Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/D64B0F1086EF11F19E006003A7EE528E.roa
File:                     D64B0F1086EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier:          3EGss4x0ac1o+zeKud2Kpa04Wj1gBtROV497ReGOk30=
Subject key identifier:   1B:CC:D6:08:4D:0F:F7:44:BD:34:9E:0E:9A:C6:5E:B2:27:67:95:D8
Certificate issuer:       /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA
Certificate serial:       1E23
Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/D64B0F1086EF11F19E006003A7EE528E.roa
Signing time:             Thu 23 Jul 2026 23:40:08 +0000
ROA not before:           Thu 23 Jul 2026 23:40:07 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     17477
IP address blocks:        203.28.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl
                          rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7715 (0x1e23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA
        Validity
            Not Before: Jul 23 23:40:07 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a62a657-272f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:7c:56:d7:6f:5b:39:dc:ce:03:e9:ec:7f:
                    99:b9:c5:70:21:05:91:12:bf:26:e7:57:01:26:79:
                    a6:08:cb:21:da:d9:d1:7c:c4:2e:04:f8:ba:09:21:
                    62:a1:8a:a3:90:af:d9:a2:74:7a:fc:a1:3f:f0:38:
                    7c:ad:43:25:c6:9d:01:df:c0:df:5e:0f:d6:27:64:
                    81:76:3b:99:4c:eb:14:16:cb:31:2c:34:ac:18:58:
                    00:e4:3f:6a:18:5e:68:aa:30:93:a9:cb:d9:e1:94:
                    9f:f3:77:19:4f:44:a1:ce:a3:f6:f9:8c:b0:eb:aa:
                    3d:2c:fe:fa:66:fe:be:e6:a9:a7:f8:3a:92:1b:11:
                    69:da:12:2f:1a:e4:bb:50:14:c8:ae:4d:62:d4:b0:
                    2f:fe:f9:d2:10:bf:4d:a5:52:f1:b4:6d:ad:fe:0b:
                    c9:18:a2:6d:6a:d4:28:3f:37:09:7e:aa:df:d1:1b:
                    bf:71:9f:4f:c7:6d:29:a1:87:fe:37:e3:44:54:5e:
                    16:7f:a5:d1:4d:1e:18:76:be:70:92:56:6f:1a:e9:
                    1a:da:4f:0d:13:ab:9a:a3:1e:c7:98:45:b1:31:ef:
                    5d:0a:88:07:d9:e1:5a:4a:7a:34:c8:07:c7:26:2f:
                    c4:a3:e5:16:7f:a9:9f:13:7e:08:09:92:35:6f:2d:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CC:D6:08:4D:0F:F7:44:BD:34:9E:0E:9A:C6:5E:B2:27:67:95:D8
            X509v3 Authority Key Identifier:
                keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/D64B0F1086EF11F19E006003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:06:24:e9:f7:a9:50:a8:f1:bf:9d:cf:11:b2:a0:71:d1:3e:
         ed:48:04:dc:75:d6:95:b8:60:a1:25:fa:9d:43:03:6c:c3:06:
         00:20:0d:e4:f1:cf:23:59:c2:94:58:7f:b0:f3:33:46:36:3c:
         b1:bc:94:15:56:41:a6:24:96:20:73:1c:f7:a2:48:8e:09:93:
         29:53:60:4e:28:fb:2c:7d:cb:0f:21:0b:91:de:56:80:d0:61:
         4a:2e:b1:6e:32:ab:6c:f5:46:13:29:3e:57:4c:f8:d1:8e:bc:
         bd:46:7c:59:05:c1:a4:0b:c5:62:b7:70:d6:8b:c9:5c:4b:3a:
         d7:2f:48:03:7c:56:58:6d:73:cc:96:08:1d:59:a4:87:87:e6:
         2d:10:7c:0e:d5:a8:9e:01:5c:a5:d7:cc:db:f7:72:e3:26:78:
         58:ba:cd:d0:c0:86:3e:87:6c:f1:6d:57:b3:e5:40:f3:b2:85:
         c3:af:84:66:c0:11:9d:f2:ff:76:a8:13:28:e9:2c:1b:ab:4c:
         69:83:ee:39:87:eb:67:0c:82:56:18:81:00:09:14:82:ea:5e:
         7d:6b:6b:79:19:82:d8:2f:ad:28:00:15:d9:81:39:9e:79:b6:
         88:cd:b7:0f:44:f9:70:0d:5d:0f:d2:4e:f1:4a:14:1d:9e:0a:
         bf:ef:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:26 2026 by rpki-client