Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/08EAF5106C2111F0B46AAC57C4F9AE02.roa
File:                     08EAF5106C2111F0B46AAC57C4F9AE02.roa (raw, json)
Hash identifier:          yNRoRcrSs2idnKKKQBvpZT7hGrIPyAJ/BqXKminAWZU=
Subject key identifier:   51:A7:AB:10:C0:39:17:D7:C9:CF:C0:D2:67:23:69:D1:56:8D:AD:F1
Certificate issuer:       /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
Certificate serial:       90
Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/08EAF5106C2111F0B46AAC57C4F9AE02.roa
Signing time:             Tue 21 Apr 2026 07:41:42 +0000
ROA not before:           Tue 21 Apr 2026 07:41:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        202.27.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94
        Validity
            Not Before: Apr 21 07:41:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e72a36-a6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:bb:3a:93:ec:92:35:07:8b:a3:cf:c8:70:
                    55:64:f8:cc:c9:fc:a0:28:3e:8c:f1:63:a1:2b:da:
                    6d:93:bc:d1:71:0a:04:04:0a:44:1e:3f:aa:16:65:
                    ad:52:69:5b:9e:60:9d:57:10:fa:fe:c9:10:3e:1f:
                    57:90:60:24:66:8d:e4:6e:a1:0a:5c:a0:27:cb:c0:
                    2e:f3:5c:a8:d7:93:3d:a8:12:c4:f8:38:32:03:5d:
                    06:c5:0c:7b:1a:e2:c6:b0:de:7d:7e:e1:99:bd:c4:
                    37:9c:7e:2b:af:18:2e:f7:36:a3:01:4c:30:7a:7a:
                    79:d8:b2:a5:44:70:18:d1:b9:0d:05:60:a5:03:6c:
                    f8:d5:e4:09:24:7c:83:75:b1:14:fb:da:72:e8:99:
                    00:1d:52:1e:5e:e3:de:b0:f0:a8:9c:39:6a:27:bb:
                    dc:97:91:49:9e:39:f7:6a:08:70:97:1f:fe:27:ff:
                    03:76:54:5a:55:6b:0c:90:46:2c:f6:a6:87:e5:05:
                    68:47:66:8c:86:a7:b9:f4:4b:21:b2:6f:cf:5a:5a:
                    1c:a6:28:b5:6a:9b:a5:b8:ea:81:71:ea:17:03:86:
                    c5:d4:a2:61:c5:10:8a:3e:3b:ac:f5:09:96:2d:68:
                    5e:d3:84:8c:1f:f8:f6:a6:3f:38:e4:26:44:ea:da:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:AB:10:C0:39:17:D7:C9:CF:C0:D2:67:23:69:D1:56:8D:AD:F1
            X509v3 Authority Key Identifier:
                keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/08EAF5106C2111F0B46AAC57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:04:65:98:be:79:d7:63:55:6e:db:91:aa:e1:e1:3d:5f:53:
         5a:5f:f0:e6:b6:e1:69:5b:cf:97:aa:52:f4:36:8f:bb:c0:d0:
         f0:2c:b5:af:1c:21:8e:e8:13:77:db:ce:8c:80:37:47:44:d4:
         67:b7:cb:ad:51:07:0c:59:e0:a5:88:10:b1:38:64:94:68:91:
         c0:44:04:95:bc:1d:f9:0a:f3:ee:31:62:21:71:38:ad:81:03:
         f8:ff:4d:c0:bd:9d:67:71:aa:eb:a5:3a:67:95:79:ec:b7:7c:
         fc:34:f2:81:c1:e1:15:1b:88:e0:38:d2:ef:da:a3:ec:33:ee:
         ae:10:9e:1b:66:2f:53:e0:ab:93:70:19:7f:e2:ab:bc:70:52:
         1d:32:e5:34:e8:9e:3a:09:54:69:76:56:9f:15:3b:fd:e1:4a:
         ec:95:61:8e:3d:0a:df:89:6c:4a:d5:22:f3:fb:67:dc:58:c6:
         a5:e7:88:de:96:d1:ef:38:e0:f3:97:8f:b7:98:31:40:7a:95:
         23:69:65:72:64:8e:fb:29:95:90:da:96:b0:3b:9a:1f:a8:5c:
         88:39:d7:38:7c:32:da:b0:9a:ad:ed:5a:73:87:9e:d5:2d:14:
         ae:0a:2d:ac:ea:9f:41:a4:71:81:d8:04:dc:b5:ad:0e:e7:e3:
         1c:d5:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:39 2026 by rpki-client