Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D327C18CDFEC11ED9AB6E147C4F9AE02.roa
File:                     D327C18CDFEC11ED9AB6E147C4F9AE02.roa (raw, json)
Hash identifier:          S/SJPo8hBAyeeEVgtq0TXCoa1DWmA3TcOc6W0YSiYd4=
Subject key identifier:   E2:B5:76:F1:AD:A2:95:E1:9C:1E:4F:61:71:91:17:02:EB:19:16:04
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       25C7
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D327C18CDFEC11ED9AB6E147C4F9AE02.roa
Signing time:             Tue 18 Aug 2026 16:23:50 +0000
ROA not before:           Tue 18 Aug 2026 16:23:50 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     132819
IP address blocks:        203.208.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9671 (0x25c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Aug 18 16:23:50 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a848716-90f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:3e:2a:3f:05:c6:ee:f3:f1:a5:6f:27:04:
                    0e:0d:c6:11:ce:7d:e2:a1:77:6f:be:9b:dd:cb:76:
                    16:ba:4b:9b:26:b4:75:60:3c:0f:e1:6c:24:af:0e:
                    bb:78:b6:c4:94:a1:63:5c:d6:6f:fe:3e:b5:df:38:
                    64:ea:38:e3:5c:31:2a:d2:44:e5:78:90:27:fd:98:
                    e9:fd:50:60:4d:4f:96:4c:ca:fa:51:c2:98:7f:9e:
                    69:36:e8:57:b4:51:f6:2d:7d:af:78:b4:28:06:46:
                    f9:00:b6:c6:1c:a8:7f:6c:fd:98:39:a3:8b:f2:79:
                    8b:f4:a4:27:f0:63:30:25:d1:1a:4e:fe:3a:2d:c3:
                    5c:02:1e:65:f0:2b:39:32:8f:a0:14:f3:ed:d0:c4:
                    5d:cb:5c:fc:b2:f7:16:d0:71:35:5c:21:15:f3:05:
                    15:fb:59:43:75:b1:94:13:2f:5a:4b:42:5c:fa:03:
                    46:e6:30:2b:cb:90:cc:69:e8:55:03:a6:7a:7e:7f:
                    43:94:fc:76:77:2f:fd:23:ec:a1:d1:f0:5e:31:a8:
                    b7:1e:13:db:cd:84:c4:19:c4:6f:39:f6:c4:f1:7c:
                    55:56:33:72:9e:00:25:db:6e:1a:32:43:b6:85:e0:
                    76:3d:55:43:bc:ad:a1:54:8a:9d:d3:69:eb:b7:59:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B5:76:F1:AD:A2:95:E1:9C:1E:4F:61:71:91:17:02:EB:19:16:04
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D327C18CDFEC11ED9AB6E147C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d6:ff:05:34:74:9b:67:30:3b:b2:19:ea:df:35:be:b1:ce:
         3c:75:e4:56:c3:5c:d5:15:53:45:b7:11:f2:18:80:da:d2:0b:
         60:70:c1:32:10:04:07:66:2d:97:c9:82:0b:75:99:53:fe:d1:
         0c:b3:0b:4d:8c:2e:68:6f:e1:c0:b1:88:7f:cd:42:60:71:21:
         b7:70:05:20:0e:dc:93:ca:ac:2e:42:1a:aa:db:aa:bc:09:1d:
         43:ec:8b:18:16:2e:ed:54:96:21:45:89:56:ab:7f:db:79:2a:
         b6:94:33:21:cb:7d:e9:b4:0e:8f:9e:cd:01:f5:3a:a9:f0:0b:
         6b:dd:e9:12:80:55:b3:8d:83:3f:7b:39:b3:d9:1f:d4:6e:6f:
         6c:f9:6f:f8:6a:c9:7f:d0:06:7a:c2:58:76:f7:99:05:7d:25:
         d7:b2:55:0d:3b:7e:75:e7:b4:30:9c:10:a6:4d:37:38:c8:e3:
         4d:a5:ea:7f:b4:c4:48:f7:ff:df:44:81:50:59:ea:da:2d:04:
         e8:67:53:3b:12:d8:42:e7:c5:fe:e9:97:66:22:77:ab:19:dc:
         29:f5:2b:47:7e:10:88:aa:77:d4:be:6c:54:af:0f:3d:cf:06:
         04:ef:bd:04:00:b5:ba:36:0b:65:52:18:26:95:dd:6f:3a:13:
         30:65:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:30:29 2026 by rpki-client