Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
File:                     D254B444679111EF8A2C9062C4F9AE02.roa (raw, json)
Hash identifier:          GVjvFKgHSY78CpYCc98Qtcp6gxw2fNKpFQ7HCML9xSg=
Subject key identifier:   67:2D:98:3E:2F:6E:E3:EB:35:96:82:56:03:13:5B:22:BE:CC:95:7A
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       04F6
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:38:14 +0000
ROA not before:           Sat 31 Jan 2026 00:19:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134788
IP address blocks:        103.178.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Jan 31 00:19:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a46b76-38db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:c4:93:37:f1:32:ff:c4:c3:8d:d2:7b:49:
                    71:9f:54:fc:0d:5e:f4:81:2e:ee:cd:5a:c8:da:f6:
                    38:e7:c3:a0:21:17:56:fa:94:3a:cd:71:1e:d0:5d:
                    e1:29:64:94:52:96:24:28:48:9d:67:f9:8f:14:58:
                    a8:1d:f6:9b:8a:3b:2e:db:4c:28:8b:4d:bc:71:c7:
                    ee:db:14:79:2f:c3:0e:28:79:ed:c6:51:6a:ed:94:
                    7c:2e:ef:4a:22:78:72:76:91:70:7e:d0:cc:31:5d:
                    89:a2:70:a0:08:54:2e:62:37:a9:b1:f7:ec:e9:91:
                    d3:ed:69:b2:6b:92:c7:45:79:a8:1d:1c:df:96:6b:
                    c0:ca:85:3a:af:8c:a5:ad:eb:9a:4b:19:42:eb:47:
                    b3:f9:a1:19:19:d9:7b:3b:00:05:98:b6:0d:ac:1f:
                    be:2b:0b:eb:1b:76:c8:ee:49:5b:36:ab:e6:86:49:
                    bd:fd:ee:59:80:c8:fc:0c:75:aa:df:9a:d0:74:d2:
                    70:66:6c:e5:6b:07:35:c2:d5:b4:89:9d:b1:5b:a9:
                    de:2a:10:da:6a:df:64:db:a3:47:f6:72:99:aa:5c:
                    d3:9b:d2:52:91:c4:8a:b6:78:81:1f:a0:b3:9d:7f:
                    17:69:5c:04:f3:70:99:12:05:86:a8:40:db:00:e9:
                    03:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2D:98:3E:2F:6E:E3:EB:35:96:82:56:03:13:5B:22:BE:CC:95:7A
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b0:5f:f4:c7:94:d0:c2:0c:80:21:c4:5d:08:76:cd:60:ab:
         8a:55:79:3b:cd:3b:ce:7b:ae:65:54:ab:e2:d1:20:33:30:ad:
         b5:07:04:76:bf:33:bf:12:e2:bf:d1:35:4b:2a:e5:ed:c7:ea:
         1a:7e:70:19:45:34:39:f5:e9:9c:94:06:a7:b7:3a:e7:9f:bc:
         c8:3f:89:dc:36:fe:01:cf:92:7b:5c:3c:ad:6f:79:16:cb:58:
         18:3e:1c:bc:77:6b:b1:68:c5:d6:5c:18:5c:92:b9:e6:e2:ac:
         2b:0c:3f:f6:ff:3b:9c:0a:a5:59:18:81:68:93:32:ff:9f:c4:
         8e:ff:fc:81:e3:51:1c:62:e8:54:68:0c:07:c2:c7:4b:8c:27:
         09:cb:5e:44:bd:7b:11:35:00:6b:4d:cd:cc:fb:05:29:0d:2f:
         33:40:25:ed:d1:35:80:75:45:12:48:b2:41:86:66:bd:d5:d2:
         db:5c:fc:9c:15:a2:e9:69:21:c0:fc:6d:fe:e6:57:9a:93:fd:
         8f:59:37:99:3e:72:3a:37:2e:83:ae:d0:cb:2a:6c:1c:b7:88:
         79:30:17:1e:f2:09:3f:9d:35:12:3f:06:0f:2c:fc:a8:cc:68:
         c6:0f:99:27:76:da:7e:45:f7:f6:74:e5:af:ac:52:40:c9:d0:
         cf:bd:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:39 2026 by rpki-client