Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
File:                     27E5184CCC6211EFA20BEE1BC4F9AE02.roa (raw, json)
Hash identifier:          A1wPnRMGx6RYQ7IXRqQ2UEVamfvjRwCyLh6fwcM/Gl4=
Subject key identifier:   9E:9B:76:25:3E:EE:BF:2C:D1:49:8D:47:3A:49:23:8A:39:0E:AF:83
Certificate issuer:       /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial:       013E
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 05:56:21 +0000
ROA not before:           Thu 03 Sep 2026 05:56:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     16789
IP address blocks:        103.170.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
                          rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
        Validity
            Not Before: Sep  3 05:56:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a990c04-4b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:f4:c9:25:f4:9e:12:e5:bb:69:42:0e:7f:
                    9b:fc:40:45:21:37:40:31:48:45:7d:0d:c3:28:48:
                    5c:91:6a:b3:13:3c:fa:81:e5:87:22:70:d6:9c:2d:
                    79:7b:81:6b:d3:14:65:4d:6a:35:94:d4:58:29:6f:
                    6b:51:39:55:31:90:2c:37:15:b7:d9:06:a0:0d:4c:
                    89:22:95:0f:10:6a:3d:eb:0b:12:42:57:46:05:5c:
                    26:36:40:6c:22:1e:89:18:e4:11:2d:5f:19:30:d8:
                    13:5b:89:60:d9:41:b7:26:f1:08:b7:62:9e:68:84:
                    58:da:5d:32:77:74:d7:e2:d7:c8:6b:eb:00:0e:04:
                    ac:77:77:8d:43:d5:dc:88:dd:06:44:f9:25:cc:6a:
                    fb:96:96:76:2a:59:5c:0a:75:31:34:95:34:31:60:
                    c7:d2:31:c3:7b:cb:e5:19:29:f5:84:9a:85:09:aa:
                    c2:68:0a:8b:7b:3c:9b:ff:26:0d:a5:7a:d8:e6:0c:
                    f9:29:9f:22:0d:0f:b6:89:d8:2e:af:a6:8d:56:45:
                    ee:19:9b:6d:d3:27:57:97:d0:32:6b:8b:00:26:f6:
                    ed:03:27:c7:76:57:e8:f1:e2:f2:10:ab:52:cd:44:
                    35:77:12:87:4a:7d:3b:61:b5:23:4c:8c:2a:9d:89:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:76:25:3E:EE:BF:2C:D1:49:8D:47:3A:49:23:8A:39:0E:AF:83
            X509v3 Authority Key Identifier:
                keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/27E5184CCC6211EFA20BEE1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:09:10:26:9e:c1:e1:c7:33:52:cc:17:5d:85:b4:3c:d7:45:
         64:29:b1:06:2f:45:23:eb:19:a6:14:7f:f8:a9:52:ff:da:41:
         fe:22:96:44:50:d6:8a:e3:82:23:94:d7:97:91:cc:0e:6d:83:
         7c:a1:51:44:98:63:66:e7:95:ea:22:d7:ed:42:17:94:59:97:
         8c:4f:78:40:a3:64:69:39:fd:83:c4:1b:1d:6b:40:23:89:cd:
         6e:c0:a7:3b:56:82:80:1d:1c:c7:d9:a1:0f:8c:5e:83:5b:9f:
         ca:5b:6b:72:8e:89:2f:a7:da:ae:66:b1:33:7a:31:8f:f3:49:
         05:eb:54:d0:66:af:1e:60:b0:6d:8d:c3:3e:fd:0d:2b:9c:e4:
         f5:8f:a5:35:42:2d:c1:a0:42:b3:9d:a7:d2:c6:66:f0:24:4c:
         73:ff:01:e1:d8:eb:df:44:38:54:f7:e4:8c:3a:d0:f1:8d:db:
         65:15:43:94:d5:ac:d4:87:99:2a:67:65:d3:c1:a4:88:aa:2d:
         4c:15:fd:80:c3:67:2a:c5:b5:5a:8a:f5:ff:1a:98:be:b7:69:
         53:0d:c1:77:d7:d0:04:a1:68:67:71:cf:86:1d:57:5a:54:59:
         5d:27:73:71:8a:93:8f:55:6e:51:a1:51:b8:a0:98:33:8d:7f:
         e8:59:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:40 2026 by rpki-client