Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
File:                     27E5184CCC6211EFA20BEE1BC4F9AE02.roa (raw, json)
Hash identifier:          ICu/yjGLx5mxYSM0WJFCxUELVponO7X2E1rDJr+HfU4=
Subject key identifier:   A7:5E:18:FA:CE:BC:75:59:5E:B3:02:B8:15:54:F1:04:37:E1:8F:68
Certificate issuer:       /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial:       7F
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
Signing time:             Wed 03 Sep 2025 07:37:01 +0000
ROA not before:           Wed 03 Sep 2025 07:37:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16789
IP address blocks:        103.170.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
                          rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 07:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
        Validity
            Not Before: Sep  3 07:37:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b7f01c-6d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:a1:58:eb:d1:92:cc:26:ad:25:79:a7:43:
                    05:b3:2d:0a:2b:25:ca:c6:1a:4e:de:ff:50:2e:dd:
                    95:8d:13:b0:68:c9:16:ee:14:2b:c9:c5:09:bf:f6:
                    b0:17:cd:62:98:a9:dd:c5:63:8a:c0:a7:e9:d6:56:
                    4a:1d:7d:eb:3f:35:f0:2b:bb:df:05:6f:a8:1d:23:
                    a8:85:03:67:7e:23:95:35:42:b2:fb:21:7f:26:63:
                    f3:49:1a:02:a7:a0:1b:86:4c:68:a4:8e:fc:cc:cb:
                    54:47:1c:1b:01:8c:68:02:34:16:ee:32:c2:b1:a1:
                    eb:ae:9e:27:5b:ec:e6:4e:1b:9f:b0:1b:a4:c3:c7:
                    63:cc:b0:a8:a2:62:06:03:14:1a:ca:7d:f7:1c:b7:
                    61:32:fd:a4:ba:db:1f:13:8e:de:b7:33:a4:8c:41:
                    b0:25:17:52:9a:1a:0f:b4:88:f3:e5:6b:6f:10:63:
                    ce:03:73:70:fb:3d:e2:13:72:d8:88:c1:57:34:fd:
                    92:c1:70:99:fb:36:8f:69:fd:59:af:d0:ad:16:55:
                    f1:36:fc:89:fb:dd:03:48:01:c7:93:88:51:56:03:
                    b3:dd:07:f0:7b:9a:76:77:ad:04:c9:3c:eb:2a:2a:
                    fa:ac:b9:3d:90:dc:e7:3f:b7:a6:28:73:62:4d:35:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5E:18:FA:CE:BC:75:59:5E:B3:02:B8:15:54:F1:04:37:E1:8F:68
            X509v3 Authority Key Identifier:
                keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:73:94:fb:87:8e:df:2e:9f:65:05:1c:ba:7f:4f:57:86:
         8d:7f:63:67:d0:69:bd:26:7d:18:a8:0b:62:cb:fe:45:9c:65:
         fc:44:c2:ee:5c:80:8f:ba:34:b4:df:54:cf:2e:75:fd:d1:35:
         64:16:97:b6:90:9f:e0:e1:2e:f4:b9:ee:96:78:83:72:d5:30:
         59:17:ef:54:ca:88:02:63:2b:6a:5c:05:60:f2:5e:16:14:c2:
         a0:e8:be:fa:0d:17:69:f0:cd:81:ad:64:a0:44:70:90:17:1b:
         a4:c9:31:c9:fc:f5:d5:8a:0d:92:4e:ff:01:32:e1:30:31:ab:
         0e:db:21:db:c5:5a:7a:3d:0e:f3:9d:7c:c0:d6:ae:25:e9:00:
         ec:59:d3:5d:c2:53:47:f8:c1:a0:b6:bd:41:14:42:20:28:b3:
         62:cb:f6:c1:86:2a:ce:f4:27:9d:9e:bb:54:3e:e7:d7:9c:74:
         a8:f3:72:66:02:46:d3:6b:00:29:d8:13:1c:8c:2b:98:65:71:
         14:d6:df:3f:18:04:b0:c8:18:a7:54:06:89:28:83:02:8d:aa:
         7d:ed:9b:f7:29:ea:b3:fe:82:a5:4f:b2:98:c1:c7:73:74:bc:
         f3:cc:e5:9a:b2:55:3d:39:20:61:30:d9:52:aa:e9:64:24:70:
         cc:e0:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 20:44:04 2025 by rpki-client