Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
File:                     9EEDB94662C111EE8F200F60C4F9AE02.roa (raw, json)
Hash identifier:          lNmn24uCz3NprnyA/Y0pF3Lpda+WM7q9uAjcR/VCIFQ=
Subject key identifier:   4C:87:78:07:26:1E:C0:A0:F1:C3:78:D2:74:E8:79:3B:3F:7D:0D:D1
Certificate issuer:       /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
Certificate serial:       01CA
Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:39:18 +0000
ROA not before:           Thu 27 Feb 2025 06:29:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     17903
IP address blocks:        27.118.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl
                          rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
        Validity
            Not Before: Feb 27 06:29:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3df15-4be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:a8:dd:ee:0c:1a:51:f0:05:86:85:1f:ce:
                    06:8e:d6:aa:e9:be:65:75:e8:6b:a7:be:78:96:48:
                    f6:3f:c5:5b:d3:85:b7:f8:81:67:41:ee:84:33:d9:
                    4e:33:f8:b6:f3:3d:6b:7b:cf:f3:46:03:98:06:24:
                    19:b1:32:fb:bf:eb:7b:3d:7e:b8:c1:84:9c:1c:c5:
                    f2:75:cf:32:ac:f6:15:6b:30:f7:a9:c9:15:e2:2f:
                    70:e7:a6:97:06:ea:fd:79:7a:60:34:3a:df:ca:f8:
                    0d:4c:db:e4:bf:21:fa:0f:89:85:a9:7c:ec:5c:fe:
                    9b:a9:76:da:bb:6b:fb:78:2e:23:ec:bc:85:ed:95:
                    ae:87:bd:57:c5:fc:c0:66:71:f3:81:9b:38:28:4f:
                    a1:c7:75:95:c7:f0:89:d6:21:44:ae:82:95:ef:b1:
                    b4:66:76:31:15:3b:72:ae:81:4e:3c:94:ab:6f:2a:
                    9d:96:60:bc:bb:fe:70:76:74:03:d0:62:90:8a:01:
                    2d:bc:1a:8c:87:5f:f7:47:4c:be:e1:db:6d:06:42:
                    f6:16:34:e3:5a:83:40:e5:0e:dc:11:1a:9f:ef:ea:
                    58:01:f6:8a:54:2b:83:dc:d5:90:7e:8c:6a:96:ca:
                    93:91:47:54:9a:5f:06:f2:08:f5:26:39:e0:7d:b9:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:87:78:07:26:1E:C0:A0:F1:C3:78:D2:74:E8:79:3B:3F:7D:0D:D1
            X509v3 Authority Key Identifier:
                keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.118.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:d7:63:b2:dc:bc:62:5f:5e:8c:94:09:63:e4:6f:87:b8:bf:
         9f:53:dd:f4:71:cb:81:52:87:9b:4c:2b:65:3f:a8:39:6a:2a:
         97:aa:48:e9:9d:4b:bd:0f:dd:27:f4:70:90:0b:b4:06:8d:12:
         46:18:80:4a:c8:00:7c:af:16:be:9d:c1:5d:be:ec:4e:a2:e1:
         8c:d1:34:a5:63:2f:ec:ea:d6:79:ac:6e:12:b4:b9:37:90:c6:
         1b:63:80:f3:f1:6a:f9:1f:7d:65:2b:40:7b:dd:7b:08:04:3d:
         93:4d:35:fa:29:b8:11:84:fa:43:b9:d2:22:89:c1:af:b4:94:
         3c:27:36:e2:22:74:10:ab:a9:b0:52:9c:c5:3f:32:14:e5:4a:
         5e:4c:07:89:b1:fa:31:a7:9d:9a:e2:e7:96:9f:32:a1:7c:be:
         26:79:77:20:c5:59:2f:e1:a1:73:38:c4:b7:a7:7d:01:49:3b:
         ba:a8:38:f3:c4:0c:87:37:4b:7f:04:fb:2e:64:ec:a8:9e:a3:
         28:46:2d:aa:7b:1a:7f:8d:ac:2b:e1:db:af:72:ee:f8:76:bc:
         4a:d0:a7:26:80:d6:37:86:c5:e1:d6:15:69:70:a8:3f:e5:04:
         35:da:f6:74:30:38:e8:c0:a0:51:cf:5e:a1:bf:5c:b8:2e:94:
         5e:1c:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:58:07 2026 by rpki-client