Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa
File:                     27A298A00C6C11EC82638A40C4F9AE02.roa (raw, json)
Hash identifier:          +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=
Subject key identifier:   5F:21:94:F5:94:21:22:BF:C6:72:C4:BF:68:7E:FB:71:26:57:63:33
Certificate issuer:       /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial:       1045
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:27:10 +0000
ROA not before:           Thu 04 Dec 2025 17:18:53 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        103.131.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 17:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4165 (0x1045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
        Validity
            Not Before: Dec  4 17:18:53 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a468de-bf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:4b:3d:a1:b8:ec:67:db:da:14:78:9e:33:
                    75:ec:bd:1a:86:a9:eb:15:40:20:81:78:b6:29:0d:
                    f5:7c:d6:11:29:de:28:9f:cd:f0:84:a7:a5:ca:8c:
                    d4:6f:82:a4:98:87:ba:27:17:2f:73:1b:f7:12:96:
                    cd:df:fa:6a:72:fc:77:4d:09:dc:ae:1c:14:92:b2:
                    a5:da:fb:2b:89:ed:bf:41:d4:aa:ab:25:d2:b6:6c:
                    e9:13:a6:20:e5:17:98:51:cd:dd:8f:7d:e7:61:dd:
                    77:9c:ee:42:16:a5:5e:34:fe:cb:c1:7f:22:4b:ce:
                    ff:f5:18:a8:3a:3d:79:67:9b:df:e0:d2:e4:f3:ff:
                    85:bc:ea:39:24:54:af:2a:2c:c7:70:cf:c8:33:06:
                    08:2a:8a:0b:c1:66:c2:ea:09:4f:7f:89:38:d9:00:
                    8a:23:5a:d6:cd:fd:40:5e:21:77:d5:5b:01:cf:42:
                    5b:5d:fa:a2:c2:71:af:03:5d:9f:ea:57:bd:be:6d:
                    8e:19:78:f1:00:18:07:3d:03:97:b9:a2:88:01:64:
                    4c:43:a5:23:c5:e8:25:80:92:64:bc:d0:b4:be:83:
                    20:62:c2:5f:cb:ca:cb:b8:e0:f5:c3:88:1a:c4:dd:
                    bd:9b:8c:f9:4a:06:22:32:a5:2a:b5:63:54:3e:84:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:21:94:F5:94:21:22:BF:C6:72:C4:BF:68:7E:FB:71:26:57:63:33
            X509v3 Authority Key Identifier:
                keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:3e:79:7c:3b:67:81:98:0f:25:3d:60:32:bb:43:3a:0d:
         c4:6f:0a:63:17:f3:89:66:13:a5:ca:4c:a9:b3:3c:51:f1:1f:
         0f:5f:e7:27:c0:e0:95:e3:ec:36:38:1d:11:88:eb:17:a8:1f:
         27:28:46:0f:23:30:6a:cc:02:53:1b:5c:9c:7b:fe:16:f9:33:
         61:da:90:ee:f1:76:8c:78:1f:c1:20:5d:56:c1:4d:a6:b8:77:
         f5:a7:c2:0e:89:57:eb:a7:95:fe:39:d1:3a:cc:32:db:f5:84:
         54:22:77:cd:60:0e:f3:4b:b3:75:5c:53:e9:b1:c0:12:80:d5:
         75:4a:ce:bf:61:32:63:66:b0:7d:58:06:b3:f9:41:da:41:d3:
         ea:55:64:f4:74:78:db:be:ac:c3:ca:b1:7d:b6:56:4a:d1:6d:
         76:c2:b9:3c:8d:27:87:0c:97:df:5f:9a:5b:a5:4a:76:80:1d:
         6c:97:a4:8f:12:38:cc:70:93:8a:5f:55:3a:56:6c:7c:85:bb:
         fe:df:8e:b7:84:87:3e:da:63:c0:ba:c4:c2:d7:69:07:99:76:
         a5:5b:3e:d3:d1:e6:bd:8c:0e:e3:4c:86:11:4d:2d:5b:2c:5a:
         ce:d6:02:a2:5e:96:08:db:a2:d5:3c:a8:69:ba:05:8e:b7:6c:
         9b:78:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:19:06 2026 by rpki-client