Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa
File:                     14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (raw, json)
Hash identifier:          JR0lf9Tz8IbMxdEKbfKHP0TINFSDMM0kEkaesNKxFow=
Subject key identifier:   4A:7B:D4:6B:57:BC:D7:F9:5B:9F:AD:DE:8D:8C:5D:92:A5:20:CF:BA
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2857
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:48 +0000
ROA not before:           Tue 08 Apr 2025 15:53:26 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132508
IP address blocks:        27.110.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10327 (0x2857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:26 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a487b7-4d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:f7:9f:9f:58:19:53:d6:e5:b6:54:95:f2:
                    d6:f5:10:8d:fa:74:88:ae:25:ca:bf:0e:df:13:31:
                    a0:d8:47:8c:21:a0:87:e4:33:6d:fe:9d:38:a8:88:
                    69:dd:ce:ea:0a:1a:7f:dc:1a:ca:6c:d1:28:6b:6a:
                    c4:6d:74:de:8c:29:39:3c:cf:47:04:6e:8a:42:fc:
                    00:91:b7:40:8b:d6:e2:4b:1f:af:c1:c6:b7:ab:1d:
                    61:28:90:49:02:ab:04:41:20:af:22:05:33:6b:17:
                    ed:dc:14:8f:78:45:0d:9c:80:e3:1d:7a:ad:e7:97:
                    c2:9b:50:13:96:94:a5:4d:43:3a:47:2a:ba:19:29:
                    1d:2c:72:c8:04:8c:bf:aa:b1:ba:9b:66:20:55:50:
                    ea:87:06:35:76:b4:b9:06:64:11:b8:ed:43:02:8e:
                    81:d2:d1:0a:47:ad:fa:96:c8:41:db:1d:77:4e:e1:
                    84:37:6d:d2:07:11:5b:92:82:83:6f:f6:7b:a9:c6:
                    07:69:2a:2d:f2:85:3b:f9:bf:f0:9f:dd:19:14:1f:
                    d2:66:52:a7:a9:fa:41:6c:57:28:d1:91:7a:f7:f6:
                    a2:95:e2:50:80:57:ce:e6:e0:d4:6f:0a:62:89:2c:
                    6a:09:03:dd:f0:b5:2b:44:36:f8:d9:c3:05:0b:a9:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7B:D4:6B:57:BC:D7:F9:5B:9F:AD:DE:8D:8C:5D:92:A5:20:CF:BA
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:c1:7b:4d:83:f5:38:4a:7b:b1:08:a1:21:d7:79:af:ae:
         8a:1a:0e:ee:f8:6d:fe:aa:b4:82:f5:c5:22:28:c1:65:9a:12:
         5a:50:79:7a:49:04:c5:a9:d7:80:69:be:71:3b:cb:f4:54:95:
         71:b2:0c:b6:b8:05:c9:43:7d:07:13:cb:d5:75:dc:bf:54:fb:
         83:d2:86:73:2d:de:ad:c1:75:e8:ac:f2:3d:65:50:91:bd:ac:
         b7:80:29:16:ef:b4:da:1d:44:d7:bd:42:b6:63:c8:44:d4:09:
         31:d2:84:14:5e:0a:63:44:5c:a4:1f:3d:ff:9a:ed:fe:0c:2a:
         ee:75:45:37:6e:88:35:23:cc:52:2c:09:24:c0:1d:5b:d7:5a:
         a1:9c:70:99:49:aa:0a:11:bd:db:ed:53:c0:c9:8a:a1:6a:a1:
         28:3f:dd:07:f4:a7:53:90:34:15:46:c3:ab:3b:a8:a9:41:a1:
         60:d7:52:c0:77:93:d8:4f:cc:6b:9d:78:bb:3e:36:b5:76:2e:
         8a:a2:31:5f:c9:2a:11:5d:21:34:9c:1c:d1:61:22:1d:d2:2b:
         46:ad:2f:6b:db:41:c9:ec:8b:10:72:c2:50:c6:56:0f:bc:70:
         ff:2f:0b:bc:b3:ee:38:0a:d4:f3:fc:c8:63:c5:77:a2:ce:0b:
         47:e9:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:23:08 2026 by rpki-client