:b2:36:
         9b:0c:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:50 2026 by rpki-client