Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/0F7A780C278211F19C45DF9DCA833773.roa
File:                     0F7A780C278211F19C45DF9DCA833773.roa (raw, json)
Hash identifier:          Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=
Subject key identifier:   6B:FC:77:40:FF:85:F7:29:12:E3:B6:F0:DF:3E:6A:92:29:7A:1B:B0
Certificate issuer:       /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial:       04
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/0F7A780C278211F19C45DF9DCA833773.roa
Signing time:             Tue 24 Mar 2026 13:04:58 +0000
ROA not before:           Tue 24 Mar 2026 13:04:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152320
IP address blocks:        163.128.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
                          rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
        Validity
            Not Before: Mar 24 13:04:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69c28bfa-2932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:0e:36:76:15:3c:c6:47:64:f0:0b:22:e0:
                    0a:99:38:18:9b:a6:77:a7:51:68:29:9c:48:ce:03:
                    de:04:bc:40:d2:66:94:06:b8:e8:0b:38:20:11:7e:
                    fd:f5:95:df:a8:d0:31:05:d7:13:e7:76:36:2d:34:
                    8e:e4:ec:3a:87:5a:d5:64:03:51:f6:7d:ae:4a:23:
                    b8:f5:96:61:fe:4b:bb:e7:36:fe:ae:cd:18:88:2f:
                    53:77:3c:4e:cf:ed:6f:0e:8b:3d:42:0a:25:07:20:
                    9d:53:dd:43:6c:d0:96:3d:c4:8c:8e:89:60:32:91:
                    6e:ca:c4:f9:f4:53:70:46:2a:84:1f:c4:18:a6:89:
                    7e:90:80:02:46:87:35:06:57:7c:51:84:57:23:5c:
                    06:a3:0c:5a:6e:a9:38:ac:3a:1a:bf:d2:4e:bc:2d:
                    98:30:5c:a9:5e:c8:28:a5:de:87:20:c0:22:71:c7:
                    e5:d4:e0:d4:a6:c3:fd:b6:95:c0:78:60:61:13:d1:
                    e8:cb:d5:6d:04:c7:86:c4:43:9e:26:0e:28:89:57:
                    ad:1f:c8:a6:2e:3c:bf:b4:43:c5:24:bd:fc:8b:d3:
                    68:cd:6e:c0:67:bf:1f:e0:dc:ac:1f:50:7b:f3:2d:
                    09:27:04:9d:8f:e5:ee:af:11:b7:ea:49:b1:d0:17:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FC:77:40:FF:85:F7:29:12:E3:B6:F0:DF:3E:6A:92:29:7A:1B:B0
            X509v3 Authority Key Identifier:
                keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/0F7A780C278211F19C45DF9DCA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:30:83:b2:30:0d:30:67:3c:7b:83:83:64:4c:aa:f7:e0:
         eb:91:ae:ef:0e:05:53:a3:f8:12:60:13:71:7e:f4:36:ff:43:
         09:92:3b:55:ab:f0:b8:68:20:3d:ea:f2:bb:c6:1b:c1:79:7e:
         a7:e8:81:18:53:26:37:bd:03:3c:00:44:af:84:ff:fe:0d:e7:
         53:69:e7:7b:79:9f:a4:28:fb:7f:66:9e:bf:80:00:c8:bd:ca:
         2e:3a:91:07:23:6b:2e:67:cd:3b:c2:b2:f2:f8:ca:53:43:7a:
         6f:30:5c:a4:fa:87:67:06:4d:88:88:33:03:fa:64:68:b0:d7:
         36:92:4c:cd:fe:0f:12:11:3f:aa:3a:be:b4:e3:9b:ca:ac:07:
         b4:65:0c:5a:ce:1e:aa:81:af:c0:ed:72:7c:36:c0:e7:09:30:
         3e:4a:c0:46:9a:fb:b4:57:c5:fc:b5:3f:4f:c6:89:06:03:7d:
         43:60:05:f9:22:2c:77:ff:6e:d0:c6:c3:95:1f:66:c0:d0:49:
         74:2e:66:06:53:7a:08:b1:5c:e8:fd:62:21:ad:a7:25:ba:eb:
         15:a9:a6:fa:5c:72:7a:3c:94:ef:69:9d:e1:5e:1d:4d:56:be:
         a5:67:89:d9:55:09:65:20:86:f3:bb:9a:ec:4b:32:83:25:1d:
         55:ae:25:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:12:46 2026 by rpki-client