Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
File:                     A923DDA2BE0211F090AD9F13C4F9AE02.roa (raw, json)
Hash identifier:          oyYQ6+2tHZaxnwNYENb63S9A5XulHDdWe86HyvVSXS0=
Subject key identifier:   5B:A9:53:AE:95:92:69:63:DF:2E:13:35:54:BC:77:A9:F5:28:64:C0
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       1719
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
Signing time:             Thu 12 Mar 2026 17:21:44 +0000
ROA not before:           Thu 12 Mar 2026 17:21:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206283
IP address blocks:        103.27.20.0/24 maxlen: 24
                          175.111.6.0/24 maxlen: 24
                          2001:fe8:8f00::/40 maxlen: 40
                          2001:fe8:8f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5913 (0x1719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: Mar 12 17:21:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69b2f628-dfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:cb:6d:b4:9e:c7:a3:d6:ff:54:58:b1:59:
                    fb:3d:ed:c6:d7:96:eb:5b:60:04:03:ad:c9:a0:59:
                    70:ba:12:3d:65:3c:e4:4e:39:38:a2:22:2c:c2:c7:
                    ca:af:7a:1e:6d:cf:d4:ca:e0:93:6a:60:d0:6d:5c:
                    de:9f:fb:62:54:fc:02:7f:3c:b7:56:04:e7:a7:b3:
                    90:eb:ee:6e:d8:81:b6:51:f9:38:38:99:f0:9f:79:
                    5b:4d:19:4b:ad:91:92:af:88:4e:8e:c1:8a:a9:52:
                    52:50:48:1e:2a:61:3a:d8:0c:86:e1:54:07:51:63:
                    ab:cb:8f:4b:9a:a6:5b:e7:3e:3b:06:ea:5b:ea:ce:
                    1e:7e:d9:5f:e4:e4:d7:5f:1a:43:f8:eb:25:be:71:
                    95:ce:f3:eb:1a:8e:88:ae:16:05:23:4c:84:36:4f:
                    e4:3b:89:8e:c8:3b:8b:a8:00:df:ba:cd:86:2e:3e:
                    5c:ef:fe:37:d7:ef:dd:8d:a3:c4:4a:a4:9e:29:fe:
                    f6:98:20:9f:85:58:a9:eb:56:46:e2:33:ed:64:6d:
                    93:7f:65:19:eb:e3:22:9a:71:68:01:12:27:cd:35:
                    8c:15:dd:ec:cf:f8:41:38:01:f1:93:07:ec:12:86:
                    98:7c:09:e1:be:51:4b:4b:0a:af:7e:a6:d1:6f:1e:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A9:53:AE:95:92:69:63:DF:2E:13:35:54:BC:77:A9:F5:28:64:C0
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.20.0/24
                  175.111.6.0/24
                IPv6:
                  2001:fe8:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:46:cc:e2:ca:57:e9:db:c4:2c:39:ab:dd:5e:63:5a:c7:b5:
         d2:1a:a0:fc:6b:e4:e3:e3:38:21:ac:a3:7b:59:63:6e:73:d1:
         f5:dc:6a:54:d3:97:0a:ed:63:d2:c4:9b:9f:8c:5b:a7:d8:c2:
         56:f5:a8:63:74:ee:8f:13:a6:3a:e2:40:fa:04:7a:e6:cf:1e:
         42:99:7f:72:2e:d0:ea:ae:5b:20:a3:8a:80:97:84:da:d9:5d:
         d5:15:df:e2:ca:3f:87:08:b7:c1:d4:45:b0:ad:03:de:86:36:
         c1:be:81:dc:e0:21:1c:d5:09:ff:fe:b3:e6:1a:79:a7:12:31:
         f3:03:f3:f0:fe:43:42:ce:e2:d7:b4:a8:85:83:e2:2f:27:fa:
         1b:20:98:a6:19:83:ef:ba:37:8d:3f:c1:b8:e3:1c:9b:8e:35:
         b3:53:0b:fc:57:8e:76:d1:5b:ac:e0:9c:d0:be:ca:8d:fc:b4:
         76:6f:56:11:29:38:00:c8:b1:cc:06:29:cb:af:e4:2e:96:1c:
         5a:62:e7:de:38:c7:5a:98:e6:d7:7e:c8:7a:d8:5e:2a:84:3a:
         36:dc:a4:5f:ef:de:ce:4d:d6:08:f3:29:f2:48:e0:5b:ee:cf:
         91:d1:ad:07:00:c9:09:a6:18:95:d5:e9:53:2e:fc:55:f4:6e:
         ae:7b:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:15:41 2026 by rpki-client