Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa
File:                     83B6F66C5E4711EDA05F092CC4F9AE02.roa (raw, json)
Hash identifier:          kAImmlpJ7hpxSNEY+fje33YtCljiGxmlUux8CnBgP6w=
Subject key identifier:   A4:5D:37:AA:A3:D7:96:94:3B:02:FB:CE:77:DE:75:5E:AB:48:A8:21
Certificate issuer:       /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Certificate serial:       0278
Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:19:07 +0000
ROA not before:           Wed 05 Nov 2025 02:16:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133090
IP address blocks:        27.123.20.0/24 maxlen: 24
                          27.123.21.0/24 maxlen: 24
                          27.123.22.0/24 maxlen: 24
                          27.123.23.0/24 maxlen: 24
                          103.153.144.0/24 maxlen: 24
                          103.153.145.0/24 maxlen: 24
                          2401:16c0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl
                          rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
        Validity
            Not Before: Nov  5 02:16:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a43ccb-e1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:36:eb:29:32:5b:53:33:6e:8b:9a:46:8d:7c:
                    11:81:0b:e6:e3:a8:bb:6e:6e:95:df:de:76:12:97:
                    86:4b:c0:ad:45:9d:f9:35:cd:e4:d7:a5:8c:2f:1f:
                    f0:95:1a:ae:37:e9:88:c8:a4:e9:18:55:c1:5f:02:
                    c3:3b:81:5d:d6:88:29:78:4d:90:ec:d6:9e:0d:66:
                    6c:89:d9:d5:69:21:e4:3b:9a:25:82:5d:e8:00:06:
                    8c:19:9e:30:cf:82:7b:94:9f:bb:69:ca:0e:80:d9:
                    44:bb:f3:8a:db:4a:19:47:1e:75:1a:ef:8b:27:b2:
                    8c:28:74:f5:d1:c1:3d:33:96:82:be:03:59:36:38:
                    51:cf:92:77:7a:1b:bd:3a:91:79:12:92:05:92:6a:
                    52:fd:4d:18:55:5b:d4:8d:46:97:75:dd:69:3c:b0:
                    c9:34:fe:c4:e1:61:c0:9b:78:b3:99:8f:48:ac:4e:
                    5d:f3:9c:b8:cc:20:22:59:53:5e:2c:98:d9:d7:22:
                    ee:97:72:07:3e:cc:52:99:5b:eb:c1:69:56:d9:bd:
                    fe:d1:a9:ed:4a:5c:cd:8b:e1:25:f4:dd:a1:6c:c5:
                    e0:05:d3:ed:17:55:16:d6:44:e8:c1:e6:71:e9:40:
                    da:bd:97:b6:46:0f:75:0a:bc:aa:ba:4a:c4:1d:a5:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:37:AA:A3:D7:96:94:3B:02:FB:CE:77:DE:75:5E:AB:48:A8:21
            X509v3 Authority Key Identifier:
                keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.20.0/22
                  103.153.144.0/23
                IPv6:
                  2401:16c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:e1:58:dc:a0:f5:80:b4:a6:17:b2:ea:a9:8a:1b:d2:c2:e8:
         39:81:6c:c8:01:66:66:9a:e0:2b:8e:c9:0c:2b:27:9c:b9:4f:
         cd:87:4c:fc:17:3b:e7:84:25:dd:6b:8d:d4:af:7f:aa:77:94:
         9b:bf:37:66:12:74:80:74:63:d8:22:fb:1a:48:1a:43:d6:d1:
         46:ed:fb:3b:75:ef:b0:e9:e6:60:e4:d6:50:39:b6:cf:7f:67:
         cb:c9:e6:8a:3d:26:45:08:42:bf:c3:4e:d6:ff:9d:47:5c:ca:
         49:9f:39:98:6e:58:6a:6b:ec:6a:7c:db:d0:8a:4c:a2:11:40:
         ea:22:90:04:99:a6:ae:37:55:55:2b:83:de:13:13:d0:42:7a:
         0b:ee:5f:ff:df:e8:eb:29:41:6d:04:28:e9:f8:e4:6c:f1:20:
         05:c6:30:94:d1:08:03:1f:ad:de:01:92:aa:d8:db:a5:5c:90:
         06:90:cd:84:ee:2c:60:41:dc:71:2c:81:11:14:9b:30:9e:16:
         1f:02:73:c2:6e:55:02:37:25:bc:c2:2a:97:73:79:dd:9f:5f:
         75:05:aa:15:9a:4a:77:6d:17:a3:a7:a0:2f:8c:36:64:7d:45:
         d0:14:13:9a:64:ed:3f:da:8e:6e:e5:6c:38:cf:27:4a:5d:da:
         94:8f:dc:d6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMzNjUxMTAvBgNVBAUTKEE2MjgwMzQ0MDFDNjVDRjQ2OTc1REU4QzlCNDY3MkY4
NUUwMEZFOUIwHhcNMjUxMTA1MDIxNjM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2NjYi1lMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6zbrKTJbUzNui5pGjXwRgQvm46i7bm6V3952EpeGS8CtRZ35Nc3k16WMLx/w
lRquN+mIyKTpGFXBXwLDO4Fd1ogpeE2Q7NaeDWZsidnVaSHkO5olgl3oAAaMGZ4w
z4J7lJ+7acoOgNlEu/OK20oZRx51Gu+LJ7KMKHT10cE9M5aCvgNZNjhRz5J3ehu9
OpF5EpIFkmpS/U0YVVvUjUaXdd1pPLDJNP7E4WHAm3izmY9IrE5d85y4zCAiWVNe
LJjZ1yLul3IHPsxSmVvrwWlW2b3+0antSlzNi+El9N2hbMXgBdPtF1UW1kToweZx
6UDavZe2Rg91CryqukrEHaUg0wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFKRdN6qj
15aUOwL7znfedV6rSKghMB8GA1UdIwQYMBaAFKYoA0QBxlz0aXXejJtGcvheAP6b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzM2NS8wOUZCNTE4QTVF
NDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQUnBkZDZNbTBaeS1GNEFf
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BpZ0RSQUhHWFBScGRkNk1tMFp5LUY0QV9wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUMzNjUvMDlGQjUxOEE1RTQ1MTFFREI1MTdEMjJBQzRGOUFFMDIvODNCNkY2NkM1
RTQ3MTFFREEwNUYwOTJDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCG3sUAwQBZ5mQMA0EAgACMAcDBQAkARbAMA0GCSqGSIb3DQEBCwUA
A4IBAQDj4VjcoPWAtKYXsuqpihvSwug5gWzIAWZmmuArjskMKyecuU/Nh0z8Fzvn
hCXda43Ur3+qd5SbvzdmEnSAdGPYIvsaSBpD1tFG7fs7de+w6eZg5NZQObbPf2fL
yeaKPSZFCEK/w07W/51HXMpJnzmYblhqa+xqfNvQikyiEUDqIpAEmaauN1VVK4Pe
ExPQQnoL7l//3+jrKUFtBCjp+ORs8SAFxjCU0QgDH63eAZKq2NulXJAGkM2E7ixg
QdxxLIERFJswnhYfAnPCblUCNyW8wiqXc3ndn191BaoVmkp3bRejp6AvjDZkfUXQ
FBOaZO0/2o5u5Ww4zydKXdqUj9zW
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:32 2026 by rpki-client