Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/3B20943EBF4C11F19F9374173411F970.roa
File:                     3B20943EBF4C11F19F9374173411F970.roa (raw, json)
Hash identifier:          aC8bHcyP9aqR8iC8IHDCN3sGwe+o/h+TKAeNgGVNKWQ=
Subject key identifier:   78:99:11:DD:19:E9:52:85:DC:08:6D:9F:6C:8B:D2:2B:58:7F:08:3F
Certificate issuer:       /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial:       7A
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/3B20943EBF4C11F19F9374173411F970.roa
Signing time:             Sat 03 Oct 2026 17:02:36 +0000
ROA not before:           Sat 03 Oct 2026 17:02:36 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138482
IP address blocks:        163.128.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
                          rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
        Validity
            Not Before: Oct  3 17:02:36 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ac1352b-c665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:5d:65:54:d8:8f:af:51:dc:fe:9f:6d:b0:
                    2f:ac:06:b5:c3:9b:c7:b7:f0:99:66:19:df:95:8e:
                    76:f0:72:82:62:f3:63:ea:47:93:4f:63:8e:26:0f:
                    a7:16:e3:dd:f2:31:7a:25:0e:b6:67:6b:a4:92:bf:
                    70:68:67:bf:4e:fa:85:94:d0:1f:43:7d:15:5f:44:
                    da:d8:e8:b9:dc:54:71:d3:b1:e4:2d:9b:bb:94:72:
                    11:c6:1b:27:04:d4:fd:79:14:84:5e:1d:5c:82:27:
                    10:c3:bb:a6:95:fb:67:9e:03:22:24:38:f1:c9:0f:
                    88:52:d1:57:bc:3a:2e:91:ba:1b:27:41:e1:c9:fd:
                    f5:fd:71:ab:fd:85:e0:74:be:69:41:ac:7c:01:08:
                    1c:19:d2:9e:69:b0:0f:6d:0b:31:25:30:73:96:b6:
                    4c:c4:be:45:32:7c:e6:d2:16:c6:e7:a9:e9:10:d9:
                    25:91:7d:ed:eb:d0:e9:5c:e4:58:25:09:24:86:23:
                    f8:93:df:e9:d7:45:c7:89:7d:d1:13:eb:90:23:e7:
                    3b:77:83:a8:bd:f1:7c:46:16:67:66:5b:93:d4:23:
                    8f:0d:17:b9:89:25:48:0b:43:d8:14:7e:bd:97:a2:
                    15:9a:4a:7f:f4:9e:7e:c7:c7:75:9a:d9:ff:a8:ed:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:11:DD:19:E9:52:85:DC:08:6D:9F:6C:8B:D2:2B:58:7F:08:3F
            X509v3 Authority Key Identifier:
                keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/3B20943EBF4C11F19F9374173411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:f8:99:a7:ad:18:08:62:fd:fc:49:91:7f:ce:8d:e9:1f:
         a2:79:a8:fd:60:a9:8d:13:74:6d:4e:14:a6:24:02:bd:94:c1:
         bf:09:d6:e4:6f:dc:72:fe:5e:8c:d4:92:4e:01:a2:d2:1d:0d:
         6a:ce:3e:1c:0f:5f:a8:f3:d2:b5:63:76:c6:64:41:61:66:ce:
         d6:f6:cf:d2:27:2c:91:43:15:bc:01:3b:34:3b:44:33:a0:15:
         07:8f:63:cf:a0:87:a9:e5:c7:1e:43:e4:4d:42:e5:ef:ce:53:
         e5:d0:f0:49:3f:46:80:aa:54:bf:77:75:50:0b:86:c2:de:73:
         b9:10:43:ee:95:3c:c7:37:fb:cd:4c:43:88:0f:0e:7a:1c:ff:
         ee:69:c7:2d:a4:f8:4a:bb:ca:c6:c0:3f:e5:c3:3d:35:86:00:
         c4:3a:31:c9:18:f3:b3:48:c9:d2:b8:47:64:6f:a4:a6:b3:9d:
         42:64:9d:ce:73:a9:67:15:9d:6f:11:16:2a:72:94:70:93:c6:
         4c:2f:2c:b6:58:0f:3b:38:e6:70:0b:78:fe:c6:72:b0:5a:47:
         da:eb:b8:07:2f:a8:1f:68:69:28:6a:0b:8d:d3:8d:66:05:2c:
         9b:88:3a:09:84:46:b6:60:48:76:df:c5:09:7f:09:ae:00:0d:
         41:55:4a:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:58:06 2026 by rpki-client