Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa
File:                     27E277D891AA11EF9DBFF265C4F9AE02.roa (raw, json)
Hash identifier:          JKjBoA0n0S8ugNhqrtIp8G8r8xzCrq8pZhf4XSnkv7w=
Subject key identifier:   9C:F8:58:5B:26:1B:27:C5:87:D3:8B:36:21:64:0C:15:DE:30:36:BC
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3D9F
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:11:14 +0000
ROA not before:           Thu 06 Aug 2026 15:11:14 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     133952
IP address blocks:        112.196.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 14:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15775 (0x3d9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:11:14 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a412-a6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:69:d9:9d:2d:b6:ac:6b:5a:1a:77:6b:2a:4f:
                    2c:2c:91:d6:12:e2:6e:66:fe:68:3a:d8:d6:ba:cf:
                    6f:fd:39:1b:e0:10:9e:1b:10:0f:d9:ac:b2:4f:8f:
                    08:4c:73:58:a1:48:b6:2d:f0:17:6d:70:86:1b:7f:
                    e3:87:d1:c1:e6:f6:ea:0b:23:1e:29:d2:35:4c:0d:
                    df:2b:35:2b:73:fa:cd:a1:4b:82:9d:cc:d9:fd:76:
                    2f:ab:1b:42:24:e5:35:5b:8a:f3:50:4c:fc:b8:76:
                    74:61:bb:71:72:91:0c:56:2b:cd:2d:30:d6:8a:58:
                    22:58:1f:94:68:d1:db:18:55:da:ce:11:77:0b:e2:
                    4b:8f:dd:2c:09:aa:df:78:61:4c:cb:30:64:04:b9:
                    44:11:06:04:c8:55:77:8c:44:7a:76:0f:58:3f:e6:
                    94:70:7e:89:d4:13:5e:0f:21:c9:bd:30:fa:33:0a:
                    fe:b8:14:dc:bb:43:43:30:5a:63:47:36:64:84:e8:
                    69:85:4e:ae:a9:88:07:3a:90:a9:e3:4f:82:3c:9f:
                    f7:d1:4b:da:86:b6:89:c9:ad:69:f8:47:8c:f9:a0:
                    0c:34:e1:2c:13:f2:5c:a0:8f:8a:b3:6e:ac:81:26:
                    2b:b7:b0:b5:4d:e0:5c:25:0f:fa:f2:ae:c5:16:a0:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F8:58:5B:26:1B:27:C5:87:D3:8B:36:21:64:0C:15:DE:30:36:BC
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.196.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:10:72:ce:06:57:79:f9:79:3f:75:a2:ad:23:0a:71:1b:a9:
         f4:68:86:73:6d:84:e6:65:24:90:d9:b9:c7:79:a6:02:8c:bc:
         35:3f:35:05:3d:27:9a:82:87:2c:dd:1a:e6:e3:07:09:08:dc:
         56:01:5b:c4:79:ff:f5:c5:90:e1:bc:a1:c9:e1:6a:fc:23:06:
         5f:f3:fe:25:8d:fb:d5:fa:c2:5f:ff:5a:08:37:01:4b:ef:75:
         55:f5:df:fa:fc:04:aa:19:41:f6:85:c5:e2:c6:25:59:f2:14:
         29:bb:60:61:29:c7:0f:2e:0e:7a:c7:b2:6c:67:b1:61:6b:ec:
         af:42:4c:9b:b6:13:26:f9:91:9f:ba:22:45:6b:df:33:64:c4:
         52:67:14:2a:18:2f:83:3f:9c:b7:a4:7b:6a:c8:6b:f9:f9:cb:
         bc:62:85:1c:26:e9:b9:ac:f9:0d:79:6c:14:0c:65:2e:26:e1:
         e3:f6:f4:17:8c:21:ee:4e:35:b9:d0:2d:42:20:12:79:ed:54:
         32:c4:3f:16:b6:b9:6f:6c:42:ac:e3:75:9f:2b:b3:43:5f:f8:
         32:a0:f5:41:db:9c:a6:d3:eb:08:f2:e3:65:b1:fc:03:ba:de:
         e7:4c:e2:8b:37:91:c2:ed:64:48:b2:d4:dc:2b:ff:75:b0:85:
         80:6c:a2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:28:20 2026 by rpki-client