Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/843712B65E4711EDA05F092CC4F9AE02.roa
File:                     843712B65E4711EDA05F092CC4F9AE02.roa (raw, json)
Hash identifier:          Pyj+QJw64+qPNXcBEJdy/nVnkRC2hvv2n61yRAdON2g=
Subject key identifier:   42:60:72:E9:91:28:2A:A4:A3:0F:BF:6F:86:1D:D3:10:25:9B:8E:80
Certificate issuer:       /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Certificate serial:       0279
Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/843712B65E4711EDA05F092CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:19:08 +0000
ROA not before:           Wed 05 Nov 2025 02:16:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4648
IP address blocks:        27.123.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl
                          rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
        Validity
            Not Before: Nov  5 02:16:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a43ccc-9be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:2f:79:df:00:da:49:9c:33:b9:2b:96:1c:
                    ff:0b:a1:61:1e:63:b9:b7:60:b6:6c:c3:17:bb:ec:
                    22:5f:ad:57:5c:52:f1:72:ec:0d:8d:06:52:50:b3:
                    60:19:cd:af:87:b6:57:13:22:8f:56:84:12:8e:79:
                    e1:f9:ff:94:60:70:11:58:69:ad:14:62:74:d6:2a:
                    0b:18:c7:4b:84:4a:00:57:ec:03:69:26:97:b2:b1:
                    53:ed:ef:69:53:de:e7:15:62:e7:55:2e:60:6a:9f:
                    9d:ec:4f:64:b4:60:23:b9:e8:67:b9:ed:b2:b8:34:
                    3c:a1:49:c7:73:f4:3c:eb:12:3e:0a:72:3d:1d:6b:
                    cb:af:5f:ee:2a:a7:68:99:4c:7d:80:01:65:9d:f7:
                    57:6f:14:8d:71:29:64:ea:72:c4:e7:f8:96:0e:49:
                    c5:37:70:76:e5:b3:89:ed:83:31:e3:25:19:57:66:
                    cb:95:3e:a7:bb:30:4c:8f:54:92:8f:4b:d0:c8:51:
                    bb:b1:0f:e7:b3:03:3b:77:9e:07:ff:86:11:24:29:
                    2f:9c:fd:1f:e1:04:3d:5b:2d:0e:ed:c7:72:8c:ca:
                    57:05:c9:cc:8b:cd:0d:d6:d1:0f:20:0d:55:fa:93:
                    82:92:65:e1:82:bf:bb:03:d5:4e:49:21:f5:1d:ea:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:60:72:E9:91:28:2A:A4:A3:0F:BF:6F:86:1D:D3:10:25:9B:8E:80
            X509v3 Authority Key Identifier:
                keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/843712B65E4711EDA05F092CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:30:83:ed:8d:d6:11:60:32:d2:e0:b4:a3:24:b5:9a:9c:1a:
         b0:f3:4f:b1:b5:7e:3b:97:b3:69:74:e1:f0:e4:e8:cb:34:04:
         e8:df:ad:45:ba:50:fd:dd:46:fe:2b:ec:b4:fe:72:c1:32:cd:
         2d:63:ac:c1:a6:05:53:0a:de:60:0f:f7:68:f9:fe:84:15:76:
         df:01:e8:e1:92:7b:42:be:67:94:d0:6f:32:44:fb:38:72:1f:
         63:4c:2b:58:dc:04:6a:52:08:66:e5:2b:bb:16:96:ef:51:70:
         f5:50:67:e5:55:03:94:18:7a:94:02:37:2d:66:38:14:df:cb:
         42:14:b9:de:5c:e9:d0:7a:7c:50:ef:6f:86:cc:1f:63:5d:1b:
         27:ab:22:ab:8f:89:42:f9:d4:b5:f0:26:c4:9d:60:fa:ec:29:
         40:68:6c:a3:e0:4a:af:15:33:df:84:42:3e:36:f4:8b:16:f3:
         2d:84:a4:58:18:c5:f2:e9:8e:56:16:85:30:f1:1d:1e:ec:c1:
         bd:aa:0f:91:00:66:57:61:fe:bc:82:db:4d:67:14:48:50:2d:
         e2:57:6d:5e:4a:9b:35:2a:0a:60:2b:ce:f7:ac:82:36:9f:12:
         f2:97:ae:58:95:ce:04:8b:83:b3:b1:19:e0:9a:f9:de:c7:a7:
         6b:bc:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:43:19 2026 by rpki-client