Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa
File:                     8ED301D0782011F0BDB6E683C4F9AE02.roa (raw, json)
Hash identifier:          WdYTpOxwaQ+j+4KBzA/L+jmy1fW724k61VLOBUYqe/g=
Subject key identifier:   60:1E:7B:93:18:6B:9F:CC:EF:4B:4B:86:B7:83:9F:17:54:6F:52:00
Certificate issuer:       /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial:       0273
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:49:00 +0000
ROA not before:           Wed 13 Aug 2025 08:44:55 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     681
IP address blocks:        192.73.21.0/24 maxlen: 24
                          192.107.171.0/24 maxlen: 24
                          192.107.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
                          rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
        Validity
            Not Before: Aug 13 08:44:55 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a427ac-95f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:14:ad:d6:20:4b:18:e7:c5:79:48:2d:85:
                    f5:72:98:82:74:d4:5c:49:f7:f1:e5:f2:cb:e7:dc:
                    f1:ea:a1:33:7e:73:25:13:1b:28:dc:c1:9a:b8:6c:
                    18:01:24:22:ba:70:63:bc:12:a7:e1:0e:a7:22:5f:
                    1e:65:09:e2:15:fe:50:c6:5f:17:74:60:64:2a:85:
                    d6:7e:0a:d6:e4:0f:d2:99:8b:c1:29:44:92:23:2a:
                    7d:cb:bc:5a:29:f9:ae:0a:f8:76:3a:dc:8d:f4:f7:
                    82:5a:35:6b:d3:8a:8a:38:85:cf:c9:1e:b2:91:bd:
                    97:f8:e3:84:17:a6:2b:b8:75:b1:68:cc:5a:f3:17:
                    23:a4:5e:29:e5:54:96:6d:9c:04:9a:4c:36:c2:67:
                    06:4d:93:87:7a:2a:97:93:c5:4b:55:02:1a:de:12:
                    b6:5a:1c:4c:70:30:02:02:c1:7f:e8:6a:80:3a:80:
                    f6:2a:10:dc:f8:51:47:4d:21:dd:30:d9:34:11:f8:
                    39:6b:7f:d8:7a:59:eb:6e:fe:06:7b:47:30:0e:fe:
                    87:8d:53:a9:31:f3:da:e7:72:d9:7e:98:7a:5a:fd:
                    bf:b6:f7:42:26:81:f9:0a:b9:13:6f:69:b6:71:c6:
                    00:cc:74:08:88:16:91:31:4c:f6:5b:cd:27:d4:3a:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1E:7B:93:18:6B:9F:CC:EF:4B:4B:86:B7:83:9F:17:54:6F:52:00
            X509v3 Authority Key Identifier:
                keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.73.21.0/24
                  192.107.171.0-192.107.172.255

    Signature Algorithm: sha256WithRSAEncryption
         84:a9:d8:44:0a:6b:46:13:8f:5d:e2:b1:2f:33:56:4e:1a:d9:
         c0:1c:35:c8:d8:6c:1f:95:16:2d:bd:79:9e:b1:be:ab:1c:8c:
         76:e6:e1:7b:00:8a:67:8c:64:0d:99:84:5e:ac:a5:95:e8:64:
         04:12:58:93:aa:2c:34:e9:d9:fe:e4:f5:b5:85:ce:aa:53:7a:
         fe:4a:af:81:7e:1d:78:01:cd:cd:e8:be:ad:9e:93:85:25:60:
         9a:61:33:81:e5:b5:99:64:1e:bd:49:56:07:f2:eb:0a:d2:8b:
         40:c7:95:39:50:e8:f3:c0:ed:64:09:25:ab:27:54:b9:43:95:
         31:c6:85:db:31:2c:14:68:83:71:3e:16:df:3d:4f:cb:c4:7e:
         af:63:88:70:96:25:dd:75:e1:4b:d4:32:15:26:d2:40:9c:10:
         9e:86:8a:76:67:7f:5a:4c:f0:ab:c5:b2:37:7b:e2:99:90:a2:
         69:a8:e0:eb:c2:8a:1f:9c:13:97:11:c6:5e:c1:d1:17:69:92:
         d2:e6:88:e0:82:eb:84:b6:f7:51:b0:92:65:1d:4f:75:fc:ee:
         93:56:ab:fe:41:45:f9:8e:c6:e7:18:32:bc:26:7c:1c:ea:46:
         71:ae:22:a7:b2:69:10:23:9e:c0:ef:d7:91:28:ae:97:35:20:
         05:3e:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:22 2026 by rpki-client