Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa
File:                     12A47D4E9CDB11EF857FB626C4F9AE02.roa (raw, json)
Hash identifier:          RUPU3UZyuNqsnZUGAWSji1S8J4XrHxG6gKkU4Fsvigc=
Subject key identifier:   DC:E2:FF:AD:D2:58:BA:1F:DA:84:2E:AE:82:9B:17:CB:AE:B0:74:C4
Certificate issuer:       /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Certificate serial:       08CF
Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 21:40:48 +0000
ROA not before:           Tue 28 Jul 2026 21:40:48 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132890
IP address blocks:        103.27.104.0/22 maxlen: 24
                          113.52.148.0/22 maxlen: 24
                          2407:5f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl
                          rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
        Validity
            Not Before: Jul 28 21:40:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6921df-cc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:2c:01:be:97:44:56:9a:f3:09:4c:f6:34:
                    f9:cf:cc:90:bb:5c:de:a1:33:61:27:9d:13:72:7a:
                    25:69:34:0e:af:8c:22:82:0e:7d:49:ca:33:ad:ba:
                    d8:4a:3c:18:e0:6a:72:f6:1d:fc:0d:d3:f3:ec:ac:
                    c3:7c:39:1a:32:d0:97:83:59:b0:59:cc:38:00:5e:
                    53:5e:8d:cf:2c:3d:9a:72:55:51:b5:fa:a6:5c:62:
                    a8:e3:74:23:e9:65:6e:de:53:f5:97:b2:f4:48:ad:
                    27:b1:c1:06:3d:5b:e1:37:5f:f3:a1:98:55:6b:cd:
                    2d:ef:d0:8e:76:2e:c8:e5:55:b9:69:43:48:6e:b7:
                    ed:33:9d:8f:8a:4d:a1:4a:7b:20:a2:52:fb:13:44:
                    94:59:cd:87:f8:9a:d5:5d:cc:0e:32:49:7f:cb:81:
                    62:41:72:e1:2c:b0:7c:b6:5e:02:43:c2:56:6f:42:
                    0f:ff:04:d8:d0:fc:3c:ea:2d:92:ef:cc:70:03:b5:
                    f5:ab:c0:de:a3:e5:b6:87:47:58:63:19:5f:2b:6f:
                    63:2c:1a:f8:e1:f7:ab:ee:46:61:25:05:e9:fa:68:
                    16:1a:d7:c9:7b:9b:ea:22:36:2b:1d:2e:b3:e4:1c:
                    31:8a:41:1e:92:e6:9c:a6:5a:71:45:e8:17:98:d2:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E2:FF:AD:D2:58:BA:1F:DA:84:2E:AE:82:9B:17:CB:AE:B0:74:C4
            X509v3 Authority Key Identifier:
                keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.104.0/22
                  113.52.148.0/22
                IPv6:
                  2407:5f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:7d:d2:50:2b:cd:e0:93:ab:11:7b:be:bd:a8:5b:86:af:
         90:96:3a:ed:1f:b9:60:4c:af:81:04:3e:d7:9e:5b:52:7a:90:
         c7:01:b7:e0:04:f1:1e:02:6e:b1:db:e6:a8:7f:14:e2:aa:a8:
         44:34:9d:7a:9a:68:47:a9:05:e7:e5:6c:e1:23:04:c2:20:42:
         df:92:61:83:36:83:7e:ef:50:b8:1b:28:55:0b:ae:25:c8:c9:
         8a:1d:8e:f9:a4:1a:95:4d:67:6e:d2:e5:6a:be:91:de:4f:2e:
         11:48:12:14:c4:5a:cb:61:d6:6f:86:f4:9a:83:78:2c:4a:06:
         76:c0:98:ad:74:b1:7b:6b:06:d7:c3:ab:8c:ea:77:51:cb:36:
         a1:dc:a2:8c:35:1e:22:17:5c:33:08:29:bd:8b:39:72:d5:c9:
         dc:67:5e:7a:42:a5:7d:3b:ff:61:cf:4c:8c:35:48:ab:6a:7a:
         f3:4d:9c:4c:33:56:77:69:8e:ce:b6:b8:68:a6:b3:f2:30:c7:
         5f:b1:61:e2:b8:a3:fd:23:dc:2d:32:e5:e2:f8:16:4d:31:85:
         88:0c:15:fd:ed:ec:a7:22:b0:a9:3f:36:fa:0d:64:48:d9:98:
         c5:82:e7:9f:86:0f:06:62:df:09:4c:5d:b6:f9:b2:1d:d4:1c:
         08:ab:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:15:04 2026 by rpki-client