Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1827B7E0605411EFA8069323C4F9AE02.roa
File:                     1827B7E0605411EFA8069323C4F9AE02.roa (raw, json)
Hash identifier:          I7NyIEE63t1lDroN8tpLNudfVSP/ghhR0ds+7lSznds=
Subject key identifier:   61:20:F0:B0:DD:E9:32:DE:D8:23:2E:6E:C5:1F:3C:C8:5D:8A:1A:90
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36F3
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1827B7E0605411EFA8069323C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:10:54 +0000
ROA not before:           Thu 30 Jul 2026 15:10:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149796
IP address blocks:        203.209.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14067 (0x36f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:10:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b697e-ab05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:1a:e4:4a:89:13:49:f9:d9:00:83:ba:03:
                    a2:ce:4f:70:68:1a:94:cc:a8:d9:ad:1a:d3:09:e1:
                    74:39:17:7f:ff:c3:c4:92:04:b5:6a:d3:c7:12:b9:
                    6f:b5:aa:55:99:6b:05:23:a9:81:85:24:9a:db:47:
                    2e:e7:c8:c7:12:fa:39:8c:2e:ee:a2:00:59:8e:24:
                    e6:3a:16:4f:fd:42:3d:02:55:b6:e7:6d:e3:3c:25:
                    89:f3:53:c9:a3:17:f8:c4:9b:55:8b:54:5e:62:27:
                    9d:ed:00:4f:b0:36:38:c5:ce:37:f6:0f:6b:25:11:
                    1e:25:54:b7:92:a8:32:98:c4:6d:db:22:55:5c:ad:
                    0a:12:13:f2:ca:91:19:83:11:ac:c0:95:30:12:2d:
                    55:52:51:05:95:3d:b2:a3:f4:85:56:62:c0:48:26:
                    0f:ad:d9:2a:31:67:a9:7e:52:a7:95:0b:66:64:c4:
                    e3:6a:89:4c:79:c4:d9:50:80:ff:d8:43:64:f1:a6:
                    51:6b:d4:4e:79:5a:bc:b8:dc:81:80:52:b9:d4:e0:
                    bd:61:7c:bc:4f:7f:ca:61:dc:45:d6:87:2a:47:82:
                    03:3a:3b:55:cb:4c:36:ea:3f:0a:29:93:c6:4b:b2:
                    e0:05:28:99:e1:21:96:73:72:64:fc:e4:0f:94:62:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:20:F0:B0:DD:E9:32:DE:D8:23:2E:6E:C5:1F:3C:C8:5D:8A:1A:90
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/1827B7E0605411EFA8069323C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:50:c4:ce:95:e7:cc:d1:a6:64:be:10:82:76:6c:0d:12:e7:
         27:2b:3d:a6:47:09:d6:d8:5c:80:f8:b1:a1:a6:70:0a:d1:39:
         0d:4a:01:6c:43:7a:e7:dc:21:92:58:6c:1c:ec:fe:ee:8c:b4:
         4a:c8:68:a5:f3:10:3d:68:19:24:62:8c:af:9b:01:1f:a0:c3:
         74:6d:de:bb:85:1f:27:88:6d:ea:81:2c:11:0e:cc:95:87:ea:
         5c:80:b5:f0:a7:e1:eb:4b:e3:6f:3c:fb:92:9d:5f:9a:1a:c4:
         6b:f8:a4:b5:25:2b:a7:12:d9:80:62:6a:0c:6a:56:a0:a9:97:
         ec:d9:ff:43:ec:00:d6:ae:95:0a:42:b4:72:54:eb:ff:9c:9a:
         ac:19:bd:74:63:93:06:59:9d:3b:3a:6c:77:dc:d7:5f:f2:b1:
         6f:fe:4a:31:b0:6c:78:d5:24:92:38:c8:8a:89:b8:77:7d:c9:
         61:c6:4c:16:d7:35:e2:b2:20:2a:b2:cd:57:37:bb:5f:76:7a:
         b8:04:d7:7a:e6:69:d3:c0:9a:cb:e3:dc:f5:4b:e4:e2:04:d9:
         52:94:85:dd:8b:27:1f:d4:69:6a:2a:69:f5:d2:95:97:61:cf:
         b4:84:7a:1d:22:c6:4f:8b:df:a7:d3:4a:7f:f8:48:2d:e4:3d:
         e3:b5:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:53:49 2026 by rpki-client