Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/1DCB662A3DF211EB81F4CE73C4F9AE02.roa
File:                     1DCB662A3DF211EB81F4CE73C4F9AE02.roa (raw, json)
Hash identifier:          q25fLmGla+VLvlzMOG6A/0pS3O978Xy+J6bNr/NpExE=
Subject key identifier:   45:76:2C:2D:CC:62:F5:05:93:8D:58:EB:12:6D:8D:7B:94:90:05:BC
Certificate issuer:       /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial:       174A
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/1DCB662A3DF211EB81F4CE73C4F9AE02.roa
Signing time:             Sat 16 May 2026 17:19:58 +0000
ROA not before:           Sat 16 May 2026 17:19:58 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        27.111.228.0/22 maxlen: 24
                          202.79.198.0/24 maxlen: 24
                          202.79.199.0/24 maxlen: 24
                          202.79.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
                          rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 16:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5962 (0x174a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
        Validity
            Not Before: May 16 17:19:58 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a08a73e-a45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:c3:99:7c:1f:d1:27:52:bc:f4:77:6d:38:
                    d0:78:9f:ea:4d:37:f3:8e:e6:2f:7c:e4:38:f5:f3:
                    92:52:22:70:39:6c:a3:79:e0:90:06:70:dd:c5:90:
                    33:6c:a9:49:fb:a7:b0:db:54:50:43:f0:0b:99:9e:
                    0f:37:29:56:8a:39:0a:0a:19:16:2e:8f:99:a4:32:
                    3b:ba:4f:18:0a:50:17:df:8e:7b:30:e3:ea:3c:7c:
                    8d:a3:d9:03:c0:8e:2f:41:61:50:0c:97:86:8a:94:
                    b9:1a:ef:03:1b:3d:df:2f:16:1d:c0:9b:ad:12:20:
                    ed:5e:7b:23:12:4c:61:cf:74:69:66:16:fa:e9:72:
                    45:f8:b5:d5:1e:18:78:f8:80:71:6c:80:82:13:11:
                    f4:83:ea:a8:ec:aa:cb:9e:34:14:11:4f:80:8d:f5:
                    a2:5b:96:68:ad:2e:85:fc:fe:39:b6:e9:21:de:a2:
                    7c:bc:14:fc:e6:bf:bc:72:35:8d:dc:74:d7:2b:92:
                    3b:c8:e0:72:69:98:b4:12:8e:21:0f:c7:7c:bd:e2:
                    c3:d1:44:15:e8:69:96:7f:95:f8:57:f8:91:f4:b7:
                    56:c3:fa:8a:ef:f4:a4:95:d5:e8:b2:93:67:50:c0:
                    aa:25:bd:d2:28:b1:cc:71:ee:a1:4f:ff:62:f8:54:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:76:2C:2D:CC:62:F5:05:93:8D:58:EB:12:6D:8D:7B:94:90:05:BC
            X509v3 Authority Key Identifier:
                keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/1DCB662A3DF211EB81F4CE73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.228.0/22
                  202.79.198.0-202.79.200.255

    Signature Algorithm: sha256WithRSAEncryption
         53:c2:58:80:b6:f5:ab:e1:57:ed:1a:61:39:c9:40:2e:79:3a:
         95:bf:e3:05:f3:4e:46:3d:ae:04:c4:1d:3f:84:94:af:23:64:
         8e:62:62:54:ce:96:c4:de:46:f6:5a:ce:d6:99:17:7d:75:d2:
         94:b9:7b:0c:29:fa:65:ea:1d:26:11:3d:8a:54:bf:1a:e0:95:
         c2:00:23:cf:ed:c6:16:7d:82:d7:86:2d:76:9f:1d:38:04:ad:
         fc:2e:58:cb:ef:2b:14:7e:21:e8:93:42:16:3d:b8:98:26:1e:
         6b:43:eb:ae:04:f2:53:e1:8e:80:56:ea:0c:1e:66:c0:ef:bc:
         b3:83:af:c1:91:ff:62:39:19:db:50:e3:c1:1b:d9:10:a9:52:
         bd:be:51:5c:09:0f:05:8a:15:39:bf:20:66:89:21:e5:17:a3:
         9f:72:a5:9c:23:88:f4:eb:1c:bf:00:ad:4b:21:f6:d1:03:75:
         b1:85:0f:34:a7:c6:bc:46:26:6e:64:12:3a:e1:a9:16:67:2b:
         f6:d9:e5:9d:2b:83:dc:cf:ef:d5:c1:70:dd:e4:4a:5d:6b:15:
         a8:90:27:1f:62:15:b3:58:27:8f:d0:6e:ad:53:5e:dc:8a:7c:
         aa:bb:3c:de:b5:26:5c:c8:8c:45:67:43:fd:b5:29:a4:2a:18:
         a3:15:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:04:58 2026 by rpki-client