Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/EE2F10889B4911EFBBAB9381C4F9AE02.roa
File:                     EE2F10889B4911EFBBAB9381C4F9AE02.roa (raw, json)
Hash identifier:          M37iCDC1WFmzbueKkfmyuA42cL2hkpQoyiGs4bWfae8=
Subject key identifier:   8E:4C:7C:55:BD:72:27:C6:AF:97:F2:56:5D:50:AF:75:EB:FD:06:87
Certificate issuer:       /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial:       174D
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/EE2F10889B4911EFBBAB9381C4F9AE02.roa
Signing time:             Sat 16 May 2026 17:20:16 +0000
ROA not before:           Sat 16 May 2026 17:20:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     9989
IP address blocks:        27.111.220.0/24 maxlen: 24
                          118.103.183.0/24 maxlen: 24
                          2403:b100::/33 maxlen: 33
                          2403:b100:7f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
                          rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 16:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5965 (0x174d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
        Validity
            Not Before: May 16 17:20:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a08a750-b4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:2e:0d:da:60:4e:54:74:ad:ad:b5:f0:45:
                    2c:dd:97:0e:eb:db:74:05:b0:70:eb:15:01:2a:00:
                    3b:98:12:e5:22:73:33:7a:17:08:b2:02:9e:07:1f:
                    73:e4:55:43:79:23:db:9a:6d:51:d4:d4:25:57:99:
                    d4:04:d8:bf:4c:15:74:b4:05:bb:90:6a:6e:f5:48:
                    70:1a:9c:e9:25:fa:11:92:ef:1e:e4:92:48:22:2c:
                    de:fd:81:a4:c9:b8:25:cd:54:2a:a1:22:5d:33:2f:
                    78:48:a2:29:16:b7:16:56:b5:ae:b9:c9:06:d2:63:
                    ef:05:0a:c0:c0:1e:a7:72:9e:09:0b:e1:42:3a:69:
                    84:82:dd:d3:d8:57:39:4b:94:5a:05:52:e9:d2:10:
                    77:44:14:29:97:42:34:92:ee:c2:bd:ca:d3:87:80:
                    38:3a:14:ab:e0:ed:76:f4:a0:4a:da:69:9a:94:b2:
                    44:de:2e:d2:d5:1a:fd:d1:f2:9f:c9:72:c8:74:8b:
                    02:f3:df:ef:41:b3:82:c8:ff:2e:0e:d1:f2:57:ae:
                    6f:9d:1a:fe:b6:ab:e7:50:2c:ba:a0:ab:96:ca:4c:
                    a2:f2:e6:8b:8c:ed:d6:ae:8f:e3:d4:12:df:84:07:
                    63:63:e8:7b:ce:d4:7f:26:f2:a4:e8:d8:d7:cd:4b:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:7C:55:BD:72:27:C6:AF:97:F2:56:5D:50:AF:75:EB:FD:06:87
            X509v3 Authority Key Identifier:
                keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/EE2F10889B4911EFBBAB9381C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.220.0/24
                  118.103.183.0/24
                IPv6:
                  2403:b100::/33

    Signature Algorithm: sha256WithRSAEncryption
         a9:c9:91:78:c3:58:6a:d1:fb:dc:d4:94:b2:f6:bb:5b:da:1c:
         c6:86:d0:34:0b:bc:13:43:11:72:b8:01:e2:b6:ca:ff:e9:56:
         26:60:da:5c:02:ba:2b:c9:a8:37:1f:0a:10:c7:de:60:97:29:
         3e:14:3c:3d:36:51:24:2e:b5:35:c3:af:23:b6:3a:58:e1:da:
         b1:c5:56:1d:6e:70:29:2e:c9:89:66:f8:9e:80:1e:9a:bd:64:
         21:7f:78:35:8a:a6:bf:fc:25:15:e1:98:6d:f9:90:b3:68:05:
         94:0e:44:ce:96:a3:1b:bd:11:9c:2c:84:b6:6f:7e:20:cb:c7:
         14:a7:e6:37:e4:e8:bd:d1:01:8e:52:01:29:a2:9a:89:34:d1:
         84:9f:bc:ed:01:18:59:d2:86:7a:24:04:e1:b4:f9:b4:df:6e:
         2d:e5:9e:5f:47:bc:78:f4:f5:b2:a1:da:d6:e8:fb:d4:58:d3:
         cd:8f:67:2e:68:cd:dd:ab:bd:70:e1:b3:4b:6f:c1:71:10:27:
         54:b8:8e:c5:d1:52:30:e1:dd:7b:32:b8:8a:b9:71:af:fc:e4:
         85:73:60:69:5b:83:47:8f:c4:2b:22:9f:93:14:1a:3b:4a:ad:
         5e:6a:33:55:9c:0a:5f:0d:36:eb:80:46:48:00:70:75:02:d3:
         72:12:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:27:31 2026 by rpki-client