Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa
File:                     DCA7C1ECB0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=
Subject key identifier:   01:E6:B8:9D:E7:D5:9F:5D:47:D7:D0:F9:DD:FC:C7:F1:79:11:43:60
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       35AC
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa
Signing time:             Sat 04 Apr 2026 15:10:17 +0000
ROA not before:           Sat 04 Apr 2026 15:10:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6939
IP address blocks:        27.50.32.0/21 maxlen: 21
                          2400:7a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13740 (0x35ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Apr  4 15:10:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d129d8-2a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:55:ef:86:79:18:88:55:72:45:62:b9:6b:
                    6d:49:83:7a:47:82:f8:ec:74:81:c1:01:52:e4:d2:
                    97:9f:cc:50:5d:36:60:90:b1:03:61:84:72:9c:5a:
                    f5:ff:33:38:ec:73:df:40:6d:c3:1c:cd:87:a0:f8:
                    fb:82:32:86:3e:c7:9f:fc:74:7d:5c:ee:9d:dc:ab:
                    25:ee:64:f2:5c:22:be:eb:3d:c3:73:d8:83:e2:9a:
                    b1:ff:3b:61:b3:ae:43:45:63:cb:7c:85:46:6a:e8:
                    50:da:ba:16:e2:f6:bd:0a:b7:ee:c0:93:a2:3e:51:
                    a4:77:00:1c:36:2c:a4:5c:b2:4d:02:d0:58:11:70:
                    c5:28:22:62:c1:b9:51:ca:7b:d3:fb:6b:90:66:8b:
                    1f:6e:dd:2b:70:f4:50:bb:21:14:21:5a:0a:bf:fd:
                    b2:bd:ea:61:38:79:4c:82:32:95:1a:b4:76:9c:ed:
                    9f:a0:77:d8:2b:c9:fc:b3:1f:c8:58:74:38:51:7f:
                    93:d2:29:75:75:15:32:19:4c:36:c7:08:6a:c4:8a:
                    99:ee:af:12:46:19:60:71:eb:3d:dc:3e:5d:7b:be:
                    a6:39:fd:22:2c:39:e2:dc:c0:3c:88:15:34:1d:ab:
                    ec:ba:ce:c2:08:6b:99:bd:f1:00:d3:82:88:2f:97:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:B8:9D:E7:D5:9F:5D:47:D7:D0:F9:DD:FC:C7:F1:79:11:43:60
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.32.0/21
                IPv6:
                  2400:7a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:27:8f:e5:c6:ab:c3:03:14:bc:88:eb:91:4d:38:70:87:4a:
         d4:cf:f3:24:d2:e4:61:1d:a2:22:33:10:a9:ec:e0:38:38:6e:
         85:bd:7e:4d:80:1f:1d:ff:66:87:37:86:ed:a8:f1:4b:23:25:
         c3:e8:28:e0:9b:75:6a:32:91:06:fc:c1:15:21:93:d3:f9:ef:
         36:a4:b2:2f:0b:d5:af:33:08:e5:fe:66:63:df:77:0b:ad:19:
         26:9c:62:9a:7d:de:65:6b:ce:1b:e9:77:76:a2:90:0e:bc:c6:
         31:c3:30:fc:30:7f:8a:73:50:c4:43:35:c9:f4:86:a9:98:be:
         70:03:69:58:9e:78:59:f8:ce:1a:06:53:88:cc:36:fa:03:56:
         ae:40:0e:c6:c0:08:6b:4b:4b:80:b4:2c:10:f7:de:86:ce:35:
         f8:e7:22:47:5e:c9:7f:94:33:19:cc:6f:8a:11:2b:2a:ae:87:
         b6:37:6e:cd:48:b0:36:1e:e5:88:f6:7c:bf:4b:af:cc:91:70:
         43:95:3a:f6:4d:fb:19:7d:2b:ce:15:63:30:9f:b1:9e:bd:d7:
         c0:52:86:31:4a:64:3c:9e:fd:f5:d6:9c:21:9d:5f:e2:f6:02:
         30:09:d6:99:2c:df:9e:fb:94:dd:9e:91:a1:18:76:2f:aa:68:
         b1:7b:bf:fc
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICNawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1
NjM1REE4RjIwHhcNMjYwNDA0MTUxMDE3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQxMjlkOC0yYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlcRV74Z5GIhVckViuWttSYN6R4L47HSBwQFS5NKXn8xQXTZgkLEDYYRynFr1
/zM47HPfQG3DHM2HoPj7gjKGPsef/HR9XO6d3Ksl7mTyXCK+6z3Dc9iD4pqx/zth
s65DRWPLfIVGauhQ2roW4va9CrfuwJOiPlGkdwAcNiykXLJNAtBYEXDFKCJiwblR
ynvT+2uQZosfbt0rcPRQuyEUIVoKv/2yvephOHlMgjKVGrR2nO2foHfYK8n8sx/I
WHQ4UX+T0il1dRUyGUw2xwhqxIqZ7q8SRhlgces93D5de76mOf0iLDni3MA8iBU0
Havsus7CCGuZvfEA04KIL5cC4QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAHmuJ3n
1Z9dR9fQ+d38x/F5EUNgMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE
NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc0QzMvNkY4QjUyQTAxRDcwMTFFMkJDMTFEQUI0MDhCMDJDRDIvRENBN0MxRUNC
MEY4MTFFNTk1RTBGNzYxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQDGzIgMA0EAgACMAcDBQAkAHoAMA0GCSqGSIb3DQEBCwUAA4IBAQBY
J4/lxqvDAxS8iOuRTThwh0rUz/Mk0uRhHaIiMxCp7OA4OG6FvX5NgB8d/2aHN4bt
qPFLIyXD6Cjgm3VqMpEG/MEVIZPT+e82pLIvC9WvMwjl/mZj33cLrRkmnGKafd5l
a84b6Xd2opAOvMYxwzD8MH+Kc1DEQzXJ9IapmL5wA2lYnnhZ+M4aBlOIzDb6A1au
QA7GwAhrS0uAtCwQ996GzjX45yJHXsl/lDMZzG+KESsqroe2N27NSLA2HuWI9ny/
S6/MkXBDlTr2TfsZfSvOFWMwn7GevdfAUoYxSmQ8nv311pwhnV/i9gIwCdaZLN+e
+5TdnpGhGHYvqmixe7/8
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:46 2026 by rpki-client