Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa
File:                     7AA7B416E01011EEA1CA127CC4F9AE02.roa (raw, json)
Hash identifier:          SfIPzDPx+vk2QttaA/BFMlEfJZc2n17RQ43Dr50jvLs=
Subject key identifier:   57:2D:22:06:2B:45:5B:7F:98:11:DA:41:29:4C:5E:91:B1:C9:9E:A7
Certificate issuer:       /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial:       0879
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa
Signing time:             Sat 06 Jun 2026 21:25:35 +0000
ROA not before:           Sat 06 Jun 2026 21:25:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     23926
IP address blocks:        27.123.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
                          rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
        Validity
            Not Before: Jun  6 21:25:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a24904f-d306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:8e:f1:e9:0c:09:3b:89:13:f8:13:29:42:
                    4f:59:16:56:91:85:0d:87:28:56:2a:b9:90:c0:48:
                    2f:5d:06:b3:d9:4e:dc:aa:86:1b:de:39:be:a0:37:
                    f4:d4:1d:a2:54:33:37:2c:3f:fa:f4:dd:98:02:77:
                    dc:ea:15:f6:38:a5:ba:d2:9d:1e:61:77:4a:7d:c1:
                    c3:e3:2b:a9:61:97:f5:a7:6c:33:59:d8:00:7b:76:
                    50:b6:6d:12:0d:f2:80:4b:58:fd:34:45:0f:5d:c5:
                    92:62:87:d8:4e:11:66:64:81:86:13:f3:c9:86:16:
                    20:7e:ee:f0:54:1c:28:87:b3:88:1e:9e:ba:2e:54:
                    a6:4e:84:d2:76:a2:46:31:43:33:f7:d2:23:42:a7:
                    78:a6:2e:54:3d:01:48:6f:44:a8:f8:13:26:8a:05:
                    cb:52:89:ff:15:43:10:b6:c9:9b:4c:c1:26:be:34:
                    bd:65:1c:99:86:ba:66:08:b9:81:eb:dc:07:c8:a1:
                    0a:2e:d5:96:de:22:56:b1:09:fb:83:ec:6c:82:85:
                    10:75:46:b0:2b:98:12:3d:35:ca:82:fb:c3:c2:85:
                    73:6f:f3:5d:87:5a:b3:70:79:ec:7c:b0:49:45:c4:
                    cd:37:90:08:d4:ff:57:91:f5:0b:bc:34:bb:b7:cb:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2D:22:06:2B:45:5B:7F:98:11:DA:41:29:4C:5E:91:B1:C9:9E:A7
            X509v3 Authority Key Identifier:
                keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:68:f9:1d:1f:3e:36:cb:0d:70:fd:1e:ba:d7:12:4e:10:
         a1:ae:43:bd:bf:d5:e1:a8:c9:cd:4b:fb:61:f0:31:41:86:b5:
         4f:7e:e6:2d:09:68:e7:98:5d:96:dd:44:c7:b8:5d:cc:ee:5c:
         26:67:42:e8:72:67:d5:06:69:ed:43:21:a2:55:a7:61:f0:a2:
         3f:7d:42:fc:c2:c8:37:32:d9:6a:96:f8:a4:40:c4:6c:47:65:
         07:56:61:5f:d1:f5:41:16:c5:9b:52:f8:85:29:c1:f0:e7:6f:
         6c:d3:7c:a3:5d:99:fd:eb:86:7d:8c:38:e7:4f:75:b6:53:20:
         fb:94:81:c2:3a:e4:fb:b5:a7:2b:ba:12:6d:ac:2d:37:7a:1e:
         bf:b6:4b:09:41:60:54:03:f1:32:ba:f0:61:d9:9c:41:98:fd:
         f2:c4:c4:f6:4b:02:c5:db:b2:bc:97:b5:bb:d3:c6:89:93:e1:
         7b:33:76:7a:da:32:15:03:f0:7f:65:7f:61:25:0c:e1:47:b5:
         ff:52:1a:f2:98:8f:3f:3d:8b:c3:2a:e2:45:65:12:de:35:3e:
         31:ff:27:ba:02:13:52:d1:cf:2c:8b:ab:70:cf:d6:ce:69:23:
         41:28:35:42:ba:82:2f:15:9a:a5:c9:16:a5:7e:92:54:d5:0b:
         ae:85:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:30 2026 by rpki-client