Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/81475298480C11F199A48156C7833773.roa
File:                     81475298480C11F199A48156C7833773.roa (raw, json)
Hash identifier:          cpLZfDFiGbjAsj6PnDXYwfwJiojfqV0NY0p2EN/1/Zk=
Subject key identifier:   22:5A:5A:C4:D6:43:80:AD:EB:09:56:0F:DA:54:F6:CC:A8:EC:0F:14
Certificate issuer:       /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Certificate serial:       0BA7
Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/81475298480C11F199A48156C7833773.roa
Signing time:             Fri 22 May 2026 19:23:09 +0000
ROA not before:           Fri 22 May 2026 19:23:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     63979
IP address blocks:        27.111.12.0/24 maxlen: 24
                          27.111.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
                          rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2983 (0xba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
        Validity
            Not Before: May 22 19:23:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10ad1d-1c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:f3:52:73:bb:fa:44:c3:93:b9:94:67:5c:
                    ee:70:c6:47:20:43:ba:d5:07:da:6d:a8:4e:48:c1:
                    d6:e0:13:d6:98:e1:ba:fd:dd:03:07:d4:4e:75:75:
                    d1:d2:95:2f:63:98:ee:d1:e9:d7:6d:e9:93:a5:d0:
                    be:5d:3b:61:a3:97:ce:d0:49:a1:6c:d7:7b:1e:e9:
                    fd:0f:87:13:89:d4:73:55:3c:25:19:c1:ea:c1:b5:
                    b8:3c:47:65:d5:1a:a9:f9:b3:3c:f7:c5:0c:5c:87:
                    0d:34:ed:9d:5d:41:a8:75:e7:2e:f8:73:c8:c7:cc:
                    a9:fa:16:5c:5a:04:90:a9:1f:a4:e9:ed:fb:68:27:
                    fe:4a:77:ad:7c:ff:40:2a:32:57:83:68:d4:40:f6:
                    72:34:85:6f:69:6f:10:9c:62:da:aa:5d:21:7b:77:
                    5a:a8:43:f8:ac:8f:b1:ff:af:9d:38:63:26:35:1c:
                    2d:24:ec:8e:7a:27:35:ef:5b:d6:68:8e:4a:ea:c2:
                    d5:6e:45:ee:1b:ac:31:2f:82:0d:80:fb:db:c7:54:
                    87:ef:f7:2b:79:5f:a9:ed:6f:0a:62:2c:39:89:0b:
                    59:d5:da:dd:65:af:b0:a3:a1:66:cc:78:7b:11:31:
                    73:7d:7c:91:dc:37:20:1c:24:b6:78:cb:61:2c:9c:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:5A:C4:D6:43:80:AD:EB:09:56:0F:DA:54:F6:CC:A8:EC:0F:14
            X509v3 Authority Key Identifier:
                keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/81475298480C11F199A48156C7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.12.0/24
                  27.111.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:f8:7a:af:50:cc:36:26:44:d0:ed:85:7c:bb:71:ce:1f:69:
         40:8a:19:54:93:31:4d:ce:70:03:ab:a5:52:8d:ae:fa:2d:10:
         ee:19:c8:a1:69:e5:0f:fb:d3:0a:c3:c3:f1:c9:17:64:03:db:
         f6:c0:02:4b:09:44:91:f3:18:30:50:97:6f:bc:00:5d:55:13:
         ce:17:3d:ec:51:4e:d6:00:f4:0a:c8:f7:9e:06:83:11:34:18:
         02:73:06:45:e6:81:c4:7a:f7:39:6a:f4:a2:26:e4:f9:2b:2d:
         a9:37:b2:58:28:34:37:aa:d3:ba:b6:91:49:c1:16:d3:8e:a5:
         c5:d8:cb:e1:5a:01:41:22:29:70:22:65:e5:48:f9:2d:05:9b:
         fa:f8:b5:5e:e0:9d:19:ef:42:f9:e0:94:8f:cf:c7:07:fe:44:
         f8:8d:da:c7:4c:31:e4:f9:e9:90:17:31:17:3b:14:03:29:a9:
         65:57:72:1b:69:76:bd:c3:26:b5:6c:5b:7c:e1:f9:cb:84:d8:
         ca:e4:31:4d:a5:62:2e:0a:de:a3:11:77:eb:1e:0f:9b:f3:7a:
         9d:af:4a:3c:67:70:b8:0b:ea:07:87:cd:61:0d:a5:0b:4f:06:
         71:8b:04:9a:21:9f:38:44:3c:29:44:3c:4d:d7:11:f3:8c:49:
         72:64:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:15:15 2026 by rpki-client