Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa
File:                     C2E32E34466B11EE988B243DC4F9AE02.roa (raw, json)
Hash identifier:          AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=
Subject key identifier:   93:10:DA:89:F6:72:53:90:7A:4F:78:0A:A5:D7:65:8A:75:95:53:11
Certificate issuer:       /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial:       0AF6
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:00:35 +0000
ROA not before:           Sun 22 Feb 2026 19:16:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149419
IP address blocks:        123.108.92.0/24 maxlen: 24
                          123.108.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
                          rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2806 (0xaf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
        Validity
            Not Before: Feb 22 19:16:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a462a3-167f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:c4:fb:32:3c:e4:b7:3a:33:74:c4:2c:ef:
                    ef:16:e8:c8:69:81:e8:44:89:ff:66:aa:8b:bb:5a:
                    c9:5e:5d:31:a2:01:9d:dd:c7:69:f4:db:b8:0e:a2:
                    8a:3b:16:8a:88:ad:4b:32:8e:10:97:20:c7:e7:91:
                    b0:f7:0a:fa:88:f8:68:1e:6d:14:61:1c:2d:ee:05:
                    0f:49:5e:8b:87:fa:16:69:59:e9:56:3b:a2:72:ba:
                    a2:da:1f:22:e4:ca:a7:d8:f4:65:40:ca:cb:ba:af:
                    57:30:4b:82:f2:b7:ad:0f:c5:06:8b:e5:1d:13:91:
                    de:95:2e:11:09:d2:9c:5b:c2:8c:6d:19:82:2c:69:
                    4c:20:f7:a8:a2:d0:15:16:8d:9c:0c:88:d3:34:1a:
                    11:54:86:d3:a9:6e:35:b2:e4:24:84:46:6f:d9:11:
                    64:fb:58:4a:5e:34:d8:38:1e:58:e9:42:79:7e:36:
                    2a:b4:c2:32:2d:e6:7f:1a:47:6e:5c:cc:d5:14:c9:
                    14:5f:0c:69:e7:ec:0a:3a:8a:8e:ea:8f:93:f2:4a:
                    84:b2:a8:c5:58:3b:3c:ba:50:0f:af:42:ba:19:62:
                    f4:9b:9c:48:17:c8:e1:e9:f6:9f:35:b1:38:5d:0d:
                    ce:d8:6f:f9:2c:3d:e1:8b:fd:eb:b7:2c:9e:c1:f6:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:DA:89:F6:72:53:90:7A:4F:78:0A:A5:D7:65:8A:75:95:53:11
            X509v3 Authority Key Identifier:
                keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.108.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:e7:5e:1f:db:b4:f0:ee:b6:e1:de:78:dd:82:f1:25:e1:
         40:40:cf:4f:da:6d:d8:49:9b:9d:0d:ec:4c:1c:57:06:ff:8e:
         41:85:ac:14:05:42:c0:a1:a9:5c:a9:93:e3:67:e5:8f:6f:e3:
         61:4e:e9:a1:3c:42:2d:42:b6:a0:5c:41:f3:b0:55:45:02:ae:
         92:3f:59:3d:30:ec:65:5a:8d:0f:08:79:db:93:96:6d:d6:99:
         88:90:99:2b:dd:28:fb:49:d5:37:cf:56:52:cb:c2:74:0e:35:
         35:d3:9a:5c:a7:4e:c9:18:e0:d5:a3:c9:28:ab:39:da:15:d0:
         c8:45:a6:11:d2:fd:c8:6a:73:1b:11:7a:f1:a5:27:a2:b5:cb:
         28:9d:fe:a2:32:81:80:7f:6a:f0:c9:de:56:3d:01:2e:1b:6c:
         2a:62:da:f8:5c:3c:e9:f0:50:ee:83:85:36:55:80:02:aa:2f:
         f6:6c:aa:91:65:09:ae:df:bb:3f:69:af:8d:d6:72:39:a1:f9:
         fd:bc:16:03:3a:e0:25:c0:0e:a4:92:e3:2e:6d:01:1c:51:c1:
         88:8a:09:0f:4c:8e:42:20:75:ad:b4:cb:b6:03:d0:10:e2:df:
         5d:57:5c:3a:a5:9f:d0:8b:34:82:61:d6:fe:64:f9:2e:8c:d4:
         22:ca:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:06 2026 by rpki-client