Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/773D7A96B0DC11ECAEC09469C4F9AE02.roa
File:                     773D7A96B0DC11ECAEC09469C4F9AE02.roa (raw, json)
Hash identifier:          /GI7Xb+UM3KOtcERi36EejwBZCQbAwsbnf9p+9iQrZU=
Subject key identifier:   29:EE:72:03:7D:F2:A1:D1:9F:E3:2C:AD:80:78:31:00:59:34:6B:9D
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       25CE
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/773D7A96B0DC11ECAEC09469C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 16:24:06 +0000
ROA not before:           Tue 18 Aug 2026 16:24:06 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     54994
IP address blocks:        203.208.167.192/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9678 (0x25ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Aug 18 16:24:06 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a848726-caff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:ac:85:05:bb:3e:84:97:1f:4a:24:4a:f0:
                    29:87:51:a6:81:a5:f5:12:f9:b0:00:1e:93:cc:22:
                    a9:a5:ac:82:f9:71:7d:f0:ce:fc:4e:1a:f1:03:f7:
                    cc:09:2a:61:4a:45:d1:2e:38:f3:90:51:0d:c8:cb:
                    23:30:ee:80:99:ea:e6:bc:2a:63:ec:6a:d7:9b:e2:
                    83:e6:ba:16:6d:d8:14:87:a2:48:46:eb:8a:1b:63:
                    4b:84:27:c3:cf:56:04:ab:a9:4c:91:d9:b6:7d:cc:
                    df:f3:8b:39:85:54:78:f2:b0:17:7d:0c:5e:64:aa:
                    3b:f6:7d:90:b1:ce:78:36:cf:d2:96:d1:34:f7:c5:
                    f8:07:fa:c0:a4:47:3c:f4:ca:37:13:a6:95:27:fa:
                    8b:61:84:56:32:4f:43:8d:b3:cb:ae:2c:30:ea:9e:
                    d4:e5:13:df:a5:d7:63:3e:8d:5e:76:84:27:aa:22:
                    4b:ea:1b:76:aa:0e:0c:90:9d:ce:71:aa:8b:ad:4e:
                    60:3b:0d:0b:b1:92:69:b8:78:b6:89:10:18:da:c7:
                    0b:10:ba:05:5f:03:c8:e9:4e:9d:df:1a:64:92:7e:
                    99:dd:cc:04:e2:4b:5e:b9:84:f9:74:b5:1d:87:7a:
                    ee:e3:3d:1e:d7:ab:38:c1:44:20:4f:d5:4f:1f:87:
                    54:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:72:03:7D:F2:A1:D1:9F:E3:2C:AD:80:78:31:00:59:34:6B:9D
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/773D7A96B0DC11ECAEC09469C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.167.192/27

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:be:9f:6f:a1:14:eb:32:6a:df:49:e3:9c:76:17:1e:cf:
         cc:17:82:19:69:bf:55:83:25:3f:36:91:cf:77:e7:41:50:b9:
         97:d5:90:cf:1f:c3:f8:89:c6:34:ba:c7:18:cd:b1:48:26:64:
         d3:d2:e9:68:9b:59:0c:3d:d2:03:3b:ff:63:9b:7b:d5:5b:59:
         4e:1a:46:2f:52:8f:58:af:44:da:7c:17:7b:d5:4b:b6:9e:c8:
         af:c4:39:00:35:2e:cc:fb:5e:d5:96:4b:d1:a1:c0:00:4b:9b:
         06:17:1d:01:90:9f:5a:be:d6:d7:43:cb:9f:dd:30:cc:a5:4b:
         16:ab:cb:70:13:3a:5d:5e:06:23:3e:d5:a2:b5:3a:60:70:96:
         cc:c5:61:86:9f:12:51:fd:3f:76:29:86:11:ae:18:5f:15:60:
         97:8d:af:e6:b1:3c:9f:eb:6d:2a:d2:a2:91:d8:ea:7c:e9:85:
         4b:e3:aa:40:d0:b6:c1:8a:b5:6c:63:34:a5:d7:63:73:14:e2:
         9b:88:1c:c2:ee:e1:e4:b9:87:8a:32:bc:53:e6:94:ae:de:95:
         aa:c5:ad:20:d3:be:2e:0a:ab:3d:4d:a1:f5:f6:e8:d8:11:f8:
         77:44:7b:91:21:9d:27:12:f5:f0:4e:76:b5:dd:83:94:a0:7f:
         9a:cb:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:17:21 2026 by rpki-client