Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/80708DE2267611F1BE9D6DCBAE833773.roa
File:                     80708DE2267611F1BE9D6DCBAE833773.roa (raw, json)
Hash identifier:          jGySyCZGfLJ6Gub4dNKlt20vYdC2D9wIP1qqcY9QBu8=
Subject key identifier:   65:FC:EC:62:FA:35:8A:AC:EC:25:29:C0:BC:9F:C8:27:99:91:DE:CC
Certificate issuer:       /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial:       02
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/80708DE2267611F1BE9D6DCBAE833773.roa
Signing time:             Mon 23 Mar 2026 05:09:43 +0000
ROA not before:           Mon 23 Mar 2026 05:09:43 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139623
IP address blocks:        212.23.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
        Validity
            Not Before: Mar 23 05:09:43 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69c0cb17-4be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:42:3d:98:cf:e7:45:18:51:b2:56:39:f7:9e:
                    69:62:07:12:58:79:1d:eb:58:da:cb:b0:d5:13:8e:
                    c5:55:fa:10:c1:00:b1:4f:70:3d:1c:de:f8:ef:97:
                    65:17:40:c1:c0:96:cc:9c:ff:44:f2:2d:8e:3f:fb:
                    cb:00:b1:95:c4:a7:d7:39:eb:71:d4:53:3a:ed:57:
                    b0:71:02:b4:d9:96:23:ab:27:99:29:d9:2c:06:cc:
                    1e:e7:58:ed:ae:62:99:6f:aa:2d:39:d2:c2:cd:a4:
                    49:73:0b:90:58:e3:da:2f:bc:1b:6e:96:11:df:cc:
                    0f:31:51:0a:53:59:79:d1:fd:29:b3:48:bf:ed:be:
                    7d:6a:a1:49:d4:1d:a7:4e:a7:96:02:9a:49:cb:a5:
                    83:06:13:13:86:e7:d8:4c:66:e2:d4:63:1d:72:cd:
                    da:73:ad:21:12:e2:e8:ec:46:31:d5:95:f1:56:b4:
                    66:8b:5a:d9:b2:8f:c1:89:32:03:bf:99:16:41:be:
                    5c:2b:50:2f:c2:37:3c:b6:a5:28:eb:b7:f5:a4:14:
                    ae:a3:f9:8c:c4:d0:c6:44:44:26:80:5e:a3:3b:55:
                    30:49:22:8d:d7:f0:70:99:ba:c5:5b:46:b5:dd:da:
                    7a:e4:76:2a:22:d9:b9:0b:57:b3:f0:05:bc:f0:35:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FC:EC:62:FA:35:8A:AC:EC:25:29:C0:BC:9F:C8:27:99:91:DE:CC
            X509v3 Authority Key Identifier:
                keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/80708DE2267611F1BE9D6DCBAE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:14:51:19:19:f1:4c:96:80:7b:61:05:02:88:76:84:53:
         c3:d9:fb:52:21:7e:d9:d8:53:28:15:1d:ef:2d:e6:3c:3d:40:
         b6:d2:fa:84:9a:6d:7f:95:ca:17:4a:ce:80:70:41:94:e4:72:
         92:b5:af:ac:c0:0b:b1:04:b4:53:73:49:59:a4:ee:ef:37:7f:
         88:b6:8b:86:56:5e:c3:d5:fc:1c:ec:1d:a1:ac:81:25:95:2a:
         9a:22:77:b1:0b:44:64:84:ee:de:83:ed:53:0c:32:fa:d2:bd:
         97:5b:e2:34:2d:d4:a8:f9:98:8d:7b:f6:6f:9a:ea:50:5f:1e:
         53:0f:68:0e:65:21:05:8e:2e:70:22:b8:3d:2a:61:78:97:83:
         37:ab:fb:3f:6b:2e:27:33:f6:a7:09:63:c3:e1:e8:71:71:bd:
         25:f5:23:ac:0c:e3:66:9d:e9:28:a1:77:ba:05:89:7a:82:ab:
         3d:b1:a2:72:76:6a:96:4b:3b:fc:13:c2:28:2c:c9:3e:8b:e0:
         a5:e8:9d:6a:15:f7:03:44:16:21:da:c5:6a:2d:0e:f3:31:78:
         4c:96:f5:25:46:3a:0c:52:37:80:74:06:bb:f0:71:d2:2d:b0:
         9d:c2:6c:3e:ea:3c:02:fc:23:7d:d7:2e:e2:fc:67:f5:f8:ff:
         40:46:39:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:32:08 2026 by rpki-client