Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/27623F48040711F193DC81CA173D8C67.roa
File:                     27623F48040711F193DC81CA173D8C67.roa (raw, json)
Hash identifier:          4UQuwImlHbzxK5xAml0mOBA2CK1r1LRApTKclWV+/nY=
Subject key identifier:   8B:EE:67:F4:C7:05:73:63:3F:5D:E8:07:4E:FB:64:57:90:FB:D9:B2
Certificate issuer:       /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
Certificate serial:       0200
Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/27623F48040711F193DC81CA173D8C67.roa
Signing time:             Sun 01 Mar 2026 10:15:03 +0000
ROA not before:           Sat 07 Feb 2026 09:27:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151360
IP address blocks:        103.208.88.0/23 maxlen: 23
                          2401:220::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl
                          rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
        Validity
            Not Before: Feb  7 09:27:00 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a411a7-d562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:6d:98:80:06:57:8f:5d:03:b5:75:7e:4e:
                    96:4c:6e:1e:da:ca:5a:2d:64:ee:22:4d:af:a9:e1:
                    51:5f:b7:de:47:96:fd:e2:7e:ab:f0:48:1f:43:85:
                    19:df:54:91:f5:77:92:cc:cd:d7:f5:a3:7d:bc:8a:
                    93:3b:34:ce:48:00:5c:79:17:12:09:fe:42:86:b1:
                    05:bc:7f:a9:5a:92:39:c8:5c:79:80:f1:6a:45:26:
                    b2:8a:b2:98:98:aa:fc:d4:20:41:a8:c3:0a:f8:0a:
                    35:d7:95:23:ed:f7:e9:f4:71:e3:93:5c:bf:08:1b:
                    42:db:f8:9c:2b:de:20:4a:a3:47:99:da:05:69:d3:
                    06:87:7f:fe:cb:b6:cb:8b:c3:7c:a8:fb:73:9e:4b:
                    30:aa:fc:14:d0:be:d7:04:af:5f:b8:fe:ab:68:d9:
                    cd:b8:06:c3:46:dd:ea:50:b1:45:a5:52:58:3b:72:
                    8a:f3:4a:6f:de:2b:f4:0e:ab:ae:57:cf:ae:7f:1c:
                    86:57:9a:e1:ea:c1:cb:42:95:5c:70:59:e3:3c:f1:
                    96:69:4a:d3:e5:c1:73:49:93:b8:12:ca:26:73:72:
                    c9:e5:30:d1:f7:7a:e3:63:50:1e:dd:42:77:88:6d:
                    a7:57:b3:83:b9:22:f0:88:cb:6c:04:51:0f:79:67:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EE:67:F4:C7:05:73:63:3F:5D:E8:07:4E:FB:64:57:90:FB:D9:B2
            X509v3 Authority Key Identifier:
                keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/27623F48040711F193DC81CA173D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.88.0/23
                IPv6:
                  2401:220::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:31:66:f2:62:bb:0f:e5:23:f7:bc:8f:7b:4f:48:b9:3a:d5:
         1c:43:be:dc:9d:73:8c:bf:39:18:18:85:4b:9d:5a:18:8a:14:
         aa:d4:52:cc:95:f0:d6:3c:de:ab:27:81:35:a2:3e:d4:19:68:
         bc:0e:c4:a2:2a:2b:cb:02:c2:97:87:65:d2:88:3c:49:bb:0f:
         ab:e3:f5:c0:66:4c:31:5d:32:71:a5:9c:2c:3c:2d:21:f7:ce:
         71:77:6b:3d:a2:f0:aa:5b:84:25:e8:f1:b8:66:cb:b7:1e:5d:
         3e:08:ab:f2:d0:2e:8e:26:92:8f:b3:20:6c:52:d5:24:bd:46:
         20:e6:e7:e9:39:43:c0:e1:d4:b3:31:3d:c9:72:c3:98:6a:0b:
         e8:1a:60:04:4d:6a:da:af:fd:83:7e:7e:f2:6c:3a:0f:0d:b9:
         da:fc:9e:e7:dc:7e:1e:bd:36:ce:95:b4:45:61:be:3d:70:58:
         d4:41:c1:b2:28:4f:9c:0d:af:3e:56:91:9e:ab:fa:4b:e9:88:
         a4:46:46:d0:ca:2c:87:2d:b1:a0:df:d7:84:cb:d8:a6:b3:e6:
         50:bb:89:a1:66:38:2b:d4:8b:ba:e1:88:46:b2:cb:35:1b:5e:
         ba:2d:1c:e8:12:73:eb:4c:c3:13:55:fd:34:f8:7c:c5:69:fd:
         09:58:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:32:14 2026 by rpki-client