Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/0985425A1DB511F1A030A5CB3F3D8C67.roa
File:                     0985425A1DB511F1A030A5CB3F3D8C67.roa (raw, json)
Hash identifier:          LCbiXJV4M3UWd5Td2YnoUunf4O6JAsggUfEGQHHJ8+s=
Subject key identifier:   0B:DB:53:91:4B:BE:FB:0B:C9:D6:06:60:57:7D:BB:F7:C4:A7:0E:FA
Certificate issuer:       /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
Certificate serial:       54
Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/0985425A1DB511F1A030A5CB3F3D8C67.roa
Signing time:             Sat 01 Aug 2026 10:58:11 +0000
ROA not before:           Sat 01 Aug 2026 10:58:11 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        103.27.244.0/24 maxlen: 24
                          103.27.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl
                          rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
        Validity
            Not Before: Aug  1 10:58:11 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6dd143-3076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:03:32:3d:3e:be:a0:dd:e0:4a:61:c8:6a:
                    21:9a:bd:0d:4b:0f:25:21:a3:69:55:02:a9:85:2e:
                    01:76:52:7c:31:76:53:fe:36:62:8b:a4:7a:54:3c:
                    7a:42:c0:41:91:eb:14:dd:6c:c0:2c:e0:6c:74:97:
                    f9:6d:26:84:69:92:eb:a2:f6:6e:8a:a6:6f:f5:7d:
                    8d:47:d0:44:21:13:9c:a7:ef:a1:f7:9e:8c:b3:1a:
                    66:9f:dd:db:79:c8:66:7f:58:da:16:68:5b:03:70:
                    33:a2:b1:43:3e:05:50:f2:37:03:ae:48:62:81:e6:
                    40:ad:9c:76:cc:67:37:6f:4a:92:66:9f:ff:aa:b2:
                    ca:25:be:54:30:e7:11:c2:d0:4e:fe:c5:ec:d1:59:
                    b6:c0:d3:3c:3d:b9:96:fc:86:67:3e:c1:de:7d:06:
                    04:dc:b1:e1:ca:0a:e2:29:60:4b:0a:bb:79:84:70:
                    a1:8d:33:bc:6b:77:9d:81:d4:40:aa:f2:b3:36:82:
                    b7:48:e1:45:98:96:50:a2:41:b7:8a:7a:c7:72:a9:
                    79:63:4e:0e:e2:b4:bc:d0:c6:eb:68:f0:76:ff:46:
                    ca:39:6c:55:40:7c:68:fa:00:50:3f:43:8e:40:2e:
                    0e:6d:09:44:bc:07:72:48:61:ae:aa:53:8e:95:30:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DB:53:91:4B:BE:FB:0B:C9:D6:06:60:57:7D:BB:F7:C4:A7:0E:FA
            X509v3 Authority Key Identifier:
                keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/0985425A1DB511F1A030A5CB3F3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:a3:db:5f:12:f9:7e:fe:10:b4:5b:7c:a2:41:2c:c0:59:22:
         48:b9:17:08:64:1a:b2:80:77:84:fa:35:19:32:62:4b:fc:f7:
         5d:0b:c2:6d:0a:94:25:32:9e:39:ff:1f:90:11:d1:17:c0:cc:
         52:1d:69:f9:a5:73:3d:fc:2f:42:23:24:07:8f:6c:51:66:bc:
         39:ad:d6:30:5a:36:db:60:52:e6:40:14:7d:b8:82:83:aa:93:
         3a:d4:ad:ed:35:9f:a6:3f:18:ed:32:fd:4f:be:8c:6b:0d:e5:
         a7:8f:21:49:14:63:ad:a9:45:79:74:5a:4e:f9:35:6f:19:af:
         48:a2:94:0a:60:7b:ba:d5:4f:24:fe:e6:f2:f2:2b:fe:ca:b0:
         a0:4d:35:48:c8:9e:58:a4:d4:e7:84:61:5d:58:cc:1c:1f:c6:
         67:f2:61:19:f7:3d:3a:00:4e:73:2b:64:21:ff:b2:76:67:65:
         40:0d:1f:f6:73:7a:88:82:ab:a5:04:89:06:d0:f2:4d:93:a0:
         64:04:95:a4:4b:87:39:f3:4c:3b:5c:52:2a:80:93:4e:44:ec:
         ea:f1:02:ed:f7:8c:0b:80:bd:1b:57:b4:de:54:1f:90:b3:02:
         1f:2d:c2:b3:29:0d:b0:e1:18:3e:76:9d:da:35:b9:76:58:37:
         1f:8f:51:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:35:00 2026 by rpki-client