Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
File:                     27C8A978636311EEB35FEF77C4F9AE02.roa (raw, json)
Hash identifier:          +myCZKwQi+vxdBerc9z5NWGlvU5VaAs7PnbX2VdkDYs=
Subject key identifier:   2A:5F:88:ED:14:49:F9:9A:32:31:A7:01:75:FE:F4:73:D0:16:CF:4C
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BF8
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:38 +0000
ROA not before:           Mon 06 Jul 2026 15:11:38 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151825
IP address blocks:        171.102.216.0/24 maxlen: 24
                          171.102.217.0/24 maxlen: 24
                          2001:fb0:10bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15352 (0x3bf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:38 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5aa-53ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ab:8d:43:8b:78:76:86:46:61:ef:1c:a7:cc:
                    96:89:76:88:ee:1d:e8:d0:7d:92:e2:e0:4c:e3:bd:
                    9f:c6:a1:f9:d1:f9:c0:6a:d7:11:51:9b:f0:fe:b9:
                    5a:fd:6e:66:47:24:7e:b2:87:45:ea:dd:51:65:71:
                    33:fa:63:1b:f7:04:b0:62:4f:4a:34:bc:fb:97:af:
                    cc:2d:19:ce:76:33:62:94:d7:51:58:91:a3:63:5f:
                    e7:04:9c:c1:01:ce:31:43:f8:23:e3:60:70:54:d4:
                    05:9e:7f:22:1c:fd:92:c9:9d:c6:df:eb:6f:72:82:
                    4f:d7:59:eb:54:f0:46:1a:b8:08:ef:d3:69:52:f5:
                    81:98:f9:10:ac:72:bf:a3:82:4f:0c:0b:e2:88:8a:
                    8c:ca:05:0c:4f:f1:2a:49:87:2d:69:11:e0:7a:1a:
                    d4:ad:6c:92:25:b2:d0:c2:42:a2:be:9e:8e:05:92:
                    b4:e7:2c:7f:70:73:23:79:27:33:d8:53:23:98:cc:
                    d9:dc:1e:7b:2f:c9:98:7d:75:48:14:00:73:db:55:
                    c6:bc:c0:e1:b8:23:7c:90:be:a7:15:85:61:2f:f3:
                    69:11:e9:cd:1b:53:e9:13:42:db:c4:2d:95:51:b1:
                    34:5f:47:7c:e8:47:6a:83:d9:ff:f0:57:fe:f8:ab:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5F:88:ED:14:49:F9:9A:32:31:A7:01:75:FE:F4:73:D0:16:CF:4C
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.102.216.0/23
                IPv6:
                  2001:fb0:10bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:9f:b8:1e:67:5b:1c:40:90:ff:8d:d6:74:2f:b9:8c:25:90:
         2f:dd:74:c9:78:5e:a8:98:78:78:95:36:fb:f3:98:eb:3d:d3:
         00:35:c4:18:a2:e5:7a:5f:12:ec:25:28:ee:05:87:f6:cf:38:
         33:8e:3f:6f:c1:04:ef:64:e1:c9:3e:9e:6b:34:ba:c6:6c:e6:
         86:de:ac:58:f5:aa:81:06:52:ce:30:14:30:5d:9e:50:96:d1:
         67:d0:bc:ea:77:bb:90:57:7e:03:e1:4b:f6:96:7e:d8:52:40:
         83:f2:20:91:6d:67:0f:8b:46:bd:40:67:16:60:9a:16:68:5e:
         5d:b9:9b:f9:c3:5a:43:fe:71:5d:6e:2e:cb:87:46:fa:46:75:
         06:bb:f8:94:d2:56:38:73:6a:29:d9:78:12:2c:f9:5f:58:12:
         eb:69:93:ae:6d:10:e1:b6:17:4f:d6:ec:65:7b:25:94:c6:da:
         e3:fb:c0:6d:e6:ed:ae:f1:19:c0:ba:69:83:94:e9:7a:39:6a:
         ca:86:da:8f:79:a4:c6:2b:68:75:b2:df:2d:ac:17:4c:74:1b:
         0d:28:63:64:f8:d6:e9:57:63:b3:4f:c5:71:6e:7f:f9:a8:38:
         ce:c0:e4:93:22:0e:a8:4f:d8:73:b4:cc:b1:0e:04:b5:33:c1:
         bc:79:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:14 2026 by rpki-client