Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60C547A4F7F511EFA6975C27C4F9AE02.roa
File:                     60C547A4F7F511EFA6975C27C4F9AE02.roa (raw, json)
Hash identifier:          NAl8PB4okopQomBSdbkLEQmBNPSHCd8zvJN49Ovm1aM=
Subject key identifier:   AF:E4:47:3F:DE:88:21:74:05:84:87:7D:61:47:EE:17:96:66:37:E9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6A6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60C547A4F7F511EFA6975C27C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:43:46 +0000
ROA not before:           Mon 06 Jul 2026 17:43:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153318
IP address blocks:        27.0.200.0/24 maxlen: 24
                          27.0.201.0/24 maxlen: 24
                          27.0.202.0/24 maxlen: 24
                          27.0.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63142 (0xf6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:43:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be952-8515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:27:ee:fb:ef:ff:87:fa:cf:ee:32:ab:d5:
                    24:4c:7e:37:e1:1f:e5:41:90:a7:fd:6c:98:73:c5:
                    32:a8:a3:ad:cf:31:4b:88:c8:7a:57:03:04:ca:fd:
                    ce:a3:12:4f:94:b2:51:b4:8d:e5:b8:ef:8c:1c:21:
                    4b:e1:f2:4b:cb:75:74:7e:87:31:1c:a1:59:f7:8a:
                    9f:b3:7c:bf:74:43:41:e4:fa:6a:61:a1:47:59:d2:
                    a2:bb:77:64:f7:7d:0c:d4:dc:88:0f:8b:1d:86:e9:
                    d8:ce:98:40:da:2c:20:71:51:23:c8:77:09:4b:38:
                    60:48:0b:0e:38:9b:a4:e0:f3:4d:97:c6:30:47:7b:
                    36:26:a7:2d:09:9d:f3:42:52:5f:e6:63:69:fd:45:
                    d2:b2:6b:43:78:03:31:b4:2c:c2:2e:3d:6a:3f:44:
                    bd:f2:8a:49:ca:86:4a:33:1e:63:aa:8a:35:69:8f:
                    61:00:2d:a1:f9:af:2e:7b:97:2c:a1:ca:b6:06:a2:
                    77:97:f1:e7:dd:36:e3:64:15:f6:23:cb:38:72:ab:
                    91:71:0e:82:f1:b1:03:73:9d:85:47:78:dd:15:cb:
                    97:9f:b2:d1:a2:b3:4a:ea:52:3d:3a:0c:84:0e:39:
                    d0:d5:b4:bc:6e:57:40:9d:8b:2c:5c:c1:6e:42:7d:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:47:3F:DE:88:21:74:05:84:87:7D:61:47:EE:17:96:66:37:E9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60C547A4F7F511EFA6975C27C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:31:6e:f6:b7:c6:92:b5:f4:47:79:07:28:56:80:53:7a:d5:
         44:0e:a1:71:03:0c:ae:44:ca:e9:7f:e9:2f:3d:77:3a:2c:6f:
         04:3b:92:fb:83:a2:39:02:e7:1f:c4:a9:3d:10:cc:a0:fb:75:
         72:2b:c3:7c:e6:58:40:38:ce:34:1f:0f:ef:9b:21:3d:15:98:
         31:2d:b3:45:8e:30:6c:27:af:b5:1d:71:5b:64:8d:2e:0c:7a:
         97:97:d3:c6:a6:bd:d1:38:61:1d:c6:a5:85:24:40:dd:08:3a:
         f3:41:64:9f:a3:b9:e2:ac:13:2a:5a:7d:7c:ff:55:70:bb:e8:
         ac:49:17:26:6a:a5:78:04:6f:1b:99:4f:6f:74:65:f2:d3:f7:
         aa:98:10:37:fc:5a:6f:0a:34:ed:27:ed:9c:d5:03:81:1e:b8:
         57:9f:92:de:98:f5:98:e6:16:65:11:9c:2a:fd:1d:2c:a7:a8:
         ba:a6:f7:cf:7d:19:03:18:5a:c3:5a:47:a3:45:f9:49:b6:dc:
         50:f6:59:b5:2f:dc:b0:b2:f0:0d:05:2d:a4:a6:f9:69:58:ee:
         5f:24:47:7c:59:c8:0b:4c:59:39:30:f5:86:11:96:ab:4b:1f:
         e3:14:23:ad:37:75:f3:24:9b:59:d6:81:d4:ae:a4:36:b2:2e:
         a3:e5:b8:37
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPamMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDM0NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU5NTItODUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOPjJ+777/+H+s/uMqvVJEx+N+Ef5UGQp/1smHPFMqijrc8xS4jIelcDBMr9
zqMST5SyUbSN5bjvjBwhS+HyS8t1dH6HMRyhWfeKn7N8v3RDQeT6amGhR1nSort3
ZPd9DNTciA+LHYbp2M6YQNosIHFRI8h3CUs4YEgLDjibpODzTZfGMEd7NianLQmd
80JSX+Zjaf1F0rJrQ3gDMbQswi49aj9EvfKKScqGSjMeY6qKNWmPYQAtofmvLnuX
LKHKtgaid5fx590242QV9iPLOHKrkXEOgvGxA3OdhUd43RXLl5+y0aKzSupSPToM
hA450NW0vG5XQJ2LLFzBbkJ9k90CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBSv5Ec/
3oghdAWEh31hR+4XlmY36TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYwQzU0N0E0
RjdGNTExRUZBNjk3NUMyN0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAhsAyDANBgkqhkiG9w0BAQsFAAOCAQEAhjFu9rfGkrX0R3kHKFaA
U3rVRA6hcQMMrkTK6X/pLz13OixvBDuS+4OiOQLnH8SpPRDMoPt1civDfOZYQDjO
NB8P75shPRWYMS2zRY4wbCevtR1xW2SNLgx6l5fTxqa90ThhHcalhSRA3Qg680Fk
n6O54qwTKlp9fP9VcLvorEkXJmqleARvG5lPb3Rl8tP3qpgQN/xabwo07SftnNUD
gR64V5+S3pj1mOYWZRGcKv0dLKeouqb3z30ZAxhaw1pHo0X5SbbcUPZZtS/csLLw
DQUtpKb5aVjuXyRHfFnIC0xZOTD1hhGWq0sf4xQjrTd18ySbWdaB1K6kNrIuo+W4
Nw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:21:16 2026 by rpki-client