Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa
File:                     BBF0DD5216CD11EDBB046C79C4F9AE02.roa (raw, json)
Hash identifier:          pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=
Subject key identifier:   66:8A:4E:2B:0B:73:2B:02:84:34:F2:47:3F:B3:4D:43:39:89:13:C6
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       0328
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:56:54 +0000
ROA not before:           Thu 25 Sep 2025 02:20:13 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4648
IP address blocks:        202.27.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Sep 25 02:20:13 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a51896-68a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:2e:bc:f9:ac:76:af:b7:eb:fa:24:09:28:
                    88:1e:5e:c9:23:08:42:78:7f:da:a1:73:8e:95:69:
                    ac:a0:d9:7d:43:ce:cd:32:bc:03:e1:ba:0c:f3:5f:
                    32:66:f9:2f:61:6d:89:0d:83:ca:60:e6:12:e4:c6:
                    05:3c:b4:d8:21:b1:c9:65:98:2c:2b:0a:a9:f2:f0:
                    16:a6:8a:5b:80:b4:88:a8:a2:58:e7:01:e2:93:f4:
                    e6:b3:45:b2:f6:84:4b:fb:db:18:bd:59:3f:97:13:
                    12:5a:ba:a4:d7:a7:95:15:1e:64:87:06:60:09:8a:
                    c4:85:15:e3:17:47:91:74:7e:9f:62:78:b0:35:6d:
                    44:b8:17:3e:6c:0f:e8:31:f6:6e:3b:3b:84:4f:6e:
                    29:95:60:02:12:e5:47:4f:db:0b:2b:16:7f:77:1e:
                    5e:cc:22:e9:53:2a:94:c0:cb:be:5d:49:d6:65:11:
                    f8:89:e4:57:87:88:30:22:ff:a8:f8:19:68:2d:20:
                    3a:88:fa:6e:54:fe:43:7a:41:b7:d6:49:7d:6d:02:
                    2d:32:d6:8c:34:fc:8f:6f:a2:fe:a7:41:0b:bf:16:
                    db:65:3a:ce:bc:b9:71:6d:ff:ce:9f:c9:1a:51:c8:
                    22:21:e5:56:3a:83:69:ba:57:a5:22:62:21:09:b9:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8A:4E:2B:0B:73:2B:02:84:34:F2:47:3F:B3:4D:43:39:89:13:C6
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:a0:04:d1:d9:ba:23:d3:31:01:88:c8:2d:d7:fd:4c:d7:
         cd:06:46:d2:8d:fc:d5:7c:8b:b4:27:62:f0:3e:74:53:ad:9a:
         c3:fb:a1:d4:c4:3c:0d:d1:c7:11:84:31:c3:f7:14:e3:b8:14:
         91:ab:36:03:14:56:36:93:62:2d:05:4f:cd:2a:ea:c1:c7:c1:
         54:2b:95:cc:70:b3:a4:59:20:62:bb:de:67:47:d5:8b:cf:a6:
         52:70:6a:68:15:d9:16:8a:07:d6:68:4d:03:3e:f8:b7:74:eb:
         2c:af:39:a7:4e:6b:94:fc:79:11:cb:ea:31:b5:24:ea:46:ee:
         99:6c:26:c5:f3:e9:00:64:3a:f1:c3:b8:fa:6a:7e:d7:12:9e:
         ca:84:16:c5:bc:6f:e4:cc:79:ca:39:cd:f5:f1:f1:b0:c6:c1:
         50:04:7a:62:1c:fc:c9:e7:03:30:a7:fd:11:99:08:60:c3:f7:
         55:d4:f9:65:35:d3:a1:d0:1e:1d:d2:a4:cc:90:03:53:78:4c:
         a4:13:56:fa:b1:e9:11:89:fc:e8:77:51:5b:c6:bc:cd:46:6e:
         f8:b6:cf:8a:ff:42:9b:a0:ee:be:f7:69:42:6e:2e:50:e3:69:
         3b:59:80:ac:c3:9f:b6:0c:7a:5c:10:99:7a:f4:f2:f5:35:46:
         bb:e0:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:48 2026 by rpki-client