Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/E27754123C6111F08D014F0AC4F9AE02.roa
File:                     E27754123C6111F08D014F0AC4F9AE02.roa (raw, json)
Hash identifier:          nTcQw9tW9VgDB8BtDeVRc3uzCocS+xlG/GUFD0BD7s8=
Subject key identifier:   A0:0E:08:8B:39:72:80:F6:17:E3:40:CB:90:F9:11:CD:44:09:8E:27
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       614D
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/E27754123C6111F08D014F0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:39:29 +0000
ROA not before:           Thu 29 May 2025 07:52:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45590
IP address blocks:        203.184.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 19:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24909 (0x614d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: May 29 07:52:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a487e1-a3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:21:c8:df:5c:88:e2:33:87:c5:f7:03:65:
                    36:c7:9c:b3:f7:77:9a:19:4c:c2:fd:68:91:52:58:
                    93:78:97:33:fc:21:99:09:19:78:c6:59:c7:17:db:
                    85:84:57:58:72:e4:b5:28:cc:07:14:21:5f:6f:5c:
                    2b:55:49:69:a2:85:9d:08:a0:33:91:8e:3a:8d:22:
                    08:ba:96:de:3b:43:ee:50:f7:2d:37:eb:8b:42:9e:
                    2e:cc:0b:83:3d:f9:5e:a0:7d:24:6d:bc:b0:c3:af:
                    6a:18:38:f3:b6:28:d9:68:09:92:ea:c4:24:d4:a5:
                    1e:58:26:3e:09:9e:e7:49:32:81:fc:85:3c:5f:78:
                    f5:40:e9:b4:e0:d6:bb:74:10:ec:bf:49:be:85:98:
                    61:b9:2f:40:6e:93:6b:87:92:fd:61:df:80:b1:ef:
                    2b:47:73:ba:91:fc:38:13:2b:c4:f5:48:28:b3:33:
                    73:1f:f8:b9:88:65:d0:71:d7:97:29:a8:ed:13:91:
                    77:a5:be:c6:1e:fc:57:2c:59:a4:32:66:9d:2a:4b:
                    e6:78:11:a4:58:e4:08:c0:c2:a6:5b:b1:cd:19:75:
                    f9:74:71:54:2f:be:38:21:b9:18:07:c1:6f:97:71:
                    86:7b:07:71:fd:35:5c:69:07:19:93:50:66:6e:7a:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:08:8B:39:72:80:F6:17:E3:40:CB:90:F9:11:CD:44:09:8E:27
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/E27754123C6111F08D014F0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.184.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cc:82:87:67:89:f3:23:0f:3a:39:0e:cc:4a:ad:b5:4d:2f:
         2f:a1:e9:77:59:89:42:08:18:72:1b:39:42:40:a4:fa:3d:19:
         bc:de:04:5e:69:27:cf:93:f0:51:56:2f:4f:d2:bd:19:8b:46:
         b3:0e:3d:ef:99:11:a1:8e:92:9c:20:5d:eb:0d:1d:90:35:28:
         0b:b2:32:ef:0f:c8:5d:af:26:71:80:08:52:78:ac:c2:bc:66:
         e3:62:64:cc:9f:c7:00:77:59:18:a9:6c:f9:f7:08:63:69:2a:
         ea:c8:73:43:1c:56:5b:a3:f3:fe:3d:00:56:dd:da:94:7d:ac:
         0a:96:e0:ff:46:c1:b8:12:76:8e:56:58:51:5c:c7:fa:c1:74:
         a6:3e:d3:75:de:68:d2:d3:bd:eb:e7:43:fc:47:f7:11:5a:94:
         79:e4:62:2f:e5:cd:aa:04:ae:04:05:59:18:73:ab:87:b5:06:
         90:c0:ca:00:43:e5:6f:7e:f2:d8:78:62:3d:91:5c:06:f5:fd:
         b6:55:7d:3e:79:db:de:f6:8a:c2:df:27:40:05:14:78:0f:fb:
         bd:11:c0:33:df:87:39:2d:7c:74:0d:df:be:fd:61:72:42:a7:
         a0:d6:83:d4:22:1d:8a:d8:47:20:bb:ee:ab:23:57:44:2a:e0:
         a3:2d:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:51:26 2026 by rpki-client