Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/8AF55BF67F6511F1815D2BEC60A30FBC.roa
File:                     8AF55BF67F6511F1815D2BEC60A30FBC.roa (raw, json)
Hash identifier:          LosfvGjnTO0oikHxwkUOn/A4e0QgHvZ4m0M/Lnyunhg=
Subject key identifier:   0E:F4:AE:C6:41:DE:81:5F:9E:FE:41:C2:A4:7F:62:07:BD:A4:38:96
Certificate issuer:       /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Certificate serial:       0658
Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/8AF55BF67F6511F1815D2BEC60A30FBC.roa
Signing time:             Tue 14 Jul 2026 09:57:27 +0000
ROA not before:           Tue 14 Jul 2026 09:57:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64098
IP address blocks:        27.116.36.0/22 maxlen: 24
                          45.125.120.0/22 maxlen: 24
                          103.166.56.0/23 maxlen: 24
                          103.194.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624 (0x658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
        Validity
            Not Before: Jul 14 09:57:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a560807-2faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:16:fe:99:26:25:f2:bc:6a:aa:d2:76:c9:
                    25:aa:ef:05:42:f2:86:d4:85:dc:1f:ca:e2:40:94:
                    b6:44:09:9b:f9:a9:60:57:b4:fd:8a:9e:5e:13:3b:
                    89:b9:ca:87:a0:e9:a8:eb:ae:09:c0:0b:78:87:f1:
                    62:82:f5:d2:e4:fb:50:3f:39:e5:bf:75:27:57:a5:
                    a2:81:f6:e1:81:fb:8b:02:21:5c:5b:76:5d:7f:a8:
                    40:94:96:32:3a:e0:83:29:51:fe:1b:1a:55:85:02:
                    ef:bb:c0:0c:6a:f7:ef:f6:0c:3c:12:f7:a3:c1:c7:
                    c3:47:18:58:87:4d:d4:07:11:d7:97:dd:50:3b:86:
                    07:88:d3:30:11:48:e0:36:6c:58:83:4e:8b:bb:db:
                    91:1c:b3:f8:0c:81:80:1c:5a:11:e7:ad:4c:04:7b:
                    21:4b:58:de:58:5a:34:5c:c4:ee:8d:10:61:c8:4d:
                    f6:7c:b6:37:14:b8:b9:bc:9c:92:ef:67:f9:9f:9c:
                    b3:28:45:4c:9b:74:f3:0e:09:95:5b:d0:94:f9:db:
                    fa:86:ae:f0:45:e1:ca:c6:bf:50:98:9e:4d:5f:9a:
                    87:0d:67:1d:0a:2e:ce:e8:1c:62:0d:ff:55:7e:81:
                    e4:b1:da:58:9c:ef:21:c5:5b:7c:25:c0:31:91:e8:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F4:AE:C6:41:DE:81:5F:9E:FE:41:C2:A4:7F:62:07:BD:A4:38:96
            X509v3 Authority Key Identifier:
                keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/8AF55BF67F6511F1815D2BEC60A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.116.36.0/22
                  45.125.120.0/22
                  103.166.56.0/23
                  103.194.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:11:1b:48:47:f1:23:c9:a7:e3:c2:f4:ef:4c:9b:f3:9e:
         c6:bc:60:aa:d7:51:46:a3:a7:4e:e3:81:cd:d6:43:af:dc:bf:
         e1:df:8f:0f:2d:7b:d7:bd:be:a3:19:79:09:e0:1c:01:6d:c5:
         a4:e1:c1:ac:06:45:62:57:c7:1e:53:a5:16:4c:c9:c5:d0:3a:
         60:1d:2c:09:f4:7f:4f:95:04:8e:70:98:b8:14:55:34:b0:11:
         2b:f6:31:ea:1b:fe:af:46:74:39:3b:2b:8f:ed:c2:aa:b6:ce:
         48:2b:98:9e:5e:22:4d:ad:fe:39:1d:a0:a8:41:ec:fb:48:94:
         5f:2b:d5:cd:3a:04:46:fc:cf:f0:e7:77:f4:df:9d:9d:77:4b:
         94:52:62:8f:a5:92:0a:a5:83:72:a5:7a:c2:fe:1a:ae:a3:27:
         f0:70:a2:51:81:76:15:db:2f:55:e9:e0:16:ba:bd:d3:80:b5:
         f2:ac:96:76:f2:48:21:20:34:a5:2f:03:84:6b:e4:f3:08:e7:
         6f:2f:1f:f5:61:df:55:42:c2:02:a5:9d:aa:09:b2:25:f6:a1:
         d0:ff:5e:c3:e8:24:aa:2e:6d:2a:63:22:b5:43:52:cb:53:05:
         18:c9:5d:1b:2b:70:2f:33:ed:fe:80:80:99:6a:08:28:ab:b7:
         d8:76:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:34 2026 by rpki-client