Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/D1960A28493D11F1A113D1E6B5833773.roa
File:                     D1960A28493D11F1A113D1E6B5833773.roa (raw, json)
Hash identifier:          3ZGbdg04NB+U1p4ArMrgy7RjHgfQTqsGhjizYBFQoP0=
Subject key identifier:   DF:21:58:A3:4D:29:7C:45:6A:EC:42:3F:BD:91:71:6C:DC:0D:62:C9
Certificate issuer:       /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial:       28
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/D1960A28493D11F1A113D1E6B5833773.roa
Signing time:             Wed 06 May 2026 11:22:08 +0000
ROA not before:           Wed 06 May 2026 11:22:08 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132467
IP address blocks:        163.128.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
                          rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
        Validity
            Not Before: May  6 11:22:08 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69fb2460-ac23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:06:ec:dd:4c:73:81:a9:d6:52:2c:d5:86:
                    17:f1:88:94:e9:37:b4:f4:91:51:a5:bc:e3:e1:58:
                    4f:6a:41:ae:63:3f:92:cc:b6:64:2f:68:fd:4d:39:
                    f9:1e:05:62:d4:5d:88:01:09:e3:3a:a4:ba:18:90:
                    2b:13:ea:5e:9d:28:02:43:55:cd:a1:7e:c2:9a:42:
                    73:fa:6b:1f:27:b2:89:78:0d:d4:eb:b4:b3:7d:62:
                    06:1e:58:d5:1e:bf:9a:da:e9:74:d9:96:34:e7:3e:
                    1a:4a:38:c3:70:ec:41:aa:67:60:47:3e:03:c5:a8:
                    c8:f7:99:39:ae:bb:88:f2:5c:da:67:c7:bf:20:8c:
                    95:63:d4:7b:56:5d:8e:02:54:a8:ef:64:ad:02:dd:
                    13:30:a0:0d:25:9c:5f:0d:83:55:f2:4d:a5:e8:58:
                    10:9e:61:fa:48:92:12:84:ec:7c:0f:43:f9:89:c0:
                    0c:c5:c2:63:a7:2a:5b:3a:72:ca:1a:bb:3c:f2:b6:
                    fa:3a:0e:a9:28:06:c9:d5:66:55:2e:25:dd:cc:24:
                    2f:ff:a4:bd:58:8d:9e:3a:24:44:e2:b7:9d:6a:70:
                    87:3a:e1:64:ea:fe:27:90:49:7c:08:8f:02:7e:80:
                    c3:e0:cd:56:63:59:ef:81:dd:f5:ff:09:7c:05:cc:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:21:58:A3:4D:29:7C:45:6A:EC:42:3F:BD:91:71:6C:DC:0D:62:C9
            X509v3 Authority Key Identifier:
                keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/D1960A28493D11F1A113D1E6B5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:bb:f5:a7:0d:80:16:32:1e:26:56:c0:fa:73:ae:01:82:85:
         84:48:18:1a:61:fe:e1:bf:d8:29:15:52:6b:c5:b2:22:83:74:
         1d:72:6c:cb:e3:23:fe:86:36:4e:02:5f:dc:0c:a0:1f:5e:62:
         8b:48:8d:25:3a:b8:91:13:ee:a1:ae:0a:42:67:60:be:ff:24:
         2e:11:a3:5e:8e:ce:1c:9a:a7:91:eb:71:7f:7d:1a:78:6e:cf:
         5d:19:23:a7:ed:de:ff:b1:f7:f9:ec:a4:df:cf:f4:01:6c:b7:
         2f:a9:e8:26:63:89:c8:f6:2f:05:80:90:37:c1:d4:62:7f:72:
         13:ad:d4:66:cd:e4:2e:e7:da:00:0e:ee:6b:08:8a:ae:0e:c6:
         3d:e8:1b:0d:db:f9:fc:71:a0:52:e6:db:d8:7f:18:94:8e:71:
         ae:8f:09:c0:08:86:97:d1:78:ae:88:b5:d1:72:93:87:80:01:
         8f:c8:a3:24:09:94:f6:e9:0b:9f:eb:b3:ee:2f:01:27:fe:b5:
         8b:bb:99:21:c4:00:c4:cf:48:45:f6:23:85:e0:0f:98:8e:7e:
         8f:70:e1:4b:14:75:bb:64:74:88:a3:cc:4e:3c:58:01:50:9b:
         dd:10:4a:40:04:b7:8a:4b:e2:84:64:a2:3d:d4:7a:41:1a:5a:
         88:68:5f:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 14:41:14 2026 by rpki-client