Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa
File:                     A49C2DF0E07D11F0A337A81D3B6F56BC.roa (raw, json)
Hash identifier:          pCBU+4X9ToTIpUK+IQKvD0VAQR/dTZvtJDNiVGO7ZIA=
Subject key identifier:   EB:4D:8A:B8:5C:A4:2A:96:B9:91:13:3C:3B:BD:FF:5B:B4:4B:21:94
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3BB7
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa
Signing time:             Thu 20 Aug 2026 16:24:52 +0000
ROA not before:           Thu 20 Aug 2026 16:24:52 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9341
IP address blocks:        27.124.87.0/24 maxlen: 24
                          27.124.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15287 (0x3bb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:24:52 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a53-7ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:cc:58:ad:c3:cd:1c:b8:2b:c1:23:ac:79:
                    1a:2b:af:c4:b7:f2:ab:82:64:76:ac:23:c1:aa:ce:
                    00:55:f3:4d:6a:cb:84:f5:fe:d2:2c:18:81:e7:cb:
                    db:22:9d:31:22:22:05:0c:34:94:58:1c:cf:56:e8:
                    52:c0:ae:e5:bc:c4:37:cc:2e:a9:21:1f:ca:e0:79:
                    2a:56:6b:48:24:ab:12:eb:7f:e2:bf:aa:8f:38:9a:
                    ab:3a:c6:a2:e8:f6:ba:c2:fc:67:98:d5:ff:4f:95:
                    2a:8e:35:fe:88:8a:3c:82:2c:25:8e:a2:dc:5a:50:
                    e7:8b:7a:20:0c:57:37:bb:9f:03:6b:ae:d0:28:2e:
                    c1:9a:76:7d:07:73:57:20:bc:6d:89:0f:c5:5a:19:
                    2f:ac:9a:22:94:19:16:5f:d3:13:43:24:68:9a:31:
                    a9:f2:33:3c:10:8e:10:42:1d:78:9d:b3:16:36:a8:
                    d7:48:2c:8c:99:d9:60:f7:04:d2:53:88:d1:41:43:
                    dd:f0:d9:0b:c5:e3:1f:16:1f:17:0e:37:a1:e2:89:
                    e5:b3:f5:d9:a4:47:82:99:4b:9e:80:db:71:22:c5:
                    e8:8b:28:a7:d7:2d:2e:16:fd:7c:13:bd:f6:86:14:
                    f6:c3:87:04:e2:5e:98:e3:0a:fd:f0:e1:70:61:b9:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:8A:B8:5C:A4:2A:96:B9:91:13:3C:3B:BD:FF:5B:B4:4B:21:94
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.87.0-27.124.88.255

    Signature Algorithm: sha256WithRSAEncryption
         08:a3:d5:87:11:f8:35:95:2b:8b:dd:cd:82:39:d3:05:70:13:
         47:c3:93:d2:1d:f9:41:52:26:50:f0:d5:77:42:82:3d:06:a7:
         d7:4e:d8:cc:cd:99:a8:c2:7d:4e:e0:c3:8a:0a:d1:84:17:0d:
         98:3b:29:1c:5f:67:19:30:68:9f:70:16:a5:55:c1:f4:22:21:
         bc:81:1b:49:64:d9:d3:99:7d:3f:98:08:dc:58:6d:41:cc:a4:
         1d:b5:16:26:c2:df:7a:f2:d7:c2:4f:7b:2f:a9:b2:bc:f4:c2:
         ec:ab:cc:6a:5b:b1:89:af:54:93:0c:39:5d:74:5d:53:8e:24:
         e5:0c:3e:99:bf:af:25:d2:e1:c9:bc:69:a3:f3:c1:7c:50:59:
         5e:3b:7e:ce:dc:96:2d:db:5f:2a:41:07:5d:1f:8c:68:90:24:
         cc:58:7f:a6:17:5d:72:af:32:ac:de:4a:c4:fa:91:db:8e:c9:
         10:06:17:a6:17:8e:f1:c3:d5:9b:55:2f:43:1f:87:c6:e1:c2:
         83:1d:13:5c:f7:96:ad:5c:57:02:92:06:09:31:84:40:cd:ce:
         54:3e:ea:c6:ec:2a:49:a7:ed:c6:37:f5:b7:2d:23:a6:46:8e:
         6f:a5:a4:a7:aa:18:b9:71:34:2f:a1:1c:a9:bf:5e:69:71:4e:
         64:02:96:eb
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICO7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwODIwMTYyNDUyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3MmE1My03ZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bHMWK3DzRy4K8EjrHkaK6/Et/KrgmR2rCPBqs4AVfNNasuE9f7SLBiB58vb
Ip0xIiIFDDSUWBzPVuhSwK7lvMQ3zC6pIR/K4HkqVmtIJKsS63/iv6qPOJqrOsai
6Pa6wvxnmNX/T5UqjjX+iIo8giwljqLcWlDni3ogDFc3u58Da67QKC7BmnZ9B3NX
ILxtiQ/FWhkvrJoilBkWX9MTQyRomjGp8jM8EI4QQh14nbMWNqjXSCyMmdlg9wTS
U4jRQUPd8NkLxeMfFh8XDjeh4onls/XZpEeCmUuegNtxIsXoiyin1y0uFv18E732
hhT2w4cE4l6Y4wr98OFwYbko+wIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFOtNirhc
pCqWuZETPDu9/1u0SyGUMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTQ5QzJERjBF
MDdEMTFGMEEzMzdBODFEM0I2RjU2QkMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAAbfFcDBAAbfFgwDQYJKoZIhvcNAQELBQADggEBAAij1YcR+DWV
K4vdzYI50wVwE0fDk9Id+UFSJlDw1XdCgj0Gp9dO2MzNmajCfU7gw4oK0YQXDZg7
KRxfZxkwaJ9wFqVVwfQiIbyBG0lk2dOZfT+YCNxYbUHMpB21FibC33ry18JPey+p
srz0wuyrzGpbsYmvVJMMOV10XVOOJOUMPpm/ryXS4cm8aaPzwXxQWV47fs7cli3b
XypBB10fjGiQJMxYf6YXXXKvMqzeSsT6kduOyRAGF6YXjvHD1ZtVL0Mfh8bhwoMd
E1z3lq1cVwKSBgkxhEDNzlQ+6sbsKkmn7cY39bctI6ZGjm+lpKeqGLlxNC+hHKm/
XmlxTmQClus=
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:36 2026 by rpki-client