Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa
File:                     9CEF2622B76E11EF8FCC9767C4F9AE02.roa (raw, json)
Hash identifier:          HSb6XjCDD/PrExNgC4kkLXSRksHnMNuj8kokihkx5ZI=
Subject key identifier:   14:1C:DC:71:48:EC:13:2B:1D:4B:E5:24:6C:DA:7C:66:EC:47:66:6A
Certificate issuer:       /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836
Certificate serial:       7C
Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa
Signing time:             Tue 29 Jul 2025 07:45:22 +0000
ROA not before:           Tue 29 Jul 2025 07:45:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24092
IP address blocks:        27.111.0.0/21 maxlen: 21
                          2407:380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl
                          rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 04:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836
        Validity
            Not Before: Jul 29 07:45:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68887c12-9f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:da:d0:6c:c1:32:af:e2:60:b2:d8:b3:42:
                    6d:06:e7:2a:61:8d:62:3c:fc:99:d0:a2:6d:e3:3c:
                    a7:39:7b:68:7d:4c:96:19:b7:e1:eb:c8:2d:08:89:
                    c6:f8:3b:69:3f:c0:7c:e1:fd:b2:cd:54:93:c3:8d:
                    eb:82:8b:d9:f3:dd:99:d1:d9:da:c1:f8:45:4a:f1:
                    d2:f3:e0:33:94:76:c7:ee:0f:03:96:8a:ab:38:97:
                    a2:ef:19:de:99:8a:68:7d:98:05:cd:34:fa:89:ad:
                    cc:37:72:32:c1:eb:38:31:4e:60:27:e9:8d:ac:71:
                    8f:03:ef:e7:b5:7a:25:0c:c0:5b:1f:a2:f0:4c:6c:
                    be:1b:ee:b1:59:10:19:db:84:07:6b:91:2f:77:d5:
                    a9:cf:30:26:de:61:58:ce:66:34:f8:31:1a:81:02:
                    68:69:7e:4e:6e:8e:0d:ac:f7:35:9a:08:3f:81:74:
                    d4:86:a3:97:4e:f1:42:6e:9c:79:f7:a4:c9:bd:3d:
                    64:30:0b:90:2e:26:c9:06:83:a9:38:40:f0:63:f4:
                    ab:8c:67:58:d8:d8:d3:f6:14:46:d2:d4:40:9b:b4:
                    1f:ba:e6:6f:31:59:45:db:8a:08:d1:9e:e6:c4:84:
                    3d:4b:3c:b2:e8:1b:a1:e3:c1:cc:3d:bb:8b:7d:73:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:DC:71:48:EC:13:2B:1D:4B:E5:24:6C:DA:7C:66:EC:47:66:6A
            X509v3 Authority Key Identifier:
                keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/9CEF2622B76E11EF8FCC9767C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.111.0.0/21
                IPv6:
                  2407:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:82:77:ef:e8:ea:a5:54:06:4d:f9:96:eb:69:1c:a4:b4:a6:
         06:73:fc:e7:d6:7b:0f:46:42:49:65:60:a4:2c:ea:f6:23:a4:
         d8:d4:b2:84:6d:1c:21:6f:c2:de:2c:a5:ae:24:92:76:8f:85:
         f8:02:a1:0e:ba:d8:13:30:00:e3:3c:af:b1:bd:f7:22:3c:1f:
         f3:92:b5:f8:f8:d7:77:44:b0:2e:2c:81:4e:8d:2c:f8:da:0f:
         eb:d9:ff:15:0c:aa:de:ae:de:c9:d0:01:95:3c:1e:41:b1:31:
         29:85:fb:51:ad:81:50:20:28:5b:04:74:5f:90:b5:8d:33:b5:
         cb:0e:38:9a:54:5b:be:4a:3a:c6:ff:2e:ca:f5:16:27:f6:59:
         a2:d4:9e:93:76:3b:4a:e0:f8:99:b7:ec:a7:ad:21:e4:9a:70:
         44:47:66:4c:88:52:d8:b7:b2:f1:69:7e:38:ec:07:d6:fb:09:
         94:19:75:e9:25:bb:0b:6e:c8:84:33:b8:2c:b8:f3:52:5b:a8:
         30:52:bd:aa:42:9f:6e:2b:3f:7f:3d:24:84:1c:7e:10:32:26:
         ac:3a:c1:fd:85:92:34:27:81:a7:3f:a7:5d:59:1d:f8:0d:df:
         0c:e6:e0:f7:f3:6d:a0:1f:fa:ae:4b:62:df:b8:68:fe:88:e6:
         7b:58:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:46:39 2025 by rpki-client