Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa
File:                     040DC78829EB11F18E7F1692A0833773.roa (raw, json)
Hash identifier:          z6xCqH756kkIX8f2AVzrhijdwDcnR/vVkM2dlCG3KSM=
Subject key identifier:   F0:E5:D2:32:13:53:D7:14:6C:7F:3E:A5:6B:A3:F2:52:BB:FE:31:F8
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       58
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa
Signing time:             Fri 27 Mar 2026 16:53:53 +0000
ROA not before:           Fri 27 Mar 2026 16:53:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     7262
IP address blocks:        63.223.203.0/24 maxlen: 24
                          63.223.204.0/24 maxlen: 24
                          209.9.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 17:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Mar 27 16:53:53 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69c6b621-a3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5f:cb:15:98:3e:82:e1:ad:dd:35:b1:68:34:
                    e8:3c:cb:30:64:39:39:70:dc:cf:e2:b9:0d:b0:97:
                    fb:6a:e9:ac:17:8f:29:e0:d9:cd:de:a8:76:df:01:
                    49:be:81:5b:43:d0:ae:ff:4b:fa:8d:ae:21:ac:90:
                    dd:43:f6:99:bc:28:6d:a6:27:45:9e:a7:e6:ea:e7:
                    c2:7e:3c:b0:4f:82:cc:e4:c7:94:bd:be:9c:88:9a:
                    bb:08:b6:c1:c2:d5:a0:e0:d3:cf:36:4a:cb:10:8a:
                    c1:14:8d:49:05:14:28:eb:33:65:53:d0:2a:a2:2e:
                    96:d0:29:54:a7:2d:fd:78:2f:5f:b0:47:c0:d4:d0:
                    5b:6c:d3:70:15:ac:f0:77:57:04:55:c5:78:18:e4:
                    e7:56:ea:10:a1:1b:9d:cc:8b:4f:0e:46:a8:9e:58:
                    30:c1:3c:01:4d:dd:44:46:9f:66:74:dd:03:c7:8a:
                    19:7c:1a:a5:86:d3:70:93:4f:91:e9:02:27:2e:6f:
                    58:49:39:66:a1:47:a6:e0:49:27:76:db:ff:4f:99:
                    33:5d:91:80:52:66:cf:76:5f:39:4c:16:f1:ce:66:
                    37:90:12:6a:98:56:9d:32:67:ba:c6:4b:71:95:53:
                    4d:a4:3c:d7:ea:a9:2c:22:f1:d4:ba:29:7e:8e:f3:
                    ce:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E5:D2:32:13:53:D7:14:6C:7F:3E:A5:6B:A3:F2:52:BB:FE:31:F8
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.223.203.0-63.223.204.255
                  209.9.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:6b:d3:7a:a4:18:e6:8c:22:10:35:78:4b:cf:30:de:dd:
         6b:2b:b9:9a:b5:ea:ac:3d:c8:3a:3b:3a:c7:c0:99:a9:bb:27:
         cf:01:48:d8:62:73:6e:85:00:f5:bb:02:dd:96:f7:68:67:71:
         1f:a4:bc:e8:0a:a4:af:9f:5b:4c:9c:58:69:11:4b:b4:e0:8d:
         35:22:ff:dc:c2:11:48:06:fd:82:95:6a:1f:2f:15:25:f9:8d:
         e6:29:86:ad:1b:21:ac:bc:a1:1c:3d:57:40:93:61:08:34:bf:
         5f:cb:0a:c0:b1:90:d0:47:16:36:3f:bd:68:36:20:a9:a2:29:
         4e:24:8f:d5:92:dd:15:69:b6:3f:61:9e:d5:9b:f8:ed:39:8a:
         4a:fe:18:e0:fb:ba:12:62:70:d9:c7:e5:08:40:56:e8:7b:df:
         af:de:3f:2a:a0:e5:ce:38:2c:3e:2f:23:ab:8e:f6:b3:0e:75:
         d4:77:3a:66:90:91:bf:52:0e:5c:f7:67:4c:64:56:ab:c6:28:
         18:ef:a1:42:d5:43:07:19:be:0b:1a:a1:f2:59:c6:e3:6f:3a:
         e5:02:04:c3:5f:12:3d:00:77:45:56:84:dd:0a:e4:34:cb:2f:
         c3:89:b5:fa:4b:bd:f1:51:9d:06:55:c6:0f:bd:d7:61:93:98:
         ad:1d:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:53:58 2026 by rpki-client