Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa
File:                     160ADCACE34A11EFA6960F0CC4F9AE02.roa (raw, json)
Hash identifier:          JbCPb2/G06LWsiRDNl/iJAib0NI/NVkqoq8wvubR2Qs=
Subject key identifier:   26:7A:48:7B:10:08:DC:3B:92:F0:BC:82:1B:B2:82:43:CE:C4:84:8D
Certificate issuer:       /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Certificate serial:       08D7
Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa
Signing time:             Sat 02 May 2026 21:25:25 +0000
ROA not before:           Sat 02 May 2026 21:25:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138657
IP address blocks:        203.32.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
                          rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
        Validity
            Not Before: May  2 21:25:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f66bc5-e894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:ed:9b:d8:e1:44:7d:9d:4b:34:b9:54:77:
                    f3:f6:2f:17:1d:84:25:30:c4:d6:19:99:8a:42:c7:
                    90:1d:10:37:df:97:2c:ce:1e:24:0a:32:33:85:c4:
                    09:78:00:10:69:98:9a:60:3f:3e:ad:aa:1c:9c:c4:
                    f8:dc:67:c4:8b:b5:46:4c:ad:5e:fc:7b:37:58:0e:
                    66:b4:7e:6f:c1:f9:5f:e7:8c:ed:51:dd:0d:f9:4c:
                    70:d8:76:2c:2c:7e:dd:c8:9c:7e:e8:30:e2:40:ea:
                    7e:a9:88:aa:3a:0c:37:2c:3f:09:a3:be:b7:9e:0a:
                    f9:0a:b8:ef:48:3e:07:ce:58:fb:a8:8c:3b:33:f4:
                    07:1f:b8:5a:c7:f5:16:1c:e9:31:5f:3d:0b:14:f8:
                    5d:e2:eb:3c:a4:c0:54:b0:13:ef:ef:15:7c:ca:84:
                    7b:dc:32:5c:a2:22:f2:7e:f2:72:fd:68:78:d5:45:
                    8c:77:90:b2:2c:5e:8d:d6:e3:b5:31:75:20:44:98:
                    e1:b9:4c:7c:27:d9:72:5b:ca:19:f7:f0:59:ab:57:
                    3a:a0:98:c2:fd:76:24:0d:4f:9a:71:c7:81:28:e4:
                    02:9f:38:12:81:ec:7f:3c:a1:27:a1:63:7d:f9:54:
                    f6:27:65:7c:9c:93:5c:ff:ae:a7:20:22:92:f7:59:
                    ec:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:48:7B:10:08:DC:3B:92:F0:BC:82:1B:B2:82:43:CE:C4:84:8D
            X509v3 Authority Key Identifier:
                keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/160ADCACE34A11EFA6960F0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:27:bc:7a:12:4f:cc:0a:eb:b7:4e:b1:fe:8c:ed:b6:a5:
         fb:89:69:66:f8:f0:b4:67:f5:51:e8:7b:b3:63:1d:81:50:de:
         77:5f:c3:d4:8c:38:c6:94:34:6b:99:13:26:73:f4:36:59:e9:
         d2:7c:ff:6a:eb:74:23:1b:39:63:e7:ca:5e:7f:13:c1:c9:34:
         05:41:d5:28:4b:18:b1:fd:cc:04:e6:1f:a7:a9:63:79:09:79:
         54:37:38:1c:3b:79:f6:c0:7c:fd:62:c6:56:09:a6:80:a5:0b:
         27:8f:9c:2e:43:72:0b:a5:a2:45:4c:e5:18:b8:34:45:05:09:
         ff:2b:a3:17:ab:0b:f0:98:f0:46:7e:ca:39:7f:2f:c0:26:a3:
         70:51:04:8f:bc:64:e4:27:49:e8:46:db:82:82:36:de:39:9c:
         51:bf:0a:58:7b:b7:9c:94:4d:4b:b2:ff:66:48:21:78:94:6b:
         c0:00:68:84:a9:4f:5c:80:59:ce:83:94:40:9a:5f:e7:e5:e3:
         2a:40:4d:01:ec:50:fd:f3:8f:b4:a4:55:07:b1:06:e0:97:84:
         e8:d2:00:2c:3e:04:26:40:2f:ff:e8:36:80:12:25:b4:24:35:
         65:4b:11:2d:2b:f5:35:7c:99:e0:ff:e8:cf:d7:50:d2:8e:13:
         99:ae:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:21 2026 by rpki-client