Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
File:                     D96D4614B0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=
Subject key identifier:   48:83:76:7F:43:46:7B:09:BD:3C:54:F7:87:70:6B:52:32:E6:6A:A3
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       35AA
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
Signing time:             Sat 04 Apr 2026 15:10:13 +0000
ROA not before:           Sat 04 Apr 2026 15:10:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38478
IP address blocks:        27.50.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13738 (0x35aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Apr  4 15:10:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d129d5-91b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:5e:62:17:5f:c8:a9:7b:b8:19:92:e0:e1:
                    13:3b:2e:75:b8:6b:26:08:af:fe:d5:4e:56:98:83:
                    5a:38:21:cb:4a:e2:ea:3d:af:51:6f:ee:41:a6:00:
                    69:95:18:74:47:e1:02:f6:53:41:59:48:e3:cc:91:
                    fd:24:09:40:fd:49:8b:69:fe:03:f3:e5:53:5b:b1:
                    70:15:86:dd:eb:d5:96:17:94:7a:28:12:91:80:11:
                    7b:aa:46:6c:da:c0:6e:61:fe:46:78:96:ac:aa:38:
                    f4:0b:f2:b1:73:5a:16:19:ac:5e:61:87:51:90:ae:
                    be:8b:2f:5c:08:49:93:7c:8c:5e:5e:ca:94:65:a1:
                    26:64:22:64:8d:9d:61:dc:d6:e6:58:43:34:4b:72:
                    8b:4a:17:d0:f7:aa:b2:3c:7a:c8:e3:70:18:63:ca:
                    5a:ed:e9:e6:b5:89:03:e0:f7:55:bd:d6:33:b1:1f:
                    60:99:68:2d:bf:fc:1c:f0:49:99:85:dc:09:24:ad:
                    3e:77:05:56:1f:2b:26:7f:b3:d3:3b:e1:20:d1:78:
                    ac:fd:58:ea:32:b8:44:e7:91:66:cb:d2:11:7e:44:
                    10:3c:f4:73:a9:c1:8d:f6:c8:14:fe:91:6e:69:90:
                    bc:0e:8b:87:26:b3:ff:8d:49:44:88:de:32:ea:93:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:83:76:7F:43:46:7B:09:BD:3C:54:F7:87:70:6B:52:32:E6:6A:A3
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1f:34:4d:f5:78:b2:81:84:43:ca:b5:3c:8a:1a:17:0c:f9:
         49:b2:b2:81:a4:16:4a:a8:01:32:4f:2b:eb:1f:e7:cf:e3:ff:
         ad:97:92:8f:48:61:f4:f7:33:da:ff:e5:b0:32:cc:cb:84:90:
         45:ba:fd:b2:17:4b:c6:af:ea:9c:6f:b5:db:c4:da:94:dc:ec:
         15:0e:67:35:19:5c:57:77:9a:59:f2:ff:19:e5:a0:fb:00:fd:
         09:b0:6c:6b:16:61:db:b7:b9:dd:ea:a3:cd:29:96:3a:dd:3c:
         88:35:4a:4f:2e:3d:4b:da:3b:04:80:ee:04:1a:6f:fc:86:53:
         d6:a3:51:f4:1d:78:a1:4e:63:0f:c3:7d:5b:40:42:26:6e:d1:
         6c:d2:d7:d0:16:c1:7d:b2:40:26:cf:ed:6a:10:6a:58:bf:d3:
         66:3e:50:19:45:da:85:cf:19:c3:01:37:23:22:c9:66:3e:da:
         fb:71:2b:fc:ac:b0:25:11:cf:bd:d7:c8:b6:64:2e:7c:2f:97:
         50:94:69:8f:84:da:bc:fd:2b:b1:2e:c3:9b:39:5d:30:d6:aa:
         23:b5:72:1a:5c:fe:73:db:3d:9b:1d:0d:55:e1:9d:8b:6f:42:
         e7:e9:1c:e4:d7:bc:2f:5a:0a:81:01:23:b1:13:07:3a:bc:90:
         d8:f5:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:05 2026 by rpki-client