Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa
File:                     19043EA2870011F194514C90ABEE528E.roa (raw, json)
Hash identifier:          VjShsmL5ZFYYnJBaa2qosrG0SLnE722xo8oJ6HX7Gms=
Subject key identifier:   74:B4:BC:E4:F4:F6:79:08:87:67:35:EB:31:91:49:0C:BA:AA:F8:B3
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1431
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa
Signing time:             Fri 24 Jul 2026 01:36:31 +0000
ROA not before:           Fri 24 Jul 2026 01:36:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55430
IP address blocks:        27.125.128.0/18 maxlen: 24
                          39.109.128.0/17 maxlen: 24
                          58.96.192.0/18 maxlen: 24
                          101.127.0.0/17 maxlen: 24
                          101.127.128.0/18 maxlen: 24
                          101.127.240.0/21 maxlen: 24
                          103.17.146.0/24 maxlen: 24
                          182.19.128.0/17 maxlen: 24
                          182.55.0.0/16 maxlen: 24
                          183.90.0.0/17 maxlen: 24
                          2406:3003::/32 maxlen: 40
                          2406:3003::/40 maxlen: 48
                          2406:3003:1000::/40 maxlen: 48
                          2406:3003:2000::/40 maxlen: 48
                          2406:3003:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5169 (0x1431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Jul 24 01:36:31 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a62c19f-e8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:0e:73:fe:fb:22:ef:0f:dc:7b:b4:dd:a4:
                    27:87:19:13:10:5b:40:b2:33:8a:4c:39:59:89:f7:
                    88:7b:ce:c9:9c:f8:77:57:48:9e:24:ed:22:84:ca:
                    40:a7:f6:8b:c8:d2:0f:2f:73:1a:f7:3a:1c:14:91:
                    6a:66:45:bf:4d:69:5b:28:64:5c:98:c9:c8:83:5a:
                    75:85:4f:8a:43:2f:8b:54:ad:90:f0:fb:23:8b:be:
                    f2:a0:76:75:f2:2f:74:82:8e:35:67:8c:30:b4:5d:
                    a9:bb:a3:07:f3:91:fc:25:8b:d5:a2:ae:78:ee:8a:
                    5a:cf:af:2d:e0:76:14:4b:5c:13:66:ef:8d:58:f4:
                    e9:00:d1:74:ff:67:40:9d:23:c1:27:17:06:2d:bd:
                    b7:2f:a4:f4:02:04:16:e6:ed:56:b9:7b:f7:5b:fd:
                    bd:24:cb:53:86:46:12:c1:04:94:ef:a8:6c:07:3b:
                    85:97:ee:3b:f3:b7:d2:70:c5:12:29:a8:f2:4b:ad:
                    39:4a:ce:9b:d1:f2:b7:91:d0:cd:e5:4c:7e:b9:89:
                    0a:95:50:36:7d:2b:87:45:c6:b8:e2:96:89:fc:5f:
                    24:67:17:05:84:36:48:63:8e:13:d8:b6:25:1a:cc:
                    20:de:2d:51:f4:eb:41:4d:3b:e1:9d:9f:4d:ec:a6:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:BC:E4:F4:F6:79:08:87:67:35:EB:31:91:49:0C:BA:AA:F8:B3
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/19043EA2870011F194514C90ABEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.125.128.0/18
                  39.109.128.0/17
                  58.96.192.0/18
                  101.127.0.0-101.127.191.255
                  101.127.240.0/21
                  103.17.146.0/24
                  182.19.128.0/17
                  182.55.0.0/16
                  183.90.0.0/17
                IPv6:
                  2406:3003::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:f5:3c:f4:4e:a2:cc:15:28:f1:46:b3:7c:95:89:a2:da:
         81:ac:85:87:1b:89:fd:44:3d:f5:8e:5e:7d:38:a4:c3:4e:c8:
         cf:8d:ba:e9:e4:50:f7:0b:dc:ee:92:19:51:e3:e1:6f:54:e0:
         1a:65:6d:c3:7c:98:29:b2:ce:53:c7:53:8c:51:9b:76:9a:0a:
         02:e7:a4:ef:c8:53:5e:e0:db:a7:a8:5b:88:19:b2:5b:00:44:
         27:a9:d7:a1:3a:8a:71:50:69:1e:03:b5:92:79:89:48:ad:95:
         73:f7:1d:fa:86:e5:2f:88:5c:09:18:5e:3a:aa:d5:b5:59:0f:
         72:ba:ed:45:12:0b:1a:c7:ea:0b:4e:11:95:90:2d:7e:b4:81:
         e5:1b:82:15:44:f3:cd:14:5b:3b:15:1f:07:f2:fb:12:42:d8:
         40:ba:e1:55:d6:1b:e4:6c:cf:b2:f5:fd:7d:f6:a1:b4:e2:c3:
         c1:d8:f3:70:85:2a:6b:c5:d8:55:6f:e9:02:08:2e:bd:ee:d1:
         28:c1:ec:06:ec:53:49:c7:93:10:e5:3c:d5:39:7a:ae:54:71:
         90:e4:03:95:45:cd:b9:49:b8:7c:8c:b8:bd:c2:96:da:54:27:
         0a:7a:27:c8:df:19:19:65:37:f3:b8:c0:29:d3:66:c2:54:52:
         fb:69:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:49 2026 by rpki-client