Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/1C3679E8C4A211EC8FD6D313C4F9AE02.roa
File:                     1C3679E8C4A211EC8FD6D313C4F9AE02.roa (raw, json)
Hash identifier:          3fEYiDnMfJ41q2uUI4xXAM9BWNFsWhIVNeViN5QuT84=
Subject key identifier:   3B:D0:C9:56:14:D4:B4:5D:3C:25:A8:48:6B:D4:4A:DB:FB:0D:AE:5F
Certificate issuer:       /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Certificate serial:       03DA
Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/1C3679E8C4A211EC8FD6D313C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:34:20 +0000
ROA not before:           Fri 03 Apr 2026 00:34:20 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        203.27.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl
                          rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
        Validity
            Not Before: Apr  3 00:34:20 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf0b0c-892c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:92:c1:c1:9a:da:ca:47:00:1f:11:1b:e1:
                    b1:b5:2e:95:03:60:7f:70:e0:64:24:ef:3b:6f:b2:
                    a6:e5:1d:3f:9a:d6:2c:02:e2:0f:e3:e6:7c:2f:00:
                    49:8a:13:41:28:fe:e9:7e:5e:c4:7c:32:be:c0:59:
                    fe:49:1a:d8:d0:44:a0:97:8a:ff:94:97:fd:b6:21:
                    a9:a6:3a:91:9a:57:35:6b:ab:d8:b7:29:60:f6:c7:
                    84:ac:92:d4:d9:af:c1:01:95:4b:8f:1a:a9:07:83:
                    0f:dd:ea:64:3c:48:02:c3:96:74:2a:a2:2f:b1:e1:
                    16:dc:1b:4e:ab:07:b9:15:c9:3e:63:3e:c7:6b:91:
                    37:b8:4c:ee:6b:0e:21:04:8f:ee:ed:98:f7:8c:a4:
                    14:b1:60:1a:1e:a9:62:23:fe:7a:ab:d8:ab:0f:d1:
                    5f:ee:df:dd:d6:37:18:e5:6c:f1:4e:32:1d:24:35:
                    a8:55:b3:5b:12:e0:b8:5e:db:10:59:4b:1d:e7:fc:
                    c3:bf:ab:ac:7c:0f:e3:e8:57:89:79:71:c4:35:f8:
                    1b:5d:f6:77:b6:15:78:49:e1:be:c9:1b:91:8c:c6:
                    7e:2e:7f:a4:ec:f1:c9:10:f1:13:f6:46:3b:bf:49:
                    86:9e:dd:e5:90:b0:db:63:21:60:f6:4a:aa:fd:fb:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:C9:56:14:D4:B4:5D:3C:25:A8:48:6B:D4:4A:DB:FB:0D:AE:5F
            X509v3 Authority Key Identifier:
                keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/1C3679E8C4A211EC8FD6D313C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:fd:3f:37:b3:96:b1:33:5a:b9:3d:01:28:bb:33:91:df:
         93:49:71:59:ef:17:65:ac:40:b3:be:b3:d3:d8:33:2a:ae:b0:
         36:a4:04:b6:16:dd:cc:3a:a8:1f:5e:b2:a3:82:18:fd:77:38:
         50:d7:92:03:50:6a:2e:3b:0f:ad:47:f3:54:48:6e:92:40:8e:
         28:aa:fd:da:65:99:97:b8:57:4d:46:72:cb:74:47:a0:83:f1:
         24:76:02:e4:b1:fb:53:07:0e:04:7c:a9:7e:90:7d:46:36:38:
         42:23:ca:97:a0:04:1b:83:e7:21:4d:82:54:a0:00:5a:29:5f:
         66:31:b2:c3:e2:32:94:5e:f5:ea:85:6a:87:1e:c9:45:8c:c3:
         19:83:40:3c:a7:5f:16:53:b6:c3:1f:9e:9c:24:80:ff:f8:c2:
         0d:f9:75:4d:e3:07:46:f8:54:0b:a7:e3:c6:9f:d3:48:a5:c1:
         cd:ea:73:73:a2:c9:b7:94:62:e5:cf:d8:8b:d0:b7:5c:b8:b2:
         e4:be:74:98:a0:8d:42:f7:32:bc:1f:11:fd:f9:d4:07:f9:70:
         99:c3:8b:56:8d:1f:01:6f:7e:36:2d:7e:07:6d:83:b0:18:84:
         a3:8a:2f:cb:b9:29:ff:3a:12:6e:c2:47:d4:7f:84:d5:64:6a:
         1f:ba:b8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:51 2026 by rpki-client