Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa
File:                     D8375D30A69B11F1A29A77493411F970.roa (raw, json)
Hash identifier:          Oq6EWPqn9hAjR/n1Fw9l1YNrmCrCY3C/1Z//Amm/UOA=
Subject key identifier:   ED:03:92:C9:AA:C0:76:A0:49:E1:3A:CE:F3:15:2D:66:A6:8A:DA:CA
Certificate issuer:       /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial:       7A
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa
Signing time:             Wed 30 Sep 2026 16:29:30 +0000
ROA not before:           Wed 30 Sep 2026 16:29:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141031
IP address blocks:        151.123.232.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
        Validity
            Not Before: Sep 30 16:29:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd38ea-4181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:7e:7b:e4:27:57:2f:ba:64:8a:7b:8c:9a:
                    97:bd:70:d3:26:0c:f8:54:8a:72:16:6f:0d:b3:fa:
                    f1:97:92:34:d6:44:1e:c1:2e:a9:63:65:19:d4:e7:
                    b1:23:7f:b9:db:bf:29:3a:b2:66:19:b5:fd:8e:fd:
                    73:5a:b7:e7:0a:01:20:3f:c3:b3:28:15:68:b5:b1:
                    37:95:3e:33:25:3d:29:9f:5b:f5:00:89:dd:cc:18:
                    e4:19:db:9b:b2:f3:26:bf:33:d4:3e:ab:27:fd:b2:
                    37:7f:d0:df:59:40:b6:f3:cf:a2:05:2e:5a:9d:e0:
                    96:82:c3:ae:f0:a1:dd:26:54:80:36:59:5f:26:ae:
                    c1:12:7a:c6:51:29:7d:cf:a4:a7:bd:0a:13:e9:17:
                    86:3d:7c:42:20:51:40:37:1b:da:ed:34:cc:9f:d0:
                    ac:2f:4e:ae:c4:b4:ed:09:6e:2d:30:98:9e:7b:c9:
                    6b:8e:2f:d2:ae:c1:ff:8b:c7:27:f6:4e:85:3c:e2:
                    d6:82:26:eb:19:ee:91:41:39:a5:e4:c0:ef:c9:55:
                    c9:c1:d9:8c:76:dd:95:f8:25:3d:25:39:f9:21:56:
                    40:dd:9c:bb:d9:4c:66:7e:1d:a9:0f:ab:60:ab:d7:
                    2a:d4:9b:b6:74:03:12:e7:1c:58:34:c0:11:16:f4:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:03:92:C9:AA:C0:76:A0:49:E1:3A:CE:F3:15:2D:66:A6:8A:DA:CA
            X509v3 Authority Key Identifier:
                keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:2f:f1:56:ea:77:6e:ba:7a:54:98:f5:a0:23:9b:92:d7:b2:
         66:c0:ba:ee:22:c0:ef:e8:1c:0e:b1:85:21:82:52:93:e7:62:
         4d:f1:11:b6:69:9a:3b:dc:89:0e:a1:5f:ee:98:bc:15:ee:4a:
         a8:55:b6:80:f2:1c:51:36:ea:21:7a:3e:be:ea:99:ce:66:e4:
         f2:56:5c:e8:9f:ad:31:08:ef:5b:68:35:fa:ff:1d:06:ba:24:
         5c:c8:e6:b1:a5:1f:3b:52:af:fb:8b:3d:b0:34:a2:13:3f:5e:
         55:65:b8:e8:27:2d:6b:74:24:b4:31:b3:26:ce:e4:d4:7e:c5:
         07:49:8b:91:27:a0:e3:4d:3c:d9:cd:b5:67:db:2e:3a:ab:6b:
         c6:11:47:8c:e6:52:f4:22:5e:54:cc:05:bd:7c:9e:dd:5e:ff:
         f5:da:97:b1:cb:bb:25:3c:e9:13:1f:c7:89:22:8b:2f:e2:89:
         13:82:69:ea:8e:04:32:1b:8e:8c:cd:14:99:8d:a7:ed:11:9a:
         d8:45:3d:23:fa:09:e0:1f:eb:99:84:09:a0:d1:c0:35:a3:79:
         97:c7:fb:3b:f5:74:03:eb:da:e7:93:38:d1:68:ec:1e:61:43:
         10:ad:38:b9:ba:93:e9:1f:b0:25:00:29:c3:be:fc:46:bf:92:
         ea:ee:5c:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:27:32 2026 by rpki-client