Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/27CF6BE84EED11EF8D4BE30CC4F9AE02.roa
File:                     27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (raw, json)
Hash identifier:          7peUVHRk+PQhJWC3EgfTO1c+QPolVUXxC238dGIMM0g=
Subject key identifier:   04:F0:AE:00:87:0E:31:75:E5:DB:86:B1:5C:CC:E0:38:14:84:35:AC
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       2322
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/27CF6BE84EED11EF8D4BE30CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:48:59 +0000
ROA not before:           Mon 02 Feb 2026 16:13:27 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        103.205.76.0/24 maxlen: 24
                          103.205.77.0/24 maxlen: 24
                          103.205.78.0/24 maxlen: 24
                          103.205.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8994 (0x2322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Feb  2 16:13:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47c0b-2e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:fb:8b:ef:a2:5a:44:6b:49:80:33:64:8e:
                    f7:09:e1:ee:ad:5c:ef:48:9f:9a:f8:e0:d0:19:be:
                    44:ac:89:d1:4b:d6:05:5e:bb:d7:1b:a6:34:90:8e:
                    65:90:e6:7d:b1:0b:69:8b:5e:8f:08:42:af:4a:d1:
                    21:6e:c2:6f:82:3f:ae:28:6c:9a:ac:40:14:ea:65:
                    60:8d:66:61:fe:bc:bf:b4:60:99:58:ee:d9:d2:e7:
                    22:d1:b0:0e:31:b2:72:08:f9:9c:95:39:7d:65:2a:
                    c1:3c:1f:42:58:86:58:1e:7c:28:77:99:4d:5e:51:
                    1e:00:ae:ac:fa:46:5e:8a:b3:37:1d:e6:f1:2b:2a:
                    73:23:14:de:1b:b0:a1:80:7b:bb:1c:32:13:a3:a0:
                    20:09:7d:6a:b8:a4:50:14:68:c1:37:4b:56:87:a4:
                    3b:15:ed:be:07:46:7b:48:af:11:53:b3:ae:1f:77:
                    33:b5:df:dd:9e:82:7e:f9:77:58:97:25:e8:8f:5a:
                    e1:ff:22:4a:25:85:7d:25:16:5f:a7:63:86:cf:38:
                    59:c5:5d:2b:53:c4:ee:23:fb:06:50:6f:12:82:4a:
                    77:25:73:46:a3:a4:f8:8a:fc:42:7f:46:57:5f:b9:
                    2a:9b:61:9f:30:6f:c4:89:4b:2f:11:3c:47:30:fd:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:AE:00:87:0E:31:75:E5:DB:86:B1:5C:CC:E0:38:14:84:35:AC
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/27CF6BE84EED11EF8D4BE30CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:70:b5:4d:20:3d:8e:23:30:81:64:98:89:3d:c8:6d:bd:10:
         b2:90:bd:38:56:90:63:80:6c:f8:ad:cd:e8:90:1a:73:a4:f8:
         f0:3a:cf:01:d1:45:f2:b6:db:d9:59:14:7e:8a:04:ab:22:91:
         28:be:d9:12:13:f2:14:f4:b4:a8:87:1d:54:91:91:48:81:2e:
         c6:ae:59:93:e8:22:43:3a:27:5e:6b:7b:4d:e5:fa:6b:2c:45:
         b9:31:3a:b8:6d:40:bc:94:f1:42:d1:4f:90:8b:08:b2:b1:54:
         f5:b1:bb:28:83:ad:23:d8:3e:db:4c:74:17:a2:81:ed:44:57:
         09:db:d5:0e:d4:36:ba:5b:a2:4f:18:ae:9c:86:6c:f0:4f:a6:
         b5:09:be:26:e9:b2:5a:33:44:b6:e9:fd:4c:c7:3b:a4:68:55:
         91:b5:2e:c9:e6:69:6b:f1:05:a9:9f:e2:41:ae:5a:74:e7:9e:
         82:e3:ff:40:58:53:f6:e5:88:07:36:fe:4b:d5:c9:e8:ac:8b:
         91:fc:d0:02:c0:84:c2:d9:1a:79:db:1b:2a:92:9e:e3:03:a0:
         94:7d:8d:4b:34:bf:57:f4:84:48:ad:fa:84:9e:cb:8e:7b:54:
         47:c2:9e:3a:c6:5f:8f:dc:f3:73:b7:37:39:35:35:5e:b6:bc:
         e9:93:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:28 2026 by rpki-client