Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/DE670A60679D11EEAFBA0A5DC4F9AE02.roa
File:                     DE670A60679D11EEAFBA0A5DC4F9AE02.roa (raw, json)
Hash identifier:          S+2nZ/LwiFl9lCGr/q1pgYuQMM2ksAuYCF9P9dTV9cI=
Subject key identifier:   E3:9F:98:93:B1:28:B1:15:EF:E9:BB:D6:35:61:D0:0E:1B:24:48:23
Certificate issuer:       /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial:       3527
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/DE670A60679D11EEAFBA0A5DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:22:41 +0000
ROA not before:           Sat 28 Feb 2026 16:11:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     46606
IP address blocks:        45.113.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
                          rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13607 (0x3527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
        Validity
            Not Before: Feb 28 16:11:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a467d1-603a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:5f:f4:9d:6c:04:d9:c8:07:1a:e6:e3:ee:
                    75:33:0c:76:bd:82:e3:54:35:09:3a:a4:0c:a9:b9:
                    41:50:c5:8e:e2:6e:f6:79:14:fd:75:a8:6a:1f:f2:
                    22:48:b0:53:81:19:6c:5a:eb:80:77:97:05:2b:c1:
                    95:92:04:8f:a2:a7:46:e7:37:a5:fd:ff:9c:c8:cf:
                    1f:74:e0:1d:62:82:8b:2f:31:25:49:4f:6e:ce:09:
                    78:03:34:82:ca:c4:aa:a6:f4:c3:08:aa:89:1e:67:
                    c4:64:a2:59:1d:fa:fc:06:83:11:28:4d:25:41:66:
                    c9:4c:21:0a:15:d3:bf:13:90:e1:e2:44:e3:e7:bc:
                    3e:dd:6b:51:22:15:4a:4b:00:c5:27:02:bc:ec:c1:
                    78:b5:16:58:cf:0d:5d:ba:3a:ac:70:cb:d0:ff:8e:
                    e5:f5:82:89:bc:e5:09:af:c4:bb:15:fd:f5:e4:7d:
                    71:7b:d9:9b:18:59:88:00:33:17:72:5d:8a:ee:fb:
                    1d:aa:e2:57:e3:76:47:88:4b:64:9f:63:50:cb:68:
                    d4:1b:a8:e0:fc:95:26:2f:48:f4:dc:4b:04:d4:a7:
                    10:ca:21:45:69:1b:5d:4c:27:77:53:2f:99:9d:8d:
                    af:f6:77:64:8e:1c:14:1b:39:73:8d:9c:34:e6:f4:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:98:93:B1:28:B1:15:EF:E9:BB:D6:35:61:D0:0E:1B:24:48:23
            X509v3 Authority Key Identifier:
                keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/DE670A60679D11EEAFBA0A5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:5d:1b:ea:a2:47:52:96:a4:6b:2c:e3:0f:b4:a3:aa:26:
         3a:c7:e9:05:32:d6:99:da:0b:70:07:ea:91:c6:40:eb:ae:a8:
         3c:99:75:07:9a:b4:3d:84:3f:fb:db:91:c1:47:5a:24:a9:88:
         b5:e0:0a:53:e4:e7:98:f3:da:81:85:9f:7f:77:10:3b:92:6d:
         8a:65:41:e6:8c:db:2f:f9:a7:17:f7:8a:ee:bd:66:6b:6f:e9:
         4e:46:22:86:e0:0c:e7:89:d9:a6:07:23:3d:5e:df:f1:51:0d:
         bd:0a:f1:a8:fb:34:cc:9a:43:b5:58:8f:8c:a2:1f:52:e1:1b:
         17:93:d2:e5:70:6a:41:80:f0:08:f4:2d:47:91:93:3c:46:11:
         c6:e0:5b:b2:ce:aa:a1:5b:71:59:11:22:3a:80:a6:c3:68:88:
         83:84:dc:9c:c2:3a:79:13:ff:db:01:9f:70:9d:95:ab:b6:93:
         8e:21:ba:43:17:3d:10:44:30:4f:50:db:cd:e6:9b:5a:5a:3d:
         c2:e0:31:be:dd:11:ec:04:b8:81:5f:ad:25:09:c0:c7:9c:f9:
         17:ca:2f:7b:2e:9b:1e:da:70:06:ae:77:0f:f9:95:7b:63:db:
         40:8c:6c:45:97:5a:d7:76:21:4b:f1:61:13:68:7a:b9:53:8e:
         24:27:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:38 2026 by rpki-client