Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa
File:                     16AF3BB6AD5311F0BF38B65BC4F9AE02.roa (raw, json)
Hash identifier:          JLSamrZ7auaghJjVed0hW8V+Ts45+EixVqK3fzjyw6g=
Subject key identifier:   56:35:AA:5E:3A:DE:51:A0:49:8F:5A:7F:66:B0:3C:DA:6D:67:11:8D
Certificate issuer:       /CN=A917F4D6/serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E
Certificate serial:       98
Authority key identifier: 34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa
Signing time:             Mon 03 Aug 2026 08:58:38 +0000
ROA not before:           Mon 03 Aug 2026 08:58:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        203.27.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl
                          rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F4D6, serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E
        Validity
            Not Before: Aug  3 08:58:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a70583e-8941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:9b:cf:1c:c0:81:05:5f:e0:19:ba:3a:0a:
                    61:05:6e:9f:2b:6f:3b:be:2d:6e:de:cd:aa:7c:54:
                    13:2e:a9:10:9e:a5:21:f8:02:fd:ad:8e:e2:bd:ae:
                    c6:c1:15:ea:f1:4c:f9:79:89:aa:54:5f:40:75:d7:
                    d3:96:6f:db:6c:66:aa:56:80:30:dd:67:c2:24:80:
                    b2:eb:32:4b:66:d6:74:d3:db:f8:96:a3:ef:58:f5:
                    cc:40:57:93:e5:1c:0c:77:b9:7b:3b:6c:08:25:bf:
                    25:2d:d5:79:c9:29:91:c8:26:47:3e:a7:e3:48:13:
                    c7:e3:e6:28:38:81:76:19:c3:fb:7b:73:a2:eb:10:
                    3c:e4:40:a0:08:74:e7:99:98:1a:91:d1:1b:56:29:
                    a2:33:cc:13:84:65:ff:2b:ae:55:b7:b1:f4:1c:76:
                    c9:af:3d:ee:f6:3b:80:ca:14:10:32:5d:23:78:ae:
                    92:11:b7:5b:30:d0:13:64:de:8b:b2:53:27:29:60:
                    d3:bc:e4:2c:74:e4:f1:72:33:c0:59:a9:00:5f:7e:
                    ab:54:82:79:0d:f4:5a:94:0a:71:ea:0a:ee:69:a9:
                    ef:9c:bf:19:8c:a0:9e:5c:7f:ed:03:cf:cd:c4:ca:
                    cc:91:ba:78:ba:3a:31:79:cb:6d:59:0f:06:8c:60:
                    03:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:35:AA:5E:3A:DE:51:A0:49:8F:5A:7F:66:B0:3C:DA:6D:67:11:8D
            X509v3 Authority Key Identifier:
                keyid:34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:8b:0a:2f:7a:ea:ea:56:2a:c1:77:e9:f3:12:0d:5b:74:e6:
         c5:d3:f6:7a:18:db:da:ba:3e:95:4b:bf:47:0f:0b:3e:53:c1:
         94:e9:c5:32:31:5f:a5:21:37:f2:ce:23:e3:f9:c1:bb:c5:71:
         63:bd:31:a1:11:1a:41:20:99:65:39:bd:75:b3:52:e0:85:a6:
         61:b1:6c:1b:57:5e:84:1e:f5:b8:c9:fb:d3:a0:81:dd:d5:f4:
         bf:58:c4:2a:0c:9c:34:a5:ee:03:0f:04:6a:73:b0:94:2b:4c:
         13:31:35:45:48:0f:66:0e:ca:02:45:3c:cd:2e:ad:16:63:da:
         77:25:93:89:c2:0e:1b:fa:52:d0:e5:92:99:b1:3e:6a:e4:77:
         a6:9a:d9:64:54:6d:af:b7:ee:5d:ea:6e:be:bb:0f:b6:07:2b:
         f5:09:9e:53:a8:d6:e9:1c:03:e3:08:b0:8c:cb:7b:b8:72:ea:
         98:8a:40:23:1f:7f:64:29:eb:62:de:5f:cb:86:11:f3:91:a0:
         15:7c:cb:e0:d8:9a:4c:99:6e:c3:ed:a9:b2:07:3b:22:eb:98:
         d0:f2:4b:9a:6f:52:12:65:4a:de:b9:9b:86:f4:8d:94:59:93:
         89:be:98:b4:ce:26:bc:04:65:91:ff:de:d2:69:49:31:04:b8:
         25:7d:4b:7c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y0RDYxMTAvBgNVBAUTKDM0RTYxM0Y5M0UxNjMyRDhDQjhGNjY4MzRDODRCNzFC
NDc3MEI2NkUwHhcNMjYwODAzMDg1ODM4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcwNTgzZS04OTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2KbzxzAgQVf4Bm6OgphBW6fK287vi1u3s2qfFQTLqkQnqUh+AL9rY7iva7G
wRXq8Uz5eYmqVF9AddfTlm/bbGaqVoAw3WfCJICy6zJLZtZ009v4lqPvWPXMQFeT
5RwMd7l7O2wIJb8lLdV5ySmRyCZHPqfjSBPH4+YoOIF2GcP7e3Oi6xA85ECgCHTn
mZgakdEbVimiM8wThGX/K65Vt7H0HHbJrz3u9juAyhQQMl0jeK6SEbdbMNATZN6L
slMnKWDTvOQsdOTxcjPAWakAX36rVIJ5DfRalApx6gruaanvnL8ZjKCeXH/tA8/N
xMrMkbp4ujoxecttWQ8GjGADeQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFY1ql46
3lGgSY9af2awPNptZxGNMB8GA1UdIwQYMBaAFDTmE/k+FjLYy49mg0yEtxtHcLZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRENi9CQkI5MDk5RUFE
NTIxMUYwOTMzRUY4NTdDNEY5QUUwMi9OT1lULVQ0V010akxqMmFEVElTM0cwZHd0
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05PWVQtVDRXTXRqTGoyYURUSVMzRzBkd3RtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0Y0RDYvQkJCOTA5OUVBRDUyMTFGMDkzM0VGODU3QzRGOUFFMDIvMTZBRjNCQjZB
RDUzMTFGMEJGMzhCNjVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxsFMA0GCSqGSIb3DQEBCwUAA4IBAQCsiwoveurqVirBd+nzEg1b
dObF0/Z6GNvauj6VS79HDws+U8GU6cUyMV+lITfyziPj+cG7xXFjvTGhERpBIJll
Ob11s1LghaZhsWwbV16EHvW4yfvToIHd1fS/WMQqDJw0pe4DDwRqc7CUK0wTMTVF
SA9mDsoCRTzNLq0WY9p3JZOJwg4b+lLQ5ZKZsT5q5HemmtlkVG2vt+5d6m6+uw+2
Byv1CZ5TqNbpHAPjCLCMy3u4cuqYikAjH39kKeti3l/LhhHzkaAVfMvg2JpMmW7D
7amyBzsi65jQ8kuab1ISZUreuZuG9I2UWZOJvpi0zia8BGWR/97SaUkxBLglfUt8
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:20 2026 by rpki-client