Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/27DC7846B78511EFACBD807DC4F9AE02.roa
File:                     27DC7846B78511EFACBD807DC4F9AE02.roa (raw, json)
Hash identifier:          OOByC8/uw6ffnIWwfvMTnrrm+xO8XKIBxcxBWMrFOjo=
Subject key identifier:   91:78:C0:32:43:17:84:0F:11:30:18:F0:F0:93:53:30:8C:2C:CD:38
Certificate issuer:       /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial:       0433
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/27DC7846B78511EFACBD807DC4F9AE02.roa
Signing time:             Sun 09 Aug 2026 00:49:44 +0000
ROA not before:           Sun 09 Aug 2026 00:49:44 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137283
IP address blocks:        103.97.176.0/22 maxlen: 24
                          103.242.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
                          rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 00:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
        Validity
            Not Before: Aug  9 00:49:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a77cea7-4b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:a0:5d:33:07:e3:59:0a:c3:c5:ee:40:52:
                    84:ba:b5:59:83:84:84:69:72:77:1e:fa:5c:8c:dc:
                    5a:e6:37:8c:cb:b4:1c:de:af:4b:d3:36:d2:47:6f:
                    81:18:22:b3:c7:eb:3a:c0:bc:c6:a2:0d:04:a7:44:
                    a2:29:4e:87:fe:ed:59:03:46:62:2b:05:dd:f3:b8:
                    e7:f8:89:e4:c7:2b:b5:09:87:0c:f3:6f:bd:48:56:
                    51:f0:d9:56:cf:b8:14:31:1f:e7:9f:42:7c:80:2e:
                    70:56:7c:0b:03:67:bd:46:91:47:bc:eb:93:ad:63:
                    e0:fb:d9:7d:e3:fc:f6:76:79:ce:fd:e2:ac:72:47:
                    ae:6e:9b:1e:3b:8f:d0:c2:1e:bb:6f:b6:06:31:0d:
                    e8:28:bf:e5:95:c8:71:6d:90:94:91:1a:06:8f:e1:
                    eb:c8:97:38:d3:8f:21:5b:9c:fb:ff:39:ca:58:54:
                    70:9d:13:fc:d0:4e:18:4c:1e:ec:ce:9c:3e:b7:f4:
                    4e:cd:28:40:ae:ce:05:42:98:b3:46:60:4a:98:c3:
                    e7:19:cf:6f:05:5d:51:46:49:87:0b:2a:db:e0:7a:
                    6f:ec:0d:b4:4b:ef:8d:ee:48:ab:43:35:21:8d:a3:
                    3b:92:49:f4:23:b8:56:24:9d:ec:20:a6:60:ce:01:
                    06:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:78:C0:32:43:17:84:0F:11:30:18:F0:F0:93:53:30:8C:2C:CD:38
            X509v3 Authority Key Identifier:
                keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/27DC7846B78511EFACBD807DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.176.0/22
                  103.242.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:9d:5f:80:4e:a5:3a:64:60:4e:73:65:cc:f0:29:c0:b1:
         12:00:50:30:9b:f6:88:57:b0:1f:55:d9:6e:76:3a:48:f0:7e:
         09:2d:4c:16:42:f0:55:5d:ac:b9:2b:a6:11:23:bb:2a:a2:77:
         03:c2:d4:64:07:fe:e7:e8:20:6c:0b:f8:6b:4a:1a:85:31:1a:
         6f:64:a2:bf:5f:30:59:6d:2b:1d:45:86:cb:f7:c8:ad:4f:32:
         69:7e:cd:2c:76:a6:aa:5b:7a:bc:22:b3:c5:34:ea:d5:86:01:
         37:a0:db:07:d7:0c:43:ad:fd:d0:3c:5a:ad:17:ae:00:72:af:
         90:4f:7b:a9:e6:83:ea:6f:f2:c3:ff:e8:a5:74:7a:1f:01:21:
         75:50:3c:58:68:c0:fd:bd:97:1e:79:9f:59:94:65:c7:1b:c0:
         0e:8f:5f:3d:38:a9:4d:8c:74:c9:11:2b:19:58:5c:34:72:7c:
         cb:ad:26:70:e9:dd:7a:c6:1a:97:fb:20:c3:ef:93:0f:59:16:
         99:a8:7f:9e:8d:e0:17:0d:40:3d:5d:d3:bb:21:a8:32:c0:4a:
         31:a7:b8:61:6d:2e:86:b0:44:97:8c:9a:0b:53:6b:84:fb:00:
         df:6e:5c:82:82:18:44:96:7a:96:1d:8d:ec:b8:2e:5e:34:b3:
         26:eb:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:20 2026 by rpki-client