Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2727CA9C38B511F19E82B1BE93833773.roa
File:                     2727CA9C38B511F19E82B1BE93833773.roa (raw, json)
Hash identifier:          d9tHLkIu10BopPwm8zvcE//ceGtx9XTpXCG7bHG4IUA=
Subject key identifier:   20:10:28:B9:5F:CF:53:45:8C:41:24:8D:34:00:E3:9A:0E:78:99:DE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAF7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2727CA9C38B511F19E82B1BE93833773.roa
Signing time:             Sun 31 May 2026 17:48:21 +0000
ROA not before:           Sun 31 May 2026 17:48:21 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154597
IP address blocks:        163.128.177.0/24 maxlen: 24
                          2001:df6:e3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60151 (0xeaf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:48:21 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7465-f174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:c9:d0:3c:d6:5b:03:67:c8:22:1f:82:f4:
                    61:8d:e8:a2:d7:23:cb:70:2a:b1:13:2a:1c:1b:7e:
                    66:06:af:d9:ca:37:16:0f:85:71:20:8f:3b:01:16:
                    a8:ba:8f:fe:0e:16:63:97:68:90:1b:5e:fd:5a:0e:
                    ef:cc:eb:46:11:64:e9:2c:6b:44:c0:a5:18:ca:c5:
                    e9:ff:21:f1:a1:fa:e7:2f:23:8b:a2:23:9c:7a:db:
                    4a:eb:aa:16:fc:b7:9c:aa:f0:eb:53:9f:59:f3:52:
                    6d:b8:53:30:2e:b8:c1:a8:66:60:92:64:32:53:56:
                    b8:c4:3c:aa:f7:e9:ec:03:b6:78:b3:0b:f0:2a:95:
                    48:5a:59:a0:34:a4:70:7e:b2:39:3a:06:4d:34:5e:
                    b9:88:d2:a6:00:e9:f3:1b:a0:35:f8:8a:9f:81:84:
                    85:01:b4:c9:49:f6:7e:b1:a0:e6:50:9d:94:f9:95:
                    42:19:fd:2e:21:0c:0f:7f:02:65:65:cb:1e:ac:87:
                    49:90:f6:d3:c4:fb:46:74:35:27:a3:21:3e:4c:92:
                    99:cc:bf:25:c1:3c:11:03:b0:89:b6:f5:b0:70:3c:
                    32:92:ff:38:a4:0e:b1:6f:f6:d7:2d:11:d8:c6:5c:
                    43:c5:78:8b:12:de:ae:d6:f0:a5:f8:7d:93:ec:9f:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:28:B9:5F:CF:53:45:8C:41:24:8D:34:00:E3:9A:0E:78:99:DE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2727CA9C38B511F19E82B1BE93833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.177.0/24
                IPv6:
                  2001:df6:e3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:70:7e:9e:c9:44:05:de:0e:81:ad:92:6d:ee:0f:35:ca:
         47:d5:6a:f3:12:84:07:15:da:5b:2f:34:9a:19:d9:fa:80:d2:
         bc:49:f7:51:01:28:b1:f1:30:10:e3:e9:a6:c3:1a:13:95:a8:
         65:58:05:c3:9a:ab:e7:b3:ea:8e:f6:51:03:d4:0d:f6:5b:5d:
         67:cf:a5:5b:e3:57:12:3c:11:31:c3:c9:9d:ca:41:c7:11:50:
         16:e8:40:55:20:ea:cc:4c:82:c5:21:a1:d5:37:ca:40:fb:be:
         c9:eb:24:f9:f2:3b:d8:bd:f5:6a:3a:b0:fa:14:c9:8b:96:32:
         83:36:d1:ee:3d:0f:9d:45:38:8e:a0:b0:d7:52:61:b5:7c:9d:
         db:be:14:35:34:a7:12:1b:28:cd:d1:9e:33:14:5a:4a:f4:e0:
         08:94:4a:cc:13:fb:4a:c2:b5:6b:bb:ca:37:84:2b:b7:e9:03:
         5d:d5:63:2a:e3:80:81:7f:ba:4c:15:b1:66:ac:7d:08:5e:85:
         97:2c:11:16:6d:c0:7c:d8:38:79:a5:6b:b3:f7:b6:93:ab:99:
         c8:e2:f7:ba:26:b9:e8:8a:35:e4:17:8f:89:b2:25:de:16:2d:
         82:6b:32:ec:66:5b:89:7c:7f:e5:7a:75:f1:c5:fa:db:29:55:
         3f:6d:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:02 2026 by rpki-client