Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa
File:                     E727A05600FD11EB9286115AC4F9AE02.roa (raw, json)
Hash identifier:          2t3D446HtuMK38q5RRPq9X6K9IKiAUEQlrIBeJdYxBg=
Subject key identifier:   C2:79:D4:F9:8F:49:FC:E3:A8:9B:58:00:78:2A:36:78:67:D7:33:65
Certificate issuer:       /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Certificate serial:       0E18
Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 18:35:41 +0000
ROA not before:           Fri 02 Oct 2026 18:35:41 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     24341
IP address blocks:        180.178.120.0/24 maxlen: 24
                          180.178.121.0/24 maxlen: 24
                          180.178.122.0/24 maxlen: 24
                          180.178.123.0/24 maxlen: 24
                          2401:8180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3608 (0xe18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
        Validity
            Not Before: Oct  2 18:35:41 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6abff97d-c760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:3a:bd:03:a0:f1:2c:fa:da:25:22:5f:d3:
                    79:98:00:c1:87:75:2f:1b:9e:96:c4:26:67:aa:5e:
                    f2:b2:e8:14:99:38:70:af:1a:02:cc:57:0a:d6:99:
                    05:1a:f6:a9:7a:2c:3e:e9:82:1d:d3:02:7a:64:f1:
                    5b:ca:5b:80:35:77:39:6f:03:02:55:78:2c:0e:1a:
                    a7:34:16:f1:f7:bb:09:88:31:c2:83:da:60:56:f8:
                    3f:7d:dd:7d:8a:36:a9:f7:dd:50:0b:95:63:42:fe:
                    54:3b:64:d8:80:af:0d:ac:f0:11:da:b2:7b:fa:22:
                    c4:47:65:38:47:31:d4:1f:b5:40:c3:f7:c3:17:fb:
                    6e:00:85:24:3d:c0:16:1f:4a:1b:9b:a1:dd:15:68:
                    e5:cf:90:fe:4c:81:58:04:c9:ea:09:92:17:e9:1f:
                    d4:23:a3:e2:16:38:72:f6:9b:57:9d:53:2b:09:57:
                    0c:d3:38:12:bf:57:36:1e:3e:36:ed:29:44:54:f9:
                    6d:f0:3a:35:5c:70:2b:3c:7c:d8:06:c9:01:df:7e:
                    52:96:c1:83:6e:9d:e9:f9:b4:aa:ab:44:42:da:e0:
                    50:a3:41:29:b5:1a:11:22:7b:70:14:1e:5d:5a:ea:
                    56:49:06:d2:e6:2f:25:88:fd:b8:9c:56:6c:8c:07:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:D4:F9:8F:49:FC:E3:A8:9B:58:00:78:2A:36:78:67:D7:33:65
            X509v3 Authority Key Identifier:
                keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.120.0/22
                IPv6:
                  2401:8180::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:df:7f:f8:ea:fa:df:e9:af:1a:f1:37:84:cb:e9:51:81:a1:
         96:9f:32:d0:25:bb:37:0e:db:13:52:98:22:1d:43:d0:0d:d1:
         e6:4e:12:84:d1:ef:84:1d:8d:29:60:d8:83:bd:6e:20:86:a2:
         2f:c3:f1:28:14:79:bb:2d:6e:2f:42:17:81:ed:36:de:d5:e2:
         5c:47:d1:02:33:14:e0:bf:67:33:26:b1:dd:70:d1:49:e3:1c:
         1f:b7:bb:64:5b:31:10:f9:16:55:3c:4b:f4:09:4d:13:11:8e:
         f3:84:f1:52:87:5a:fb:a9:2c:55:78:ae:6c:ac:7c:de:29:3d:
         8e:cc:b7:d4:fc:c0:8b:da:df:81:8b:9b:1c:a0:88:ef:fa:7e:
         82:f6:8e:be:68:40:2a:07:bf:88:a6:b7:59:fa:3e:06:91:ea:
         bf:0b:5c:2d:cf:e5:49:24:44:d0:fc:2f:b5:e1:1f:0e:09:d2:
         3c:a6:97:38:2e:1a:5f:40:a7:7c:e7:07:e0:87:04:57:6c:85:
         50:eb:38:2b:2e:6d:02:01:34:4b:d8:ec:72:1f:f2:1c:70:4e:
         51:be:28:1a:21:2a:27:24:78:3f:db:d5:c4:3f:88:9c:c2:4d:
         4b:b7:b2:c6:e6:af:35:e6:bc:f7:ff:19:77:da:f3:61:11:66:
         5f:d6:37:ac
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF
RTcyNDZCOTQwHhcNMjYxMDAyMTgzNTQxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmZjk3ZC1jNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqi06vQOg8Sz62iUiX9N5mADBh3UvG56WxCZnql7ysugUmThwrxoCzFcK1pkF
Gvapeiw+6YId0wJ6ZPFbyluANXc5bwMCVXgsDhqnNBbx97sJiDHCg9pgVvg/fd19
ijap991QC5VjQv5UO2TYgK8NrPAR2rJ7+iLER2U4RzHUH7VAw/fDF/tuAIUkPcAW
H0obm6HdFWjlz5D+TIFYBMnqCZIX6R/UI6PiFjhy9ptXnVMrCVcM0zgSv1c2Hj42
7SlEVPlt8Do1XHArPHzYBskB335SlsGDbp3p+bSqq0RC2uBQo0EptRoRIntwFB5d
WupWSQbS5i8liP24nFZsjAdWWQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMJ51PmP
SfzjqJtYAHgqNnhn1zNlMB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE
QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDkxNjIvMjZBODJFMEFEREMxMTFFOTk4NERFODExQzRGOUFFMDIvRTcyN0EwNTYw
MEZEMTFFQjkyODYxMTVBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCtLJ4MA0EAgACMAcDBQAkAYGAMA0GCSqGSIb3DQEBCwUAA4IBAQCV
33/46vrf6a8a8TeEy+lRgaGWnzLQJbs3DtsTUpgiHUPQDdHmThKE0e+EHY0pYNiD
vW4ghqIvw/EoFHm7LW4vQheB7Tbe1eJcR9ECMxTgv2czJrHdcNFJ4xwft7tkWzEQ
+RZVPEv0CU0TEY7zhPFSh1r7qSxVeK5srHzeKT2OzLfU/MCL2t+Bi5scoIjv+n6C
9o6+aEAqB7+IprdZ+j4Gkeq/C1wtz+VJJETQ/C+14R8OCdI8ppc4LhpfQKd85wfg
hwRXbIVQ6zgrLm0CATRL2OxyH/IccE5RvigaISonJHg/29XEP4icwk1Lt7LG5q81
5rz3/xl32vNhEWZf1jes
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:06:24 2026 by rpki-client