Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4EEAF1DAE96211ED9A14B935C4F9AE02.roa
File:                     4EEAF1DAE96211ED9A14B935C4F9AE02.roa (raw, json)
Hash identifier:          eFA61QoqVBtok5MgSRR+bu+60yvLcHH5Sjs89fqo4HY=
Subject key identifier:   D6:FC:64:EF:D4:DF:04:B4:FD:D9:CF:D3:02:44:CC:71:43:16:DB:11
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       030F
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4EEAF1DAE96211ED9A14B935C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:51:16 +0000
ROA not before:           Thu 25 Sep 2025 02:20:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        202.27.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Sep 25 02:20:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46074-5c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:d2:ce:31:ce:c7:ad:97:40:f4:ac:d8:4b:
                    2a:b4:22:26:2e:04:37:11:47:b4:7a:96:01:d7:50:
                    f0:26:c6:7b:2a:78:30:ff:b1:00:c5:75:bf:20:3b:
                    9d:9f:ee:92:44:7f:19:b0:3f:8d:17:fe:b1:50:ec:
                    2c:61:8d:2e:6f:a2:77:16:d6:18:06:d9:bd:6b:44:
                    14:ae:0b:bc:0b:79:d7:3a:65:44:d6:67:53:e4:0a:
                    b8:81:5f:dd:71:53:3a:04:17:fb:5c:91:09:0a:53:
                    12:51:4c:61:ce:fe:6e:3b:32:88:8b:9d:2e:d4:6e:
                    58:7b:a0:c3:b7:52:21:cb:e0:56:ab:a5:6c:2b:ad:
                    6e:39:b0:b9:b3:81:6c:1d:37:c5:90:bf:6b:85:e2:
                    d9:4b:c9:99:cf:71:67:14:dd:41:35:82:94:13:d0:
                    ad:51:94:04:85:76:96:41:de:58:c2:22:22:73:03:
                    20:a1:ec:7f:78:f6:a2:a8:28:10:9e:1c:a3:88:2e:
                    95:0e:12:1f:fe:35:7c:2a:c9:c0:de:75:37:c0:f4:
                    cf:f1:2c:e3:9a:bc:3c:c7:97:eb:1e:32:e1:14:97:
                    1c:18:bc:1b:0c:1c:e0:0e:6b:99:68:c8:d2:d3:60:
                    7d:25:1f:cd:dd:27:1c:10:eb:6e:c6:4e:cb:8b:1b:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FC:64:EF:D4:DF:04:B4:FD:D9:CF:D3:02:44:CC:71:43:16:DB:11
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4EEAF1DAE96211ED9A14B935C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:70:d6:a8:d0:4a:17:87:04:1c:f7:ca:51:f6:73:70:15:
         51:d8:bf:5f:9a:3f:02:9d:b0:ba:85:37:7c:4d:43:09:ca:ba:
         a7:c6:a0:cc:32:36:fa:62:9c:45:84:43:12:8d:1e:b2:e5:bb:
         7e:64:77:1d:4b:7f:df:54:87:3a:da:40:fe:c9:56:85:aa:7b:
         8a:cf:22:67:71:79:e3:d8:93:28:77:39:95:4a:34:52:2f:b7:
         67:ea:ed:a2:c7:c0:fa:cb:60:31:18:27:c8:e3:10:04:32:7d:
         01:8b:eb:f2:86:17:08:c1:8c:9e:fe:7a:66:41:5d:60:6a:a7:
         72:1a:7b:a5:8c:e1:bc:f4:bc:5e:8b:49:57:98:e0:85:02:37:
         2d:45:08:e3:d4:d3:ba:a8:3f:f1:b3:b9:56:6f:80:e6:d6:5e:
         db:21:56:63:17:ef:19:99:d3:67:c0:0d:b0:07:ad:87:78:40:
         87:e3:68:ac:49:4c:3d:db:97:c4:b8:dc:f4:89:25:a6:4d:f1:
         f1:4e:f5:c2:5d:57:b1:a0:bb:c4:05:32:73:de:b4:8a:11:4f:
         63:28:a8:51:9b:8f:c5:58:d5:e0:ea:9c:64:e9:f1:92:45:94:
         fd:52:d7:12:c8:a3:a3:a4:e4:d6:18:cb:78:84:6b:d9:d9:23:
         9b:7d:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:03 2026 by rpki-client