Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/27623F48040711F193DC81CA173D8C67.roa
File:                     27623F48040711F193DC81CA173D8C67.roa (raw, json)
Hash identifier:          mzCIZfKTucgozxw0jlm4c47n5Z3DTwwALFRuv9z3XQs=
Subject key identifier:   09:D9:14:3F:5C:E9:71:0E:1F:2A:08:64:B4:FD:18:F3:0D:6E:89:CE
Certificate issuer:       /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
Certificate serial:       023D
Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/27623F48040711F193DC81CA173D8C67.roa
Signing time:             Tue 23 Jun 2026 03:31:22 +0000
ROA not before:           Tue 23 Jun 2026 03:31:22 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151360
IP address blocks:        103.208.88.0/23 maxlen: 23
                          2401:220::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl
                          rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
        Validity
            Not Before: Jun 23 03:31:22 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a39fe0a-bb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:4c:2f:64:60:4b:e5:c5:48:d2:84:2a:35:
                    b2:d7:6f:e0:be:5e:ba:00:8e:14:0a:6f:9b:db:a7:
                    e1:dd:ea:85:cd:a9:55:ea:65:b6:ca:f0:0e:0f:f6:
                    e7:22:d1:2e:f5:10:3e:d7:09:c8:45:76:f0:e8:5f:
                    a8:f1:0a:df:87:af:f5:e3:3c:69:c4:42:a5:20:3a:
                    56:ba:a1:11:1f:ea:61:7d:ff:e8:15:59:f3:51:96:
                    60:51:74:72:f4:8d:33:da:89:12:39:1c:53:8f:b4:
                    7f:4f:a9:af:a6:08:7e:26:5f:bb:fc:12:b1:04:36:
                    6a:52:55:9b:64:f2:f2:14:96:19:1c:be:26:91:b5:
                    6c:18:c7:14:8d:df:f8:9d:b0:cc:fa:33:21:e3:db:
                    46:ef:bb:96:43:f6:8a:57:02:b1:f4:44:e3:d6:32:
                    5c:c6:7d:ab:0c:b3:e4:2d:4f:43:20:52:01:85:8f:
                    d6:72:1b:41:77:fe:56:c5:50:55:75:db:09:8d:5b:
                    99:ee:f9:af:de:91:3d:5a:80:72:30:c5:8d:1b:96:
                    2a:ff:c9:c8:d0:ca:90:45:e5:17:6c:b9:9b:77:b8:
                    ec:cc:8d:c8:d8:02:9e:af:22:61:e6:fb:f7:99:d5:
                    54:55:8d:ca:45:ca:f0:11:32:77:6b:0a:61:1b:8f:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D9:14:3F:5C:E9:71:0E:1F:2A:08:64:B4:FD:18:F3:0D:6E:89:CE
            X509v3 Authority Key Identifier:
                keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/27623F48040711F193DC81CA173D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.88.0/23
                IPv6:
                  2401:220::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:69:55:c5:79:25:06:12:c5:90:c9:f9:30:cf:e8:9a:74:15:
         49:19:f5:af:b9:33:a5:df:cd:21:41:46:7b:d8:56:50:28:b2:
         f3:35:81:6b:cb:80:68:51:67:92:0d:02:4e:9a:18:35:07:91:
         e4:3d:d5:98:b9:17:13:5c:81:0a:2a:1e:59:88:be:09:48:d3:
         f0:98:2d:20:a5:1c:70:cc:e7:aa:48:f2:55:d6:5e:e9:a6:64:
         ba:0a:0e:fe:ed:31:a4:06:e4:a7:dd:96:1f:3b:7e:77:a3:09:
         be:9a:b7:6d:39:a1:31:1a:bd:66:0c:02:99:72:6c:7f:ad:9d:
         92:9d:82:03:e0:76:e9:b3:75:de:9b:bc:79:7b:88:5d:c6:17:
         85:7a:52:db:67:9c:ec:9a:3f:b3:77:d1:56:59:33:e1:85:ad:
         34:70:9b:11:82:15:65:02:2b:e1:61:21:ac:41:a4:65:ae:cb:
         7b:f9:3f:86:c1:cd:15:68:98:8e:4a:94:f8:01:1b:be:ef:ca:
         52:35:e7:4d:32:7d:9e:23:c8:a0:b5:32:40:e2:09:9d:e0:9e:
         ac:53:2f:39:19:cb:70:af:09:8d:e1:4b:39:9c:ae:d8:f5:2e:
         2d:a8:b8:30:12:10:bc:fe:40:ba:7b:ee:34:2f:ba:31:58:1a:
         6b:d1:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:52 2026 by rpki-client