Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/27A8153A877A11F1BF0258354C11F970.roa
File:                     27A8153A877A11F1BF0258354C11F970.roa (raw, json)
Hash identifier:          2dvUUDp3HKp6RjeBgGZ/GajEKJeeUV4Gc1PJYH4NGxg=
Subject key identifier:   C9:C5:4C:E8:73:17:B7:47:2E:E2:5E:F5:99:22:C3:21:B0:FF:31:54
Certificate issuer:       /CN=A91ABD41/serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E
Certificate serial:       0E
Authority key identifier: B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/27A8153A877A11F1BF0258354C11F970.roa
Signing time:             Fri 24 Jul 2026 16:10:15 +0000
ROA not before:           Fri 24 Jul 2026 16:10:15 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136429
IP address blocks:        160.236.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.crl
                          rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABD41, serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E
        Validity
            Not Before: Jul 24 16:10:15 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a638e67-2436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:fd:cb:93:66:d8:ad:7f:37:a8:e8:dd:1a:
                    95:c4:d6:a1:11:a2:f6:df:18:28:7c:36:10:99:90:
                    8d:70:63:9f:78:ee:cb:a7:35:38:4a:6f:c2:bc:4e:
                    cf:0b:85:8e:92:de:41:5c:89:83:1b:63:14:09:14:
                    14:ad:2b:f9:51:03:70:f1:b3:be:6a:0f:04:64:2a:
                    37:c0:c1:33:07:92:d2:23:f1:f3:c6:48:60:65:0a:
                    75:65:24:57:b5:82:3f:8e:f7:b2:e1:01:4c:fb:dd:
                    bf:95:b5:ae:81:bc:91:ab:a3:04:c9:77:38:2c:1b:
                    18:f8:7c:ba:b3:0c:eb:72:63:83:aa:d4:9d:82:aa:
                    6a:11:ce:5a:d3:ad:65:c2:a9:2d:89:12:63:79:63:
                    ff:90:a6:08:21:da:62:4e:a5:f3:22:41:27:b9:99:
                    82:c4:71:d3:e7:36:72:2a:d8:e8:7f:e4:4d:88:8c:
                    2a:fc:79:a2:d0:ef:c8:9b:b6:a3:41:74:04:3e:f6:
                    f6:5e:28:fc:40:88:ea:e8:92:94:8a:f8:88:23:89:
                    30:11:4a:86:aa:56:45:a8:0c:25:b7:da:a4:13:ae:
                    a4:07:d7:ce:c2:e6:6b:a0:92:b5:f1:26:6f:58:51:
                    bc:ff:a9:af:73:b5:1a:03:c6:e9:7e:53:ad:71:68:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C5:4C:E8:73:17:B7:47:2E:E2:5E:F5:99:22:C3:21:B0:FF:31:54
            X509v3 Authority Key Identifier:
                keyid:B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/27A8153A877A11F1BF0258354C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:24:32:6f:df:c9:68:d2:78:4c:73:07:ac:f8:c9:e7:5a:
         eb:91:97:12:0f:2b:e1:c6:98:9f:9f:0d:6a:c6:45:3e:48:85:
         1b:50:5f:e1:f7:06:d0:72:e4:0c:c7:6a:17:3a:a9:d5:69:3d:
         f6:f5:9c:d7:22:a9:9b:c3:82:79:3c:25:15:6e:2f:92:19:93:
         8b:72:ef:0a:99:89:17:e2:b5:55:7b:2f:07:b1:10:7c:89:7b:
         55:f3:f8:1f:ae:f1:a3:a4:e4:71:70:6e:2c:9a:ec:28:af:9f:
         99:27:1b:71:fb:4b:79:8d:ce:66:af:49:26:08:a3:d0:69:70:
         fe:74:cd:05:eb:a7:78:61:93:02:60:b3:66:c2:83:5b:05:c8:
         37:b2:7f:f1:fd:23:46:91:d3:2a:77:04:0a:21:d9:aa:56:26:
         03:07:74:71:3c:0f:27:60:8f:f7:99:98:43:3f:21:86:50:d1:
         fd:69:69:98:e9:23:80:a7:87:94:b9:f4:e0:4d:80:e7:dc:03:
         c0:fb:58:87:47:3f:59:11:ec:05:7b:df:17:c6:c4:55:a3:47:
         f3:36:01:4f:4b:c0:a0:dd:f7:f7:cf:9c:80:f2:5a:94:19:9b:
         0c:e7:fd:84:ef:ea:9b:27:37:e0:5a:d8:5e:9f:93:6e:d4:24:
         c6:07:ae:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:45:09 2026 by rpki-client