Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/27A32D7A16BA11EDB0E9E464C4F9AE02.roa
File:                     27A32D7A16BA11EDB0E9E464C4F9AE02.roa (raw, json)
Hash identifier:          uTY9Mx19zYpw6CO6HqYxOp2zXgWkOsB7x9EURMKFBhA=
Subject key identifier:   87:C0:5E:1C:6D:FB:D0:A2:A9:B0:4E:C7:A6:1A:92:77:E0:9C:81:A2
Certificate issuer:       /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
Certificate serial:       02F4
Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/27A32D7A16BA11EDB0E9E464C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:06:44 +0000
ROA not before:           Tue 09 Dec 2025 00:07:49 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136232
IP address blocks:        103.79.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl
                          rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810B4, serialNumber=153B63A93773B2589882186655DEF30446DD860D
        Validity
            Not Before: Dec  9 00:07:49 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a42bd4-02a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:dc:17:21:8f:c6:b8:e8:ee:65:92:bf:93:
                    45:14:65:f1:7e:2a:fc:3d:8d:e8:66:51:13:13:f2:
                    14:f5:c2:3c:91:4e:0c:a7:8e:00:da:7e:7d:79:82:
                    59:a3:8e:f3:40:e3:79:dc:64:40:79:30:94:d2:25:
                    ba:3c:d7:d5:08:17:85:2a:bf:43:15:09:09:35:be:
                    f5:17:ab:a0:9c:13:a1:74:bb:f6:93:37:90:ca:18:
                    cf:2f:5f:9b:8e:1d:f8:92:04:98:c1:08:85:08:b9:
                    ca:14:89:f5:0e:ba:0a:fc:08:4f:58:bb:94:e8:1c:
                    be:d7:2f:bb:3a:bb:ad:81:ba:3a:57:32:68:29:99:
                    af:30:d0:f2:d3:a2:56:2f:10:2b:b3:34:30:b8:55:
                    d4:45:24:76:03:1c:b3:f4:6e:d9:76:e5:c2:26:4f:
                    5e:b2:c0:78:b2:10:48:1d:b7:25:c0:b6:ab:16:e1:
                    c9:40:2f:11:eb:01:1b:b5:75:ed:e5:7c:92:d4:4b:
                    58:2d:92:40:e8:7c:a8:64:49:e5:71:a0:28:59:69:
                    0c:c1:26:30:01:ea:a2:06:a6:2c:4e:0c:6c:8c:fe:
                    8a:11:28:b7:bd:10:24:06:35:85:6d:d0:72:59:06:
                    c7:fe:31:70:e6:b8:b8:5e:8e:a9:cf:4e:fa:a1:19:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C0:5E:1C:6D:FB:D0:A2:A9:B0:4E:C7:A6:1A:92:77:E0:9C:81:A2
            X509v3 Authority Key Identifier:
                keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/27A32D7A16BA11EDB0E9E464C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:d8:a4:6e:53:80:33:bd:16:62:c2:d8:64:d9:c9:ab:7a:
         cf:b1:b6:46:5a:fd:8c:c0:3f:eb:c4:58:b4:77:63:15:9b:4a:
         99:3f:41:8c:e3:00:32:d5:ce:2f:de:c5:7f:3e:14:1e:33:97:
         c2:82:e1:d1:7b:64:a7:97:c3:e4:9e:87:c2:f9:7e:ec:72:dd:
         67:7e:4c:c5:33:7e:95:05:29:e9:55:ca:f6:7d:58:c1:6a:ef:
         a6:3d:17:e1:86:3d:8d:be:dc:8d:20:d9:00:cb:38:8e:67:93:
         4d:5c:89:c4:20:d7:53:95:25:1e:51:56:42:56:bb:78:55:56:
         28:08:92:18:62:da:02:a7:24:a7:e1:a3:ee:79:d5:42:8d:6f:
         05:15:22:2f:ac:f1:30:71:32:93:13:41:fe:93:ec:4b:73:e4:
         49:c4:4b:fd:af:8b:fe:6a:75:1d:39:e7:0a:ae:50:ef:5e:1e:
         d2:51:00:ba:2b:c4:60:23:00:b3:97:07:d4:51:f0:63:f1:7b:
         9f:7d:f5:66:be:fb:e2:00:ef:c1:19:bf:e9:54:5a:c1:72:e0:
         bd:ac:74:ca:cb:ae:11:38:ab:b1:cc:ae:43:88:de:cc:3e:50:
         bb:99:29:de:c5:f1:cb:74:2b:5a:89:8e:f1:77:e7:ae:44:1a:
         9f:67:89:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEwQjQxMTAvBgNVBAUTKDE1M0I2M0E5Mzc3M0IyNTg5ODgyMTg2NjU1REVGMzA0
NDZERDg2MEQwHhcNMjUxMjA5MDAwNzQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmJkNC0wMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0y7cFyGPxrjo7mWSv5NFFGXxfir8PY3oZlETE/IU9cI8kU4Mp44A2n59eYJZ
o47zQON53GRAeTCU0iW6PNfVCBeFKr9DFQkJNb71F6ugnBOhdLv2kzeQyhjPL1+b
jh34kgSYwQiFCLnKFIn1DroK/AhPWLuU6By+1y+7Orutgbo6VzJoKZmvMNDy06JW
LxArszQwuFXURSR2Axyz9G7ZduXCJk9essB4shBIHbclwLarFuHJQC8R6wEbtXXt
5XyS1EtYLZJA6HyoZEnlcaAoWWkMwSYwAeqiBqYsTgxsjP6KESi3vRAkBjWFbdBy
WQbH/jFw5ri4Xo6pz076oRlOBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIfAXhxt
+9CiqbBOx6YaknfgnIGiMB8GA1UdIwQYMBaAFBU7Y6k3c7JYmIIYZlXe8wRG3YYN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBCNC83N0Q1MkFBMDE2
QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNsaVlnaGhtVmQ3ekJFYmRo
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZUdGpxVGR6c2xpWWdoaG1WZDd6QkViZGhnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODEwQjQvNzdENTJBQTAxNkI1MTFFRDk4MDNBMjcyQzRGOUFFMDIvMjdBMzJEN0Ex
NkJBMTFFREIwRTlFNDY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0+1MA0GCSqGSIb3DQEBCwUAA4IBAQCLu9ikblOAM70WYsLYZNnJ
q3rPsbZGWv2MwD/rxFi0d2MVm0qZP0GM4wAy1c4v3sV/PhQeM5fCguHRe2Snl8Pk
nofC+X7sct1nfkzFM36VBSnpVcr2fVjBau+mPRfhhj2NvtyNINkAyziOZ5NNXInE
INdTlSUeUVZCVrt4VVYoCJIYYtoCpySn4aPuedVCjW8FFSIvrPEwcTKTE0H+k+xL
c+RJxEv9r4v+anUdOecKrlDvXh7SUQC6K8RgIwCzlwfUUfBj8XufffVmvvviAO/B
Gb/pVFrBcuC9rHTKy64ROKuxzK5DiN7MPlC7mSnexfHLdCtaiY7xd+euRBqfZ4kU
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:06 2026 by rpki-client