Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A7A72BF24B0611EF91534014C4F9AE02.roa
File:                     A7A72BF24B0611EF91534014C4F9AE02.roa (raw, json)
Hash identifier:          RMfV3v+YMKrEsv4J/X9BeNndnRE9fJpMKXXZWqx+jrk=
Subject key identifier:   8F:17:0E:5A:5B:AB:0E:F8:0D:8C:3A:35:7B:E7:72:E6:74:41:8B:52
Certificate issuer:       /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial:       0B1F
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A7A72BF24B0611EF91534014C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:47:17 +0000
ROA not before:           Sat 08 Nov 2025 19:10:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        27.124.61.0/24 maxlen: 24
                          182.173.70.0/24 maxlen: 24
                          182.173.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
                          rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2847 (0xb1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
        Validity
            Not Before: Nov  8 19:10:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47ba5-6f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:1a:09:03:09:f3:34:61:30:05:00:b1:60:
                    6c:d6:cb:39:0d:13:d0:7a:b4:18:e6:c7:75:9f:23:
                    cc:cb:2a:c6:19:3c:06:fe:22:51:e4:02:5a:80:fe:
                    60:f1:52:1d:e9:d0:a7:00:ed:5c:1b:b6:5b:aa:56:
                    b5:61:26:e0:d2:66:aa:d7:13:e5:c6:6a:c3:3c:7d:
                    bb:f8:af:4d:de:22:db:2e:f2:8e:f3:02:b9:e5:91:
                    26:a0:96:34:c0:d4:f1:fe:e0:a4:d3:b1:ff:41:b4:
                    52:7e:7a:d3:e3:10:96:00:f4:b6:30:30:ac:cd:f6:
                    fe:79:0a:d3:25:92:46:b7:56:52:d3:0e:3b:75:79:
                    00:d2:37:e8:f9:2e:cf:fe:10:67:af:4e:78:19:d2:
                    93:b7:3b:4c:b8:8b:9b:43:ee:df:04:36:ab:01:47:
                    32:31:21:0f:2e:ca:79:c0:1b:ec:f7:3c:f2:2b:07:
                    90:a5:41:eb:94:a2:08:69:6b:b8:5a:53:df:9a:51:
                    19:67:75:9c:35:00:c5:e5:3d:20:47:db:f6:ce:59:
                    fb:c3:49:94:0c:e6:b2:6d:1d:bb:04:68:ac:e6:9e:
                    58:b5:b2:7d:40:25:85:a8:58:6e:a7:83:b2:e9:b0:
                    a7:99:f5:81:c6:fc:bc:69:37:77:f6:5e:b8:ab:51:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:17:0E:5A:5B:AB:0E:F8:0D:8C:3A:35:7B:E7:72:E6:74:41:8B:52
            X509v3 Authority Key Identifier:
                keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A7A72BF24B0611EF91534014C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.61.0/24
                  182.173.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:4f:58:8e:fa:d2:e4:d3:d2:8d:06:3f:ff:29:4b:50:f4:
         c3:43:61:e0:39:43:55:b4:37:4d:48:68:cc:3c:5b:3e:3c:41:
         d8:f6:7c:89:df:f0:8e:ec:0d:16:1c:5e:a1:10:39:c5:9c:b9:
         6a:cf:b3:8c:dc:01:e9:2f:3d:5b:3f:72:b9:9e:bc:c3:e8:33:
         ac:b8:cf:86:f1:a4:e0:d2:c4:7a:19:1f:f7:5e:b0:7a:b7:3a:
         bb:ad:74:5f:01:66:ab:30:54:a8:e4:58:43:b6:f6:c6:d5:50:
         02:dc:a5:0a:34:80:11:b4:b3:f5:d3:c8:9d:9e:ed:77:37:cb:
         29:c5:7d:07:a0:c5:f0:fa:93:fb:14:56:db:1f:50:1a:e0:ac:
         8b:1f:df:a8:52:aa:af:f3:15:31:95:0f:14:ed:b8:74:80:1a:
         ff:53:e0:09:ba:16:e6:6b:dc:78:f7:8c:8d:73:9f:9f:77:68:
         42:d1:d1:33:90:23:a5:c0:f0:a9:87:34:e9:61:46:1f:c6:0b:
         8a:e3:50:29:13:e9:92:8d:fb:1f:b5:23:fa:9c:93:f6:d2:f1:
         31:d0:f1:bb:1c:53:35:c8:eb:62:e1:85:f4:76:31:58:ea:69:
         05:c5:a6:fe:cd:f1:f0:48:13:13:2e:8f:66:5b:9a:97:d1:16:
         9f:9a:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:45 2026 by rpki-client