Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/327A1D78812611F1838CF11F75A30FBC.roa
File:                     327A1D78812611F1838CF11F75A30FBC.roa (raw, json)
Hash identifier:          Rt3h5Z63jHSuicgbyMzA2xT7XgZlm/vezIRp0pS0gcM=
Subject key identifier:   18:DD:04:8F:15:D0:32:83:CA:F2:35:C8:F4:17:7A:43:C5:6C:86:6D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6CEB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/327A1D78812611F1838CF11F75A30FBC.roa
Signing time:             Thu 16 Jul 2026 14:54:08 +0000
ROA not before:           Thu 16 Jul 2026 14:54:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151898
IP address blocks:        103.162.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27883 (0x6ceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jul 16 14:54:08 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a58f090-debf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:a4:d2:cc:2a:ed:9e:22:d7:e8:d2:62:4b:
                    fc:b1:fc:65:d9:40:71:20:ec:2c:97:e5:74:48:36:
                    74:9c:8a:e0:e5:5b:16:62:95:8f:05:44:5a:d2:a9:
                    86:dc:5f:db:28:e4:d4:57:ea:05:a6:ce:27:18:6d:
                    b3:ab:af:9b:3e:ba:6d:bb:5c:69:9d:30:0f:c2:0b:
                    88:70:66:dc:81:79:8d:ce:77:ab:1d:9c:99:71:64:
                    85:53:66:5c:81:b8:be:74:da:f8:c5:3a:58:d4:4a:
                    71:f9:a4:64:1e:21:f8:5d:62:b8:d7:91:0e:c9:ff:
                    84:75:91:b1:84:2b:79:05:3e:49:f0:3a:51:7a:c4:
                    eb:e2:d2:8d:40:34:01:1f:be:a0:5c:b0:67:5a:72:
                    34:a0:c4:83:62:de:63:5a:df:00:0c:a3:6b:c4:1f:
                    bd:79:86:fa:84:12:ed:37:32:37:ee:50:24:9a:09:
                    ca:00:b0:9d:9e:d8:4d:98:8a:f9:f8:3d:61:b5:6b:
                    81:c8:53:0f:1f:3c:8c:33:1a:a6:48:c3:df:e9:ac:
                    40:07:72:1f:7d:51:87:f0:2f:96:e7:97:04:f6:04:
                    29:97:c9:20:42:a9:13:53:c2:2c:1d:7f:ea:09:a2:
                    e6:f5:2f:93:f7:8f:a1:59:9b:6b:33:1e:87:8e:be:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:04:8F:15:D0:32:83:CA:F2:35:C8:F4:17:7A:43:C5:6C:86:6D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/327A1D78812611F1838CF11F75A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:24:89:84:6d:bf:83:17:01:11:6f:6b:a9:a6:37:5e:6f:
         bc:78:ad:b6:db:96:8e:ba:53:65:cf:c3:c2:9c:5c:ce:2b:f0:
         fc:0a:14:16:46:1a:4c:7d:64:99:43:1f:e5:6a:52:35:00:29:
         28:0c:52:b5:80:10:fb:16:58:c2:64:2e:26:eb:74:93:8f:ae:
         78:70:d1:61:11:fa:39:b7:8c:d6:60:c4:25:6f:5c:f1:27:31:
         41:42:8d:c0:e6:c4:0c:f1:54:fc:c7:46:6d:dd:99:a9:d0:ff:
         d9:ff:16:11:6b:d3:c1:92:4f:62:f1:b7:5d:c9:fe:f2:2f:63:
         39:ca:98:ad:cc:24:e3:36:16:14:4c:fb:05:4f:44:c5:a5:b2:
         b9:c5:88:3b:3a:00:05:ba:48:75:22:9e:11:59:bf:e4:d3:1f:
         3a:14:7d:55:7e:6e:ef:46:ee:08:e7:46:3b:1c:20:2c:10:ef:
         4a:5e:36:af:c8:2f:46:a0:f2:d2:7a:9f:d4:4f:a2:52:07:62:
         ea:9b:ad:2e:0c:e3:e3:49:42:83:ea:67:cb:31:e8:a3:28:72:
         60:56:2b:52:22:63:a6:f9:4a:c2:6e:dc:c3:52:51:01:29:ea:
         89:47:a0:7a:eb:7d:fd:d2:3c:48:85:02:6c:4f:8f:6e:0e:d4:
         92:e1:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:20 2026 by rpki-client