Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24783DA46F3211EDA3DCF033C4F9AE02.roa
File:                     24783DA46F3211EDA3DCF033C4F9AE02.roa (raw, json)
Hash identifier:          sa00jH8bw4HUITlYrffZw+f88KkU69vSq0M65+ZIMYI=
Subject key identifier:   89:71:C1:8F:D4:E6:47:89:7B:6A:2C:D6:6C:02:88:62:77:36:47:E6
Certificate issuer:       /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial:       0276
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24783DA46F3211EDA3DCF033C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:17:33 +0000
ROA not before:           Thu 19 Jun 2025 02:39:29 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        203.55.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
                          rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
        Validity
            Not Before: Jun 19 02:39:29 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4588d-0ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:e5:c4:ed:98:3c:2d:d1:b2:c5:ae:12:75:9a:
                    4d:99:85:85:d6:8c:a9:62:c7:b3:95:a2:9f:86:4e:
                    aa:2d:bd:bb:95:9f:c3:76:23:7f:03:bf:3f:41:04:
                    ab:ca:8f:f4:f9:a5:44:e3:0c:02:b9:ca:0b:ca:90:
                    7c:af:a8:e3:1a:3e:9c:c4:7f:8f:51:d8:64:27:4c:
                    ce:4b:08:dd:d5:f8:b3:77:5c:e2:f9:e3:c5:4a:f9:
                    17:3e:bc:fc:07:ed:25:cb:d1:4f:78:da:46:e6:fb:
                    1e:6d:93:c3:ea:0d:69:d1:6f:c4:8e:78:3e:f9:fe:
                    3e:1e:ab:4f:06:c6:58:1f:34:91:4e:07:68:dc:eb:
                    c0:eb:da:32:e4:35:b5:10:51:65:0f:78:b0:7b:4d:
                    a2:62:03:cb:df:8b:09:30:b5:ff:13:74:e1:6a:d3:
                    e0:c0:d8:1b:5e:1d:ac:e1:56:fc:ea:50:f4:03:20:
                    fe:09:0d:68:e9:0b:11:c8:7f:27:34:c6:98:86:35:
                    8e:16:0b:c1:24:fb:62:bd:f3:b6:37:3e:43:6e:47:
                    e7:89:fd:20:6b:bb:f9:d0:d0:94:01:d1:99:10:1f:
                    41:64:1c:f9:93:ef:32:83:d5:57:30:8f:a9:98:db:
                    60:89:a6:27:d5:11:2a:0f:5a:19:e2:aa:01:11:ca:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:71:C1:8F:D4:E6:47:89:7B:6A:2C:D6:6C:02:88:62:77:36:47:E6
            X509v3 Authority Key Identifier:
                keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24783DA46F3211EDA3DCF033C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.55.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:cf:a4:c1:0a:18:d4:8a:06:e8:1a:e5:5d:61:75:0a:5e:
         11:65:00:93:c9:75:02:46:7c:11:69:09:95:10:fa:df:58:d7:
         37:60:67:ae:50:49:d1:fb:ca:da:5b:94:e7:ff:c2:99:50:94:
         32:97:a8:9e:01:13:26:19:d4:ce:44:f8:c9:cd:08:0c:98:89:
         62:a2:c3:91:c5:0e:15:ce:d1:1f:c9:b7:9b:5c:1a:fb:f5:a4:
         86:78:ff:48:1a:b3:74:12:41:e4:45:56:8f:27:46:6d:87:17:
         b3:47:3a:ad:77:0d:d6:60:a4:f9:b4:57:3e:c6:10:54:14:75:
         2f:73:00:ce:64:ab:0d:75:c1:02:de:f8:19:81:0c:91:65:a9:
         1a:8d:0b:4b:4c:46:10:19:61:0b:65:9e:e5:78:29:ee:d1:64:
         71:f6:67:20:51:3f:92:af:91:0f:88:06:25:f6:dd:51:b5:81:
         76:c9:27:c4:5b:82:2f:3f:89:27:54:3d:dc:38:7a:37:c0:4a:
         4c:bc:97:f3:7e:27:c7:d2:cb:3b:a6:b4:8d:84:c1:86:bf:8a:
         8b:d0:29:07:c6:a1:c8:f9:c0:5b:b2:23:3f:af:94:d4:0d:ca:
         e6:82:bb:7e:28:d3:56:96:28:1c:0e:97:f0:7d:a5:37:e5:f7:
         11:d8:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:49:28 2026 by rpki-client