Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/76FA27AE4E0E11F190083CE1CC833773.roa
File:                     76FA27AE4E0E11F190083CE1CC833773.roa (raw, json)
Hash identifier:          va/1lyhr1y7ZVbyMMDIeDeUDTkfRGTrO+6LCCS/pWVI=
Subject key identifier:   B1:78:5D:2F:85:F1:86:9E:D3:5F:01:A9:AD:FF:5C:B8:60:74:90:2E
Certificate issuer:       /CN=A9127687/serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Certificate serial:       04
Authority key identifier: CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/76FA27AE4E0E11F190083CE1CC833773.roa
Signing time:             Tue 12 May 2026 14:37:57 +0000
ROA not before:           Tue 12 May 2026 14:37:57 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136987
IP address blocks:        121.200.57.0/24 maxlen: 24
                          121.200.58.0/24 maxlen: 24
                          121.200.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
                          rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127687, serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
        Validity
            Not Before: May 12 14:37:57 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a033b45-a362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:fe:cc:e6:6e:4a:1d:88:01:52:b6:cf:2e:
                    cd:6c:31:a1:f0:c9:cc:fd:b8:42:29:c7:5e:b0:e4:
                    4c:cd:9b:4a:eb:00:ab:0f:09:c0:0b:66:4d:a6:7c:
                    27:da:84:18:7f:20:53:d0:5d:1e:6c:92:bc:35:a0:
                    c8:a8:6f:be:01:da:67:91:65:bf:45:11:b8:31:7a:
                    1c:cc:1a:0b:f0:43:06:90:db:9c:b7:0d:e2:00:c9:
                    74:79:36:dc:59:08:ed:74:77:e1:5a:d3:45:70:18:
                    ce:00:e3:2c:81:8f:7a:fb:5a:5d:fb:25:a7:52:28:
                    11:86:c9:7a:b1:c6:b6:e0:bd:db:5e:f7:06:16:02:
                    24:25:72:88:dc:0c:6b:7a:16:8d:90:ed:4b:a6:41:
                    ee:4f:67:64:15:64:0c:81:cd:ba:b6:45:eb:9a:1c:
                    12:b3:51:4b:1e:dd:10:0c:ee:4a:4b:0b:6f:76:a6:
                    1c:25:d3:81:9c:5c:5f:49:e5:b9:c6:a5:d6:cb:29:
                    b3:8c:b7:59:ca:46:15:52:6d:48:0e:45:bb:9b:88:
                    1c:00:f1:ab:b5:64:40:7c:5d:01:3e:27:1f:ba:07:
                    1e:fa:f3:47:76:35:1c:c1:77:81:b8:33:2d:c0:d7:
                    ad:de:7c:c6:31:70:61:91:ec:bd:fd:96:53:bd:87:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:5D:2F:85:F1:86:9E:D3:5F:01:A9:AD:FF:5C:B8:60:74:90:2E
            X509v3 Authority Key Identifier:
                keyid:CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/76FA27AE4E0E11F190083CE1CC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.200.57.0-121.200.59.255

    Signature Algorithm: sha256WithRSAEncryption
         93:dd:c4:56:e4:91:6b:8e:74:ef:83:66:5d:38:1f:6c:99:a4:
         d0:fd:ef:57:5b:97:08:54:6a:6c:c6:bb:83:0b:45:61:c8:e8:
         44:ab:69:db:66:7a:ea:47:38:e3:3d:cf:31:57:34:52:3d:82:
         37:88:ef:81:58:ef:8f:9f:ff:ab:47:c8:15:60:a4:3b:2d:8d:
         a6:ab:47:80:b4:c4:38:d8:a0:c0:66:ae:5f:fa:0f:c3:9c:00:
         71:e4:2e:f4:71:cd:47:44:cd:67:27:8b:df:d7:74:27:e3:89:
         80:01:ec:1a:05:94:43:c9:06:95:0b:ad:9d:64:d7:14:e5:6f:
         48:62:bd:8a:a2:cb:d7:0b:81:7f:49:08:86:b6:a9:87:b8:ad:
         d3:57:d8:a8:a3:d5:8b:da:e8:98:56:35:7a:98:44:36:29:5a:
         39:fe:3f:cc:f5:de:75:58:98:b1:ab:29:3d:db:12:3d:6c:bc:
         c7:92:15:5d:cf:e7:71:c1:b2:89:89:f2:ef:d5:a4:db:5a:86:
         02:0d:62:42:3c:61:39:ad:66:ab:bd:68:72:1c:9b:6b:f7:ee:
         c0:b7:4c:5a:b3:7f:ea:64:a7:e3:71:5c:c4:b4:ef:55:04:ec:
         b1:35:07:69:a0:83:74:c9:ee:56:75:ef:2c:92:12:dc:0e:f5:
         a8:5d:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:24 2026 by rpki-client