Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/365AF68C2CCD11F08845DC73C4F9AE02.roa
File:                     365AF68C2CCD11F08845DC73C4F9AE02.roa (raw, json)
Hash identifier:          Q6hGObTtAZVZ1hsWC5VBV1zlub8rHOzpBaXMIZTV03s=
Subject key identifier:   38:E9:17:F3:6C:2C:A8:9E:F7:E2:E3:6A:FB:83:3E:B7:DF:D5:32:6F
Certificate issuer:       /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial:       BD
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/365AF68C2CCD11F08845DC73C4F9AE02.roa
Signing time:             Fri 01 May 2026 07:40:18 +0000
ROA not before:           Fri 01 May 2026 07:40:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132911
IP address blocks:        103.27.120.0/24 maxlen: 24
                          2001:df5:5bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
                          rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
        Validity
            Not Before: May  1 07:40:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f458e2-2ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:9c:22:c9:2e:83:a0:b9:fd:f8:77:9a:62:
                    04:48:a8:5d:c4:e6:4d:d9:d5:85:29:7e:5e:fc:a0:
                    d4:04:3d:88:a6:57:bb:98:a6:ae:18:4e:39:04:a1:
                    f3:81:d4:8e:6e:c6:c3:a5:4e:86:b0:8b:e7:dc:f9:
                    9a:65:17:70:cc:b2:76:e1:d6:f0:6d:e8:4c:4a:8d:
                    c9:b0:3a:aa:0c:69:2e:29:c5:f0:93:49:66:e4:ae:
                    98:a1:0a:22:a6:51:ef:ad:1a:69:4a:12:4a:fc:a8:
                    26:02:f0:28:98:c7:53:40:56:38:df:92:a3:3a:5d:
                    92:29:98:87:7f:9a:8a:18:07:d7:e3:82:24:60:49:
                    89:c2:eb:7c:b7:31:2f:91:19:83:36:ff:72:d7:2b:
                    fa:d0:45:90:13:c5:39:e0:f9:dd:e9:46:28:50:bb:
                    c3:dc:7d:c0:2a:b0:e5:c0:2d:2a:7c:54:83:87:79:
                    7e:20:bc:b4:b4:0e:95:e3:32:ee:5d:1d:f0:e8:b6:
                    5f:57:9a:88:3c:2b:0a:2e:04:aa:09:37:36:4a:39:
                    18:13:f8:7d:44:2b:06:0c:35:6e:71:24:45:6c:05:
                    db:38:c1:22:96:6a:42:87:41:5f:51:20:11:45:c2:
                    a2:66:49:86:c4:33:db:73:00:a2:65:a8:65:40:0d:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E9:17:F3:6C:2C:A8:9E:F7:E2:E3:6A:FB:83:3E:B7:DF:D5:32:6F
            X509v3 Authority Key Identifier:
                keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/365AF68C2CCD11F08845DC73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.120.0/24
                IPv6:
                  2001:df5:5bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:24:c5:bc:39:c9:5e:c0:08:76:36:12:8c:39:3c:54:21:
         cf:05:7b:c5:ba:81:58:b9:62:42:0a:ab:14:d4:d7:95:03:04:
         76:35:b1:91:e4:ec:18:9e:78:e6:a9:b4:f4:c4:17:3b:f8:ea:
         04:f3:d7:a8:53:b3:de:66:69:19:c6:91:00:89:15:29:c9:8c:
         dc:4c:4c:39:d6:77:77:f4:80:f5:ec:0e:62:09:4e:30:d2:f1:
         56:56:3e:aa:e6:fc:2d:dc:f1:ce:f9:8c:9b:1d:b3:05:23:e6:
         25:d5:48:58:7a:30:2f:3c:9b:fa:53:fc:da:bd:24:fa:65:ab:
         de:14:df:cd:6d:75:4d:76:a9:57:df:38:e8:a8:79:cc:c9:eb:
         10:fd:36:f4:aa:f9:5d:64:69:f0:93:1f:0e:a2:ab:5f:68:a6:
         1a:25:d8:45:6b:f0:4f:1a:a5:ad:01:d1:bb:f8:44:c8:67:dc:
         e3:d5:fe:91:2b:81:1c:68:ce:8e:85:6d:50:bb:b5:93:1b:59:
         9a:ab:89:34:75:a4:05:21:e3:b4:69:db:51:82:a3:95:d3:23:
         45:21:ff:46:c1:e0:10:b5:ed:27:ae:06:c9:0d:22:c8:7e:d7:
         43:f4:f7:93:35:84:de:c7:eb:a1:f3:a2:7f:20:6c:0c:b3:0f:
         b1:fc:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:42:12 2026 by rpki-client