Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E27B5862777E11EFB3F75352C4F9AE02.roa
File:                     E27B5862777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier:          mQtFZnxqBOSE+G0rPNutjCbpOwWmI7n4xbDitTqkJzk=
Subject key identifier:   36:19:C4:65:18:61:EA:1D:04:AF:66:40:80:CD:2B:98:83:1D:6E:17
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       0190
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E27B5862777E11EFB3F75352C4F9AE02.roa
Signing time:             Tue 07 Jul 2026 06:32:16 +0000
ROA not before:           Tue 07 Jul 2026 06:32:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136988
IP address blocks:        103.64.16.0/24 maxlen: 24
                          2405:a280:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Jul  7 06:32:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4c9d70-041f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:74:8f:97:99:e9:ab:bf:64:90:61:0b:4d:
                    04:45:a1:a8:87:81:0d:b4:50:63:61:40:1f:83:d5:
                    4a:4c:92:83:f9:04:6c:9c:6f:44:65:c0:ef:a1:a5:
                    42:69:50:3c:68:96:15:e3:82:19:5f:f3:c4:20:f3:
                    2b:ea:5c:c3:9c:33:7a:74:31:2e:5e:67:7b:fe:3a:
                    2b:fc:56:d9:00:f0:e5:46:27:97:14:20:55:b5:88:
                    fa:e0:98:ff:14:51:15:24:01:22:a1:a5:ad:dc:f7:
                    35:2c:2d:34:5b:3f:0a:6a:a0:7b:0b:23:d0:a7:44:
                    50:cd:d9:02:e6:d1:c8:cd:68:7c:38:ce:3c:d0:ea:
                    2c:86:bb:0b:c9:47:3e:c0:9a:41:80:52:35:a2:63:
                    a0:ad:e0:6a:84:46:80:ab:e0:27:66:53:ac:2f:98:
                    89:e4:07:7d:76:2f:db:a2:c6:a7:7d:9d:b4:5a:eb:
                    e9:4f:77:86:56:f1:1f:bc:61:a9:57:bc:c3:4e:e1:
                    1b:05:06:d7:34:36:eb:7f:e2:18:01:2b:80:68:42:
                    99:4a:f2:e6:d0:3a:6b:97:69:18:cc:40:87:be:18:
                    86:74:2d:1c:a3:ea:f6:14:a1:56:ed:7b:e5:a1:a1:
                    76:b9:6b:1d:57:9d:5d:78:40:80:4f:51:8b:af:b3:
                    20:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:19:C4:65:18:61:EA:1D:04:AF:66:40:80:CD:2B:98:83:1D:6E:17
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E27B5862777E11EFB3F75352C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.16.0/24
                IPv6:
                  2405:a280:32::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:e6:bb:0d:c8:17:71:3b:6f:81:3f:b8:4a:b7:a1:3d:80:22:
         25:20:da:4b:a0:f7:b5:9e:4d:35:59:5e:53:80:25:82:02:44:
         a5:d8:61:33:60:33:7c:d6:04:92:c9:3f:47:7c:2d:7c:88:ed:
         d3:cf:1b:f4:55:1c:b5:25:02:ee:32:71:f0:a3:bb:50:7f:fd:
         7f:a5:e9:53:40:ec:50:d2:e7:76:b4:19:a0:47:e0:ec:c3:92:
         6e:96:8a:99:e6:72:1d:d2:da:ba:c4:99:c4:be:54:94:cc:b5:
         ea:19:47:59:95:52:b3:39:8a:fa:58:0f:59:53:3d:57:e8:f9:
         9a:6a:dc:62:a0:b1:32:0d:d7:d6:43:c8:8b:b4:7a:3e:12:90:
         11:26:a5:18:98:1f:52:28:03:3c:46:07:96:18:d4:b4:e6:52:
         7a:d7:07:16:3d:e9:94:80:cf:4c:bd:c6:6a:72:e0:e4:24:4b:
         a2:2e:b0:17:84:cf:62:2a:62:07:1b:ed:65:90:99:b7:ce:5e:
         9d:f1:46:04:df:b7:eb:87:6f:30:33:39:ef:c8:5c:e8:0a:64:
         93:7b:62:43:56:10:32:90:3b:e2:19:53:d4:31:a7:09:cb:6a:
         2a:b3:48:e7:9b:0f:b7:aa:e1:29:63:0b:96:d0:41:b2:1f:58:
         de:64:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:19:53 2026 by rpki-client