Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/21730760B3A411F0B1142735C4F9AE02.roa
File:                     21730760B3A411F0B1142735C4F9AE02.roa (raw, json)
Hash identifier:          im8eNEl51/Iajj6nEj+0v7DWapzv6w3ygAcW7Tm2EYY=
Subject key identifier:   84:21:3A:52:D2:90:AB:81:38:1E:74:B8:11:7B:B1:C3:0C:A8:C8:DF
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1AD5
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/21730760B3A411F0B1142735C4F9AE02.roa
Signing time:             Fri 08 May 2026 17:19:59 +0000
ROA not before:           Fri 08 May 2026 17:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        202.27.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6869 (0x1ad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: May  8 17:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe1b3e-51ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:ba:e0:8a:7f:2e:b1:c0:3b:84:67:92:8e:
                    d7:a7:2e:fb:b6:99:46:ee:22:6e:e1:a6:a1:5b:b6:
                    ca:1f:68:07:10:84:0c:83:8b:52:79:63:8a:3a:1e:
                    f9:b3:57:f0:1a:a4:7a:8d:4b:9c:04:3e:fb:a4:ff:
                    bf:2e:17:6f:85:64:cb:43:4c:4f:17:2c:43:a5:87:
                    7b:ae:20:b6:c5:ae:74:9e:7f:6b:76:45:7b:d6:99:
                    17:d3:dd:c2:fb:d7:35:cd:1e:39:b0:de:c5:db:ee:
                    23:1b:24:24:d6:38:6b:94:f9:2b:73:9a:c0:2e:dc:
                    af:ee:68:8e:07:0d:2a:f7:57:ac:b5:95:d4:29:41:
                    f4:f6:f1:b4:d4:74:0d:1c:68:9b:85:02:ff:89:2d:
                    57:8c:76:f9:b7:a1:29:62:e6:f0:42:5b:cb:75:bf:
                    b0:d6:bb:8b:c4:c9:22:83:0a:6e:8e:07:48:54:2f:
                    d0:7a:c0:2d:b2:61:eb:57:f9:ec:47:a4:a1:c1:41:
                    00:fb:bc:98:d2:15:1c:c2:5c:a9:e5:19:f4:1d:04:
                    f9:1f:95:4a:d7:10:a3:6b:61:62:a0:93:26:85:d4:
                    65:61:11:74:e5:58:2b:16:d5:af:ab:76:eb:51:90:
                    f2:c8:a5:4c:91:fc:0c:ca:4d:66:57:cd:02:6d:ec:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:3A:52:D2:90:AB:81:38:1E:74:B8:11:7B:B1:C3:0C:A8:C8:DF
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/21730760B3A411F0B1142735C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:2c:0d:59:c6:83:33:22:06:2a:59:50:35:98:bc:e4:31:
         27:80:84:6c:7d:0a:22:fa:cd:7e:03:76:80:30:1a:68:af:73:
         87:59:87:a7:b2:a6:b6:55:4c:28:f6:b4:be:9d:a1:72:94:28:
         76:56:4b:78:6d:ba:5d:e5:46:36:09:24:f3:c1:97:52:1b:1c:
         bd:a5:ce:23:58:be:13:fe:5e:0b:bf:1d:e0:6b:c1:8f:1c:4a:
         45:23:69:28:59:71:2a:07:eb:ad:77:46:4f:db:da:d9:73:86:
         e0:60:b7:92:4e:dc:24:4b:3a:d5:93:21:eb:6a:d1:0d:a9:b4:
         f6:3a:20:00:70:2f:ad:30:8a:b1:e7:f3:36:bf:53:32:b0:38:
         f6:74:a6:a8:59:e7:51:08:e7:06:5a:8c:cb:58:c2:25:79:7c:
         0a:a3:e2:f4:f1:9b:be:be:1d:4e:d8:4d:f1:67:ff:db:82:38:
         11:cc:53:71:75:17:e4:26:20:bf:87:1d:94:4f:06:18:41:f2:
         3f:f0:8b:c9:73:27:83:e3:6a:dc:33:db:ae:8d:10:c9:89:f9:
         1e:dd:95:4b:96:a5:fe:34:b8:66:ef:f1:11:67:e4:1b:61:1c:
         c2:75:c3:75:f6:0b:28:e5:bd:02:35:0e:b4:5b:89:49:73:9a:
         41:37:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:32 2026 by rpki-client