Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/23C5258A29D711F19B6521AE99833773.roa
File:                     23C5258A29D711F19B6521AE99833773.roa (raw, json)
Hash identifier:          vLiP86TmWiL86c6JxYkSHz4JTIIMh3/D2cE0XI4dGmI=
Subject key identifier:   8E:ED:C2:0E:85:D5:24:77:37:D8:BB:D1:09:F9:4A:40:BB:31:A3:D9
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       20
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/23C5258A29D711F19B6521AE99833773.roa
Signing time:             Fri 27 Mar 2026 12:23:06 +0000
ROA not before:           Fri 27 Mar 2026 12:23:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     12491
IP address blocks:        207.176.12.0/24 maxlen: 24
                          207.226.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 17:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Mar 27 12:23:06 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69c676aa-4116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:4f:1f:d3:d6:6c:ad:c8:44:5a:8e:85:70:
                    47:d1:55:72:ce:42:17:c0:94:18:cd:cc:2c:7c:fe:
                    9e:15:71:07:6d:cd:ac:af:b5:9c:9e:81:fa:d0:43:
                    bb:c1:3e:6f:d8:9c:24:98:78:82:43:9b:1b:85:db:
                    40:0c:00:83:68:6c:c3:dd:d8:15:bb:f4:73:e9:0a:
                    a8:73:9a:3c:86:0b:49:ef:30:85:b8:3e:ea:96:2c:
                    b8:3f:51:61:c8:cc:ee:81:a7:25:18:7f:5b:d7:6a:
                    7d:83:8e:ff:c5:91:95:c0:8e:93:76:f7:3b:0d:a8:
                    49:46:14:25:da:ea:ee:96:f4:cf:ab:1e:e8:7d:89:
                    72:fa:8b:24:b5:95:d6:52:c4:99:24:27:b4:e4:c3:
                    2a:ad:7a:b0:fa:83:2a:4c:f2:2a:e2:8a:89:0a:e4:
                    dd:be:34:a2:f5:bc:16:d1:ce:5f:15:dd:a9:62:cd:
                    c5:e5:49:ae:7f:16:98:6c:54:3a:33:c9:ae:32:ca:
                    b8:c3:98:f4:91:4c:9c:80:fa:ec:b8:cd:0f:3a:da:
                    47:19:a4:3a:47:80:89:56:5f:44:bf:66:30:a9:5b:
                    f6:3b:bc:38:57:94:54:6b:81:10:bb:1d:fd:3b:b4:
                    f7:84:f8:aa:e5:85:b9:48:f4:f9:34:89:ac:7c:cd:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:ED:C2:0E:85:D5:24:77:37:D8:BB:D1:09:F9:4A:40:BB:31:A3:D9
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/23C5258A29D711F19B6521AE99833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.12.0/24
                  207.226.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:10:c0:df:a7:46:60:28:47:78:67:de:4c:dd:7b:9e:f1:
         e3:06:6b:3e:be:00:81:2b:ad:75:0a:04:90:d0:a2:f6:6a:98:
         9b:7e:c9:8b:12:cd:4f:e5:af:ce:3a:81:ad:98:1e:95:31:5f:
         6a:c5:60:ba:b9:ad:a5:f9:61:80:1b:a5:41:c8:70:b6:a5:e6:
         b0:63:2c:71:26:d2:05:df:32:54:82:a8:70:42:aa:c0:be:b2:
         68:30:86:c5:e5:07:05:b5:e0:09:45:6a:d0:b9:27:61:26:7a:
         3d:71:c9:b9:a2:3a:c9:e7:6b:3f:8f:49:62:11:3c:64:5d:3c:
         3a:22:12:a0:e7:1c:07:30:4f:a1:b8:a2:00:f5:0a:67:b5:23:
         50:68:aa:c7:9d:40:2c:52:74:db:a7:4f:22:d8:9f:de:1b:b7:
         94:1c:32:bd:bf:2f:34:5b:a5:92:53:16:27:1f:e7:79:ea:55:
         f4:f5:16:22:60:9c:59:cd:3d:f8:4c:67:f0:b7:9d:76:ca:84:
         97:5d:fc:87:20:27:7d:ad:3f:29:75:c9:2c:b7:5d:06:66:ce:
         b3:eb:01:23:f4:48:40:a8:dd:f3:f2:fa:2c:4a:35:1a:4c:a1:
         28:ee:64:3c:6c:ab:0f:e1:b1:4a:2e:ce:d8:5c:50:21:1d:df:
         88:d7:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:00:21 2026 by rpki-client