Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/27977B04816611F1AB207D5289A30FBC.roa
File:                     27977B04816611F1AB207D5289A30FBC.roa (raw, json)
Hash identifier:          UyFIb241AuLpbDftlAbio/XfDKLk0wTp953m8m4bfaQ=
Subject key identifier:   60:8F:D9:42:59:82:3A:33:D4:93:DD:93:2F:A8:AF:28:46:F1:29:37
Certificate issuer:       /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Certificate serial:       01CB
Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/27977B04816611F1AB207D5289A30FBC.roa
Signing time:             Thu 16 Jul 2026 22:31:58 +0000
ROA not before:           Thu 16 Jul 2026 22:31:58 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     2559
IP address blocks:        198.217.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
                          rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
        Validity
            Not Before: Jul 16 22:31:58 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a595bde-2a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:9f:80:35:6f:35:f7:5e:78:69:78:ff:36:
                    f2:40:ff:02:20:99:f8:37:9e:95:3e:d0:7f:e9:96:
                    bf:64:3e:8a:17:d0:3d:7d:bb:77:da:a8:6e:00:99:
                    74:c1:ef:65:48:4d:e4:ec:08:2f:23:22:ec:53:03:
                    b1:d4:39:79:f6:ac:1e:de:b3:df:f0:06:ac:ff:88:
                    8a:88:04:7c:bc:d2:f5:ce:11:f1:3c:d6:71:60:3f:
                    01:55:86:3e:83:0d:3f:fb:13:17:8c:0e:c0:58:ca:
                    40:06:48:dc:fe:1e:7b:ec:72:22:3f:7e:06:44:82:
                    86:b2:b4:e4:39:7d:9f:04:63:9d:ae:c5:ae:cf:9f:
                    e1:66:5f:11:d1:00:4a:c2:a9:70:2d:81:2e:7d:77:
                    32:91:03:9b:db:2d:b2:cc:6f:d8:08:09:22:16:36:
                    a8:5e:79:c2:76:f4:e0:2a:47:59:7a:41:ee:1e:05:
                    20:1d:85:89:bf:89:ab:b5:68:4c:54:73:0d:86:4d:
                    df:ba:98:c4:04:9e:31:35:f0:1b:05:94:89:04:17:
                    82:7b:4d:36:3d:96:aa:4b:e1:af:77:69:2b:39:21:
                    0a:23:38:02:ff:5b:23:20:11:a9:7d:f5:76:7a:44:
                    76:01:74:f2:0e:1f:90:15:8c:4e:56:01:92:e1:26:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8F:D9:42:59:82:3A:33:D4:93:DD:93:2F:A8:AF:28:46:F1:29:37
            X509v3 Authority Key Identifier:
                keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/27977B04816611F1AB207D5289A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:d4:48:ae:d3:02:b9:4b:05:f5:3b:b6:57:12:7d:13:6b:46:
         0e:98:52:97:ba:cd:64:04:7f:c6:72:43:ad:23:36:f4:d1:90:
         52:e0:e7:19:86:1b:2e:dc:b7:ca:6b:6b:82:9a:5b:ee:eb:f9:
         f0:89:ce:83:fc:94:fe:4b:5e:68:47:b9:95:03:bc:cd:0b:07:
         0c:79:68:eb:77:8c:9b:e0:e7:a8:fb:e2:a9:f6:b3:a9:c1:82:
         c7:7b:c3:47:1a:f5:b2:69:aa:86:6a:fc:7d:66:f0:b8:fd:cd:
         77:93:1c:49:92:5f:ab:29:10:c0:79:99:eb:c2:be:9f:93:8f:
         46:41:c3:54:69:1f:8a:81:49:a4:b6:1d:58:5b:e0:c4:f6:1b:
         1a:ff:07:fc:e2:17:3b:9c:08:48:eb:5f:64:75:35:0b:1c:dc:
         e0:bd:6d:0b:aa:b0:b5:6e:17:f7:1e:76:20:91:d1:d7:00:c6:
         df:1f:27:f5:d8:b2:4a:53:74:0d:ee:65:46:ae:3c:10:09:50:
         10:4f:e5:64:d2:55:b8:31:a3:b1:c3:14:8d:c0:df:99:e9:9f:
         0b:55:61:24:e5:80:42:00:be:9e:30:16:7a:8f:97:0f:20:d1:
         a6:29:85:66:2c:23:1e:c3:99:3b:95:0c:7e:df:d0:b8:f5:cc:
         81:b8:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:52 2026 by rpki-client