Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/EECE3EC83CAC11F191D82B64AE833773.roa
File:                     EECE3EC83CAC11F191D82B64AE833773.roa (raw, json)
Hash identifier:          w9oUAma24okW8iq8Kb6jjeHqtZAlY2V722gRG14VEBE=
Subject key identifier:   63:3A:78:80:D3:5D:EE:9E:16:D4:F4:42:2B:9E:9D:6F:E8:56:20:43
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       1741
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/EECE3EC83CAC11F191D82B64AE833773.roa
Signing time:             Mon 04 May 2026 06:40:19 +0000
ROA not before:           Mon 04 May 2026 06:40:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206283
IP address blocks:        103.27.20.0/24 maxlen: 24
                          175.111.6.0/24 maxlen: 24
                          2001:fe8:8f00::/48 maxlen: 48
                          2001:fe8:8f02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5953 (0x1741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: May  4 06:40:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f83f53-b3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:af:65:32:48:3a:9e:cd:61:10:b2:a1:b7:
                    fc:e1:5a:08:1f:d5:6a:67:74:b3:67:0a:b9:9b:a6:
                    0d:1f:a9:c8:1c:78:0a:bf:97:3a:f8:17:83:2c:be:
                    4c:f2:33:2e:8d:b3:dc:e5:42:e0:82:28:64:7d:06:
                    73:29:89:38:d3:6a:8a:d4:f9:4e:86:92:6c:b1:62:
                    0e:87:a7:ea:24:e4:c0:63:91:61:68:75:d2:f8:5b:
                    6c:aa:e8:d5:a3:f6:94:b0:74:0d:7f:95:19:ff:74:
                    2f:2d:16:73:34:f9:13:b7:54:98:cf:d5:4f:fc:31:
                    cd:39:06:56:70:c7:ad:a3:bd:b5:7c:89:59:ce:32:
                    c6:0b:0c:ba:7a:8b:7f:08:50:1c:31:35:fc:db:58:
                    c8:ea:e2:25:70:e6:b3:b9:61:1e:0b:d8:de:44:33:
                    1e:a8:80:84:6e:a2:42:1f:9c:22:33:45:c5:65:51:
                    74:37:62:0b:5d:f3:7a:2a:7f:9e:ae:0b:bf:36:3a:
                    35:1e:63:7f:9e:f0:2c:66:67:23:c3:d5:ac:2a:32:
                    9c:f7:e4:50:e1:94:d4:d1:d1:24:8b:d4:32:27:21:
                    e1:92:b4:65:d1:0b:fa:1a:e5:1a:dd:39:d2:90:28:
                    a9:7d:a9:71:3b:ca:47:3b:3b:85:01:82:64:1c:22:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3A:78:80:D3:5D:EE:9E:16:D4:F4:42:2B:9E:9D:6F:E8:56:20:43
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/EECE3EC83CAC11F191D82B64AE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.20.0/24
                  175.111.6.0/24
                IPv6:
                  2001:fe8:8f00::/48
                  2001:fe8:8f02::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:b8:6b:d0:4f:30:d1:ed:8e:4b:42:e3:ee:52:36:44:3f:
         f8:c9:67:05:e8:e8:07:e7:79:32:67:61:99:a5:30:12:ae:aa:
         bb:2a:75:90:67:9f:c3:cb:92:8c:b5:df:81:84:68:8d:af:72:
         23:10:be:3b:61:de:47:16:15:53:92:b6:2d:3b:38:21:d6:5b:
         ee:7f:6d:07:71:5b:d9:ea:1e:e7:c1:d4:06:c3:30:6c:fe:a8:
         f8:a4:f2:98:03:ee:ae:10:83:2f:b6:7d:76:e6:93:34:68:02:
         c7:40:5c:70:e8:09:18:82:b6:5c:37:ef:18:bb:8a:19:4e:56:
         5f:e4:87:f3:1f:8f:c2:03:62:c8:fa:9c:b5:5a:f7:e9:23:c0:
         a7:8e:76:55:6c:8f:4a:ac:6e:0d:45:ab:5f:41:38:03:f3:be:
         cd:bc:69:9d:5f:9d:35:c5:ff:99:77:49:4a:1b:a4:31:ef:01:
         67:99:cf:72:91:d5:80:12:79:ec:25:12:76:f5:c7:ae:2e:d7:
         47:83:20:52:23:a1:4c:74:cf:9d:8e:43:60:05:cf:91:1f:f6:
         65:0f:ed:02:ab:17:60:0d:a3:4e:f0:f3:26:00:83:43:fc:68:
         7d:61:35:cd:c2:8d:da:ba:81:ca:18:5d:3b:9b:4b:98:14:87:
         5e:a9:62:8b
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICF0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3
RjEyMUYwNTMwHhcNMjYwNTA0MDY0MDE5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY4M2Y1My1iM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jGvZTJIOp7NYRCyobf84VoIH9VqZ3SzZwq5m6YNH6nIHHgKv5c6+BeDLL5M
8jMujbPc5ULggihkfQZzKYk402qK1PlOhpJssWIOh6fqJOTAY5FhaHXS+FtsqujV
o/aUsHQNf5UZ/3QvLRZzNPkTt1SYz9VP/DHNOQZWcMeto721fIlZzjLGCwy6eot/
CFAcMTX821jI6uIlcOazuWEeC9jeRDMeqICEbqJCH5wiM0XFZVF0N2ILXfN6Kn+e
rgu/Njo1HmN/nvAsZmcjw9WsKjKc9+RQ4ZTU0dEki9QyJyHhkrRl0Qv6GuUa3TnS
kCipfalxO8pHOzuFAYJkHCKnDQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFGM6eIDT
Xe6eFtT0QiuenW/oViBDMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2
MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjExODUvM0VBOUREM0ExNjIzMTFFODkyQzRBOTQwQzRGOUFFMDIvRUVDRTNFQzgz
Q0FDMTFGMTkxRDgyQjY0QUU4MzM3NzMucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS
BAIAATAMAwQAZxsUAwQAr28GMBgEAgACMBIDBwAgAQ/ojwADBwAgAQ/ojwIwDQYJ
KoZIhvcNAQELBQADggEBAKMluGvQTzDR7Y5LQuPuUjZEP/jJZwXo6AfneTJnYZml
MBKuqrsqdZBnn8PLkoy134GEaI2vciMQvjth3kcWFVOSti07OCHWW+5/bQdxW9nq
HufB1AbDMGz+qPik8pgD7q4Qgy+2fXbmkzRoAsdAXHDoCRiCtlw37xi7ihlOVl/k
h/Mfj8IDYsj6nLVa9+kjwKeOdlVsj0qsbg1Fq19BOAPzvs28aZ1fnTXF/5l3SUob
pDHvAWeZz3KR1YASeewlEnb1x64u10eDIFIjoUx0z52OQ2AFz5Ef9mUP7QKrF2AN
o07w8yYAg0P8aH1hNc3Cjdq6gcoYXTubS5gUh16pYos=
-----END CERTIFICATE-----
Generated at Wed May 13 02:48:02 2026 by rpki-client