Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/0374374A032711EFB14B6574C4F9AE02.roa
File:                     0374374A032711EFB14B6574C4F9AE02.roa (raw, json)
Hash identifier:          n5bmtM9963ZDSQOhLROKnxUXRwqtejw3Je7On+IlnEA=
Subject key identifier:   79:9E:98:BA:85:A4:FF:B3:24:05:69:43:23:0F:28:BC:81:0B:B9:31
Certificate issuer:       /CN=A919278E/serialNumber=F96D0CC9BB3958A0A9C6E8173699B824EEE8F2E7
Certificate serial:       015E
Authority key identifier: F9:6D:0C:C9:BB:39:58:A0:A9:C6:E8:17:36:99:B8:24:EE:E8:F2:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/0374374A032711EFB14B6574C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:34:56 +0000
ROA not before:           Fri 11 Apr 2025 05:42:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     64096
IP address blocks:        202.27.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.crl
                          rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919278E, serialNumber=F96D0CC9BB3958A0A9C6E8173699B824EEE8F2E7
        Validity
            Not Before: Apr 11 05:42:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59200-900b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:72:de:77:27:14:75:af:69:52:d3:a3:90:
                    39:01:52:1c:2b:28:4c:ac:a0:13:b3:7c:12:97:5e:
                    fd:4e:e0:c3:87:9c:95:96:f5:64:be:9c:e2:14:9d:
                    d3:13:f3:62:97:f2:65:2d:27:90:c5:16:f3:30:03:
                    45:2d:d7:ed:07:f5:cc:d4:c5:0c:01:4c:22:92:d6:
                    fd:22:62:53:4d:e3:7f:39:ae:bc:e5:b2:5a:fb:b0:
                    58:14:e3:f9:d1:9a:f1:f3:f2:d4:9d:1e:b1:03:2a:
                    8d:ed:f1:68:26:02:0a:36:c3:90:db:54:6f:8e:6d:
                    2a:e4:ae:6f:cd:fb:c1:9f:b4:6b:80:1c:2c:0d:1c:
                    e3:a4:84:e0:92:1b:4a:69:8d:08:de:6b:38:c6:0b:
                    9a:35:76:1c:20:cd:b0:4b:3f:29:6c:99:43:1c:bd:
                    d8:02:9d:d4:51:e3:28:19:df:5b:22:17:84:af:0d:
                    4f:5b:f9:d6:31:57:d3:da:39:44:15:d3:9c:1a:96:
                    11:15:f0:4c:74:4a:d5:bd:03:de:0c:a1:3e:34:28:
                    59:b2:9d:f0:f2:97:cf:bd:5d:21:4d:d9:8d:dd:00:
                    ea:d8:c3:e4:73:0a:50:8d:11:0d:89:78:3b:0e:74:
                    26:c9:0f:3e:1d:b8:9a:e7:78:c9:9e:7c:df:4b:1e:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:98:BA:85:A4:FF:B3:24:05:69:43:23:0F:28:BC:81:0B:B9:31
            X509v3 Authority Key Identifier:
                keyid:F9:6D:0C:C9:BB:39:58:A0:A9:C6:E8:17:36:99:B8:24:EE:E8:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/-W0Mybs5WKCpxugXNpm4JO7o8uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W0Mybs5WKCpxugXNpm4JO7o8uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919278E/C05C39B2032611EF8A57FC73C4F9AE02/0374374A032711EFB14B6574C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:62:6c:76:56:3f:4b:b5:b4:c8:b6:1b:5b:73:7b:12:62:e3:
         92:cb:92:43:14:9b:d3:57:64:5c:ed:03:a3:c7:c5:20:c9:bd:
         7a:ec:a0:c7:c2:6b:79:81:2d:da:9a:bc:a9:98:25:c4:da:86:
         c3:7c:f1:f8:31:2c:0f:ac:c5:c4:b6:e0:47:af:18:26:da:1f:
         9c:39:e1:65:cb:a3:98:90:70:b9:61:6b:47:d3:94:da:12:21:
         c5:c0:fa:92:79:64:16:c4:c9:ac:ec:51:5d:9c:85:a1:e3:b2:
         35:8b:23:90:89:a0:87:91:f1:92:37:fe:5e:ef:c9:82:e5:32:
         37:82:71:f1:64:45:7a:b9:b5:50:df:a1:b9:2e:60:e0:64:54:
         05:b8:9e:2b:33:f2:3a:56:38:8b:e7:b7:bf:58:ea:30:04:92:
         88:b3:67:f0:f4:d2:e7:86:57:7e:59:c9:2f:b3:f6:c9:b4:6a:
         4a:5e:20:d2:21:62:64:47:a6:05:4c:2c:c5:ed:16:65:ea:1a:
         c6:8f:5b:ed:1b:37:cf:ed:18:2c:a6:d2:23:ca:59:9c:7b:d9:
         df:25:53:d7:9d:08:9a:ca:12:9c:f9:a9:83:ff:e9:9e:c2:92:
         68:81:ed:10:d9:69:21:09:68:8d:13:3d:63:bb:10:04:ac:ed:
         a0:d4:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:25:15 2026 by rpki-client