Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/E27754123C6111F08D014F0AC4F9AE02.roa
File:                     E27754123C6111F08D014F0AC4F9AE02.roa (raw, json)
Hash identifier:          b23FRG3ZL+4a0wkil0yN0lGl3CKutHPSn21eXZNETBQ=
Subject key identifier:   E7:84:13:40:1F:DF:83:70:F2:94:80:2B:0F:2F:58:3E:B9:33:7A:5F
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       617F
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/E27754123C6111F08D014F0AC4F9AE02.roa
Signing time:             Thu 16 Apr 2026 20:25:46 +0000
ROA not before:           Thu 16 Apr 2026 20:25:46 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     45590
IP address blocks:        203.184.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24959 (0x617f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 16 20:25:46 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e145ca-f2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7d:3c:73:ec:28:66:8f:d3:76:d1:e3:54:73:
                    7f:19:82:61:4c:7e:2b:6f:ce:c0:ec:f6:aa:71:98:
                    a0:6e:95:cb:07:bb:e6:59:8f:f6:cb:ee:34:30:ab:
                    a9:da:8c:b4:49:c9:3a:5f:66:83:0f:e0:b6:35:40:
                    1d:fb:99:f4:ea:b3:71:18:b0:cf:27:da:8d:00:22:
                    88:06:3d:01:9b:b7:50:66:e6:27:c9:b2:ad:26:00:
                    02:fb:a3:8b:0b:d3:70:ec:04:a6:08:58:49:bd:8a:
                    bc:5f:16:ec:16:38:6f:80:9c:cc:39:65:a8:2c:c4:
                    7d:3c:c2:21:4a:fe:cc:f8:ed:e8:0f:69:09:ad:c9:
                    c8:05:6b:98:69:63:46:4e:7f:4f:34:04:a4:af:8e:
                    cf:0f:64:a1:32:fc:bb:ee:68:0a:f1:06:8f:1d:4a:
                    af:ed:c4:c2:68:0e:14:80:fa:31:23:b7:0a:c2:84:
                    c1:47:87:ad:56:a4:0a:31:4c:b9:b6:21:e4:77:27:
                    eb:5d:f1:cb:20:b2:23:c9:c4:32:c3:f1:64:79:29:
                    83:40:64:19:45:fe:4b:b5:b4:57:a9:85:ba:75:81:
                    fe:20:25:ac:38:e4:d2:42:20:6a:e6:12:7a:04:e0:
                    b3:e4:4c:36:cc:aa:90:ba:42:d5:07:59:b1:19:6c:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:84:13:40:1F:DF:83:70:F2:94:80:2B:0F:2F:58:3E:B9:33:7A:5F
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/E27754123C6111F08D014F0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.184.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:15:d3:0d:a6:ef:d5:c6:8d:e2:38:a3:b3:70:fc:84:38:0d:
         d8:b2:69:cf:73:27:1f:3e:10:81:93:91:40:ff:36:4f:f8:73:
         21:d0:9a:ce:f2:c2:b5:15:2b:e8:4b:da:3b:90:94:87:1c:ca:
         3d:ac:4c:86:7c:24:e3:94:d3:4a:9f:22:60:a7:89:26:4f:41:
         85:58:9a:9a:c1:52:b5:67:39:b3:b9:d4:8a:67:e5:a0:12:e2:
         af:8e:dc:c8:52:36:2c:48:2c:46:11:c9:27:64:71:42:22:e4:
         2c:3a:ff:33:2a:ec:d6:dd:c0:bf:b3:0f:86:79:1a:bf:7f:9d:
         0c:17:2e:45:24:05:bd:31:c4:6e:be:76:d6:a4:50:f6:39:48:
         5b:08:85:29:00:86:ba:f0:ca:67:37:c1:a2:6b:94:4b:ff:c5:
         96:3d:93:01:fc:ac:97:e9:e9:69:50:49:0b:85:e3:97:7f:71:
         cc:cd:7e:95:74:20:31:90:24:65:bf:c9:f5:87:4c:ae:59:73:
         f1:4f:eb:92:cf:0a:5a:67:e7:f8:e0:94:14:c8:5b:d7:03:8c:
         24:90:6c:63:68:fd:1f:27:d2:44:25:6c:97:99:a8:24:d5:98:
         7d:9e:6a:db:5c:ba:90:fb:84:91:65:ad:2b:4c:ca:f2:54:1b:
         94:6b:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:50 2026 by rpki-client