Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C563005A45C711F0A8D67529C4F9AE02.roa
File:                     C563005A45C711F0A8D67529C4F9AE02.roa (raw, json)
Hash identifier:          aeBi1QNs+wKo6/EZUL+cyq5QOgKapkVp/NUWO2v3AMQ=
Subject key identifier:   F0:52:9E:47:AF:B2:2D:E8:56:B5:BA:A8:35:5A:A1:08:3F:83:A8:3E
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3BB1
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C563005A45C711F0A8D67529C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:24:39 +0000
ROA not before:           Thu 20 Aug 2026 16:24:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     58396
IP address blocks:        27.54.116.0/24 maxlen: 24
                          27.54.117.0/24 maxlen: 24
                          27.54.118.0/24 maxlen: 24
                          103.11.21.0/24 maxlen: 24
                          103.11.222.0/24 maxlen: 24
                          103.225.172.0/23 maxlen: 23
                          103.225.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15281 (0x3bb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:24:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a47-507f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:9e:4e:29:ac:13:3b:4a:f8:45:8a:82:1d:
                    62:35:55:6c:05:43:a6:04:27:31:9b:cb:0a:e3:45:
                    ab:a0:8a:fc:78:e2:28:31:1e:f1:35:a3:f0:0c:62:
                    03:f0:ee:2e:3a:df:fc:01:19:50:ea:14:fe:53:bb:
                    c1:26:f7:a3:91:54:d6:f9:74:fd:19:ca:ce:91:30:
                    62:7c:f0:01:66:2c:32:88:00:23:f3:c9:cd:b1:ed:
                    ac:e6:7e:90:be:03:a4:68:09:a3:4b:86:82:ce:39:
                    48:38:02:9a:b7:23:19:e8:aa:07:4f:7a:d1:d5:67:
                    a0:7e:26:5d:fe:9f:7e:fe:0d:ef:38:cc:05:a4:df:
                    1e:50:8e:05:f5:4f:9c:76:29:31:b8:ec:fb:bc:f8:
                    cd:ea:97:37:44:44:95:87:dd:6b:aa:06:d6:09:9e:
                    78:80:5d:7b:1c:c0:a5:fc:ca:d0:93:75:da:68:d4:
                    d8:1f:7e:91:57:6e:4e:14:be:38:c9:79:bb:23:bf:
                    65:be:4d:a0:2b:c9:5f:21:38:cd:8e:8e:6c:a9:0b:
                    d7:c3:b8:7a:14:53:90:1f:d6:4c:6f:6a:ef:50:9e:
                    16:8a:cb:0b:85:e2:86:97:eb:fd:33:67:f9:eb:99:
                    33:c7:d7:6f:ea:e4:88:ce:28:31:fc:4d:ab:63:f5:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:9E:47:AF:B2:2D:E8:56:B5:BA:A8:35:5A:A1:08:3F:83:A8:3E
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C563005A45C711F0A8D67529C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.116.0-27.54.118.255
                  103.11.21.0/24
                  103.11.222.0/24
                  103.225.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:90:67:3d:8e:98:d2:54:52:ac:f3:2a:33:06:77:2d:5f:83:
         1a:9d:90:3a:7d:60:d7:1d:5c:3f:e1:89:21:25:77:36:5a:40:
         6b:fc:96:90:24:8c:73:c4:65:c6:d1:51:79:20:a5:13:31:4d:
         0e:01:97:4d:d1:3c:c7:14:9d:20:a6:19:dc:15:f8:29:61:39:
         9d:65:07:9f:25:e2:f1:d3:70:af:a0:fc:e1:f4:f9:16:21:8f:
         bc:96:a5:d3:50:c4:96:95:9b:31:44:c8:58:d5:73:35:35:c8:
         80:b7:f1:b1:6a:6e:7b:21:b9:0e:cb:31:70:79:28:a9:13:a3:
         9f:23:8c:38:fd:55:5f:13:15:c5:07:d3:65:62:e7:ed:a8:44:
         fc:03:ef:c0:94:47:12:67:b4:32:db:b3:61:ed:fa:e7:d5:52:
         14:6e:bf:e1:66:2d:a6:ae:1a:42:a9:9e:7d:e7:dc:8e:5c:4b:
         43:12:cc:c8:b4:b5:32:98:7f:ea:08:1b:db:f0:e5:94:7a:44:
         0c:33:4b:8a:76:69:29:89:97:78:32:22:0f:22:d2:18:9c:c0:
         71:7e:1c:4b:80:50:5c:d2:27:46:75:8e:e2:c1:67:30:7e:a7:
         c3:89:bd:c1:57:f8:e4:4a:ed:7e:77:38:81:20:9c:51:26:cd:
         65:66:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:04 2026 by rpki-client