Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/C2213CFC2CC311F1A8A01C5D8F833773.roa
File:                     C2213CFC2CC311F1A8A01C5D8F833773.roa (raw, json)
Hash identifier:          dCbH4NL/l/xMZfu4F928E1bAEdQVgxFt32pJoJ1YYyA=
Subject key identifier:   63:95:EA:8A:EA:B2:F7:70:8E:63:22:C4:24:D6:5F:F4:49:CA:95:26
Certificate issuer:       /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Certificate serial:       0F49
Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/C2213CFC2CC311F1A8A01C5D8F833773.roa
Signing time:             Fri 28 Aug 2026 18:35:02 +0000
ROA not before:           Fri 28 Aug 2026 18:35:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     35280
IP address blocks:        203.27.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3913 (0xf49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
        Validity
            Not Before: Aug 28 18:35:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a91d4d5-bac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:6e:20:2b:67:7e:5b:a2:40:e7:2f:47:ff:
                    1c:1e:4c:e1:34:98:44:68:8a:12:48:94:58:45:05:
                    d8:ec:35:29:0a:ab:75:b7:f7:b5:94:d5:62:88:0c:
                    0a:cb:f1:35:97:4e:c3:0c:1b:6e:b2:e3:c4:de:ae:
                    c6:eb:64:f9:48:13:59:a5:5f:f5:46:aa:51:cd:61:
                    00:0b:43:41:50:e4:dc:7d:6f:50:b5:b1:13:b2:12:
                    ed:d3:19:a4:1a:e0:b5:0a:56:d4:2c:25:69:b8:21:
                    18:0d:29:79:e9:f4:23:94:e6:e7:cd:4d:8f:38:9b:
                    88:4f:1c:9b:98:3d:75:54:a5:3c:43:b4:e6:d2:92:
                    af:e8:3b:da:1e:ca:e2:01:70:16:0a:7e:98:31:0e:
                    e9:21:03:7d:d6:33:45:ca:46:bb:0e:9e:fa:f5:3a:
                    da:af:5d:9e:95:fc:c8:7c:bd:5a:c0:b2:61:ed:13:
                    21:af:57:84:a4:2c:94:9c:2b:bf:a1:14:90:18:d6:
                    98:23:38:8e:1c:6a:0c:17:02:52:63:7b:6d:0a:dc:
                    51:a4:2f:b2:94:6c:48:a3:75:63:ae:59:85:ab:6e:
                    55:65:88:35:28:b4:5f:55:6d:4c:d5:dc:66:9f:64:
                    d3:24:9d:20:4a:f9:bd:d0:91:ad:26:e4:df:75:49:
                    ed:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:95:EA:8A:EA:B2:F7:70:8E:63:22:C4:24:D6:5F:F4:49:CA:95:26
            X509v3 Authority Key Identifier:
                keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/C2213CFC2CC311F1A8A01C5D8F833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:73:1d:eb:5d:1b:64:39:10:bf:fd:51:5a:cc:a9:4c:58:00:
         19:e7:6d:3e:7a:6d:78:99:bb:e1:80:c9:57:f0:3e:d6:aa:29:
         78:01:ca:dd:9f:42:c2:94:4c:5d:79:36:33:64:54:a7:e6:73:
         c0:89:a8:7f:49:2b:dc:5f:66:72:a0:44:b5:59:7c:85:64:7e:
         ab:63:19:22:fc:a0:d1:e9:42:68:1a:4a:78:89:27:9b:d3:f3:
         56:51:d5:90:52:24:9d:19:dc:c2:97:a1:ad:fe:37:a4:9e:67:
         1b:f9:9e:25:d9:9b:b1:21:ff:92:db:25:4a:f6:63:95:4e:6b:
         4b:c4:0e:ff:c5:e3:11:23:9c:da:12:6c:53:7e:e5:6e:61:3e:
         fb:38:05:5e:75:94:15:4f:46:75:b7:71:06:be:98:12:a7:b2:
         b4:a9:df:5d:63:8c:32:6b:2e:d6:3b:79:e4:38:d3:7f:05:72:
         36:ea:6b:d8:2e:92:1b:cd:45:62:33:4e:b8:ea:9c:c9:68:64:
         a7:8e:3c:3a:25:55:fd:4e:48:90:83:a8:27:bb:a2:85:7c:7b:
         33:3a:5e:05:c8:c8:08:65:20:67:4b:a1:18:c6:1d:78:32:0a:
         4f:c2:cf:af:a0:09:36:46:33:59:4b:32:0e:2a:76:40:01:48:
         a7:fa:10:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:57:53 2026 by rpki-client