Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa
File:                     16AF3BB6AD5311F0BF38B65BC4F9AE02.roa (raw, json)
Hash identifier:          tRLbGeP8ED99pV5zVb2aOK8VA1JI2a3wJTPQp+3GfAg=
Subject key identifier:   B0:30:D1:BF:4D:A9:A0:58:37:E0:D7:43:C6:06:EC:E6:53:46:63:32
Certificate issuer:       /CN=A917F4D6/serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E
Certificate serial:       46
Authority key identifier: 34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:10:42 +0000
ROA not before:           Mon 20 Oct 2025 01:21:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        203.27.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl
                          rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F4D6, serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E
        Validity
            Not Before: Oct 20 01:21:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3d862-0a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4f:9e:34:36:21:25:04:15:da:5d:84:53:62:
                    f9:51:6e:73:fd:c4:aa:7f:86:0b:e0:69:a9:ae:0e:
                    ce:87:1c:66:31:33:3c:74:9b:2e:d6:4b:7b:5f:bf:
                    ad:ef:1f:2d:66:97:53:08:5b:30:01:c6:1b:54:2a:
                    67:55:ba:48:59:ff:4a:1a:f6:13:4b:c9:f2:9e:70:
                    3b:49:14:86:0d:56:d3:21:47:78:04:5f:81:83:83:
                    9a:f7:08:24:2b:3d:1d:32:71:27:68:19:8c:66:f9:
                    39:d9:63:9d:c9:6e:8f:1f:a9:23:24:f3:1a:55:c2:
                    af:15:85:3b:25:b0:49:1e:a3:62:35:7a:86:cf:f4:
                    ec:c7:3d:dc:fa:67:f4:7a:c3:b8:28:96:06:db:c2:
                    33:fc:bf:be:5f:73:df:2d:0e:6a:f5:71:84:aa:7c:
                    1f:79:d1:13:c4:d4:4d:8d:13:b8:6b:69:fe:4b:53:
                    98:0a:18:7a:99:ca:f4:19:62:37:33:f3:4b:57:a2:
                    4b:e6:85:1b:ce:64:b0:66:15:99:8f:62:39:0b:80:
                    16:a1:70:d6:41:91:7f:bf:16:85:94:1f:3b:31:37:
                    2d:16:39:14:3a:a6:30:25:8f:6d:c7:d0:5a:2c:4c:
                    52:1e:50:e4:0e:e9:80:97:2d:91:02:37:c1:b8:32:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:30:D1:BF:4D:A9:A0:58:37:E0:D7:43:C6:06:EC:E6:53:46:63:32
            X509v3 Authority Key Identifier:
                keyid:34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:71:57:41:e3:dc:4a:83:32:26:0c:a1:da:94:42:fd:27:
         01:f8:92:cc:59:01:06:c2:c3:7b:5f:09:5a:b1:1b:a0:68:65:
         1b:c8:b4:c7:9d:d7:0c:c1:1e:41:d9:d6:8b:40:2c:91:e5:d3:
         12:95:c5:ea:c7:5b:4d:0a:f1:ea:c3:0a:40:27:4d:be:c2:02:
         b8:63:54:35:49:e7:94:4f:b2:b2:25:31:61:85:b9:e4:91:dd:
         fc:cf:c1:62:18:db:2a:be:ae:dc:d2:35:88:38:06:29:4a:8f:
         3f:9d:e0:41:f2:8a:2d:0c:6a:ce:ff:5d:33:8d:30:94:ac:97:
         00:8a:71:6c:61:2b:2b:17:02:6e:b5:ad:5b:a5:a0:e8:f6:f9:
         03:c0:e6:6a:ac:41:e7:97:c4:d2:d6:33:ba:99:24:05:ef:92:
         eb:6d:6f:72:94:75:26:0f:b7:15:8f:cb:55:29:30:eb:06:e7:
         ca:29:e8:e2:70:a3:e3:26:2b:15:e5:e8:9a:ed:9f:03:b7:94:
         b7:4d:47:4e:b0:26:ab:a0:69:77:13:64:9c:b2:a8:a6:13:78:
         14:9a:72:f6:de:6d:d9:9c:a9:05:3f:3a:9c:57:51:22:68:b2:
         9d:71:85:86:af:b9:13:9d:68:a0:c0:57:4a:9a:5c:c7:4a:f5:
         04:b7:06:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:51 2026 by rpki-client