Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa
File:                     27560994BA0611EB8B424C22C4F9AE02.roa (raw, json)
Hash identifier:          1QmBQGDeIJsq2Ec0Pn2mRXmalLXjZCZqNuV6ueE+ONo=
Subject key identifier:   B6:4A:A1:F6:D8:C2:E8:BB:68:27:CD:8B:96:F1:69:73:5F:A1:49:32
Certificate issuer:       /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
Certificate serial:       06DE
Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 22:44:25 +0000
ROA not before:           Fri 02 Oct 2026 22:44:25 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     45939
IP address blocks:        202.4.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl
                          rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758 (0x6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E43F6, serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
        Validity
            Not Before: Oct  2 22:44:25 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac033c9-1679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:54:72:a5:6a:f7:9d:1e:52:32:64:40:f7:
                    7d:c1:a1:be:fa:42:72:2c:61:57:02:26:b4:da:bc:
                    7d:d5:c0:3a:fb:6b:5d:37:62:0e:86:0c:85:f4:3c:
                    fe:65:94:15:5f:34:68:ce:de:12:89:4d:dd:3d:cc:
                    f9:a4:3c:88:84:0d:52:77:db:3c:10:9c:50:db:65:
                    1a:2b:18:43:8d:33:4c:e5:e8:a5:d5:1c:13:94:37:
                    ad:3b:40:a5:4f:77:50:71:b8:aa:5c:34:96:4a:6f:
                    49:d9:bb:72:23:bd:2e:22:70:81:df:3a:2f:60:61:
                    cd:1c:27:e0:68:1f:b3:e2:ed:6f:78:bc:b5:14:c0:
                    80:3b:be:6b:15:65:0e:c0:22:8a:37:8c:d3:86:73:
                    9c:63:8d:12:e0:73:4f:9d:18:5a:8b:91:e7:70:a8:
                    f3:97:da:11:a6:4c:8b:56:13:ea:bf:05:af:86:ed:
                    65:e9:cc:ca:c5:d2:9b:6e:75:cf:b7:9b:b4:a3:85:
                    e1:1b:5a:ec:61:69:30:c3:9b:b4:1b:c7:46:e9:8d:
                    b0:73:68:69:c3:56:6a:e6:44:bc:db:90:52:d7:a9:
                    09:b1:a1:f8:c4:3d:4f:a8:fa:02:93:e4:26:a6:44:
                    b8:b0:48:5a:32:b0:6a:86:cc:c8:b9:9a:8e:be:5b:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4A:A1:F6:D8:C2:E8:BB:68:27:CD:8B:96:F1:69:73:5F:A1:49:32
            X509v3 Authority Key Identifier:
                keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/27560994BA0611EB8B424C22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.4.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:bf:42:5d:bc:19:b0:46:bc:4d:d7:9f:21:3f:b7:48:b7:
         39:bf:2b:62:a5:0f:5d:6f:ae:fe:c8:16:59:1e:b3:5e:2a:45:
         88:a5:49:50:b8:9a:93:27:83:5a:4c:35:1b:c2:c3:43:c5:25:
         b2:17:99:98:1d:e7:87:4e:5b:35:c2:7d:e7:a0:02:fe:ac:f4:
         ff:d0:de:23:ce:1b:6f:97:2c:c1:9d:41:89:9f:e6:17:13:ce:
         b0:a7:9d:b0:84:e8:70:4d:82:40:2c:71:3a:12:79:07:f7:6b:
         de:45:03:43:29:83:d0:ea:ae:0f:fd:b5:9f:cb:f3:f0:bf:5b:
         66:fc:95:bf:04:6e:d3:54:96:3c:9e:74:10:4f:14:29:ac:aa:
         4d:48:14:e3:ca:1a:86:5b:b1:b9:63:6f:27:16:75:01:da:5e:
         e5:64:90:8e:04:50:10:40:ba:d7:69:77:24:e9:8d:57:5a:63:
         3c:b5:c6:53:0d:42:e9:ef:35:60:d2:a0:e5:ab:91:1a:42:68:
         e1:d8:34:7a:f8:75:fa:6b:f0:e3:fc:de:f4:bb:0c:bd:49:f0:
         22:0e:05:0e:bf:ce:53:a0:b8:6e:b4:7e:a8:26:d2:b1:33:9f:
         b5:83:d1:b7:12:9d:96:a9:c4:54:c5:5b:7f:7e:68:43:e3:ce:
         fa:6a:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:23:01 2026 by rpki-client