Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa
File:                     27A84B00A1CC11ED8DDB785DC4F9AE02.roa (raw, json)
Hash identifier:          SfS3vnYd6UdQ/1y75gwTCWPjMYiNZ5ebmcTK/cgakv8=
Subject key identifier:   B3:F2:C7:B4:50:34:81:FB:7F:21:E2:1A:DB:A8:4C:5B:AF:12:5B:15
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       286B
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:39:04 +0000
ROA not before:           Tue 08 Apr 2025 15:53:45 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     21443
IP address blocks:        27.110.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10347 (0x286b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:45 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a487c8-27b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:72:a7:5d:1c:57:ff:83:77:2d:19:15:e2:
                    1d:27:28:db:da:43:36:b5:c5:39:7d:6b:48:0f:be:
                    78:20:b1:d0:e9:c1:55:c5:e9:c3:31:5f:bd:8b:89:
                    35:58:fa:7f:a9:77:e5:e2:eb:59:96:04:ba:58:e4:
                    de:28:7a:dd:e9:43:8b:f2:49:c1:4f:13:4d:23:a6:
                    d6:c0:b2:d7:54:58:c5:96:a5:2c:bf:a2:29:3f:b2:
                    7a:7d:2a:15:1e:b5:ff:6a:01:56:af:5b:b5:9d:d7:
                    23:3b:ff:4f:97:13:97:73:48:4e:85:9c:39:00:2e:
                    c8:d9:cf:99:87:0f:e9:ad:9f:d1:44:af:e0:68:2f:
                    a7:77:d2:44:06:af:d7:8e:b9:1f:d3:1c:1b:94:5d:
                    08:49:e6:0d:9a:aa:ca:f6:5c:54:9b:8c:d6:f4:6d:
                    d5:9a:de:bc:1e:ef:15:c0:25:c7:79:ba:3c:79:4e:
                    3f:fb:41:2e:33:0d:cd:70:f3:d9:8d:06:9b:43:b7:
                    9a:71:11:18:dc:8c:e7:01:ea:a3:26:94:1e:8a:2c:
                    4a:64:fc:6d:8d:2e:2e:43:fb:e8:ec:44:24:73:c6:
                    64:04:25:9e:d8:4b:af:39:3f:ec:16:0b:e3:ae:c2:
                    41:37:5c:6c:3e:9b:39:72:40:88:32:04:d7:03:03:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F2:C7:B4:50:34:81:FB:7F:21:E2:1A:DB:A8:4C:5B:AF:12:5B:15
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:6b:01:5d:21:22:1e:18:22:08:10:0d:71:70:33:3d:1f:
         93:fd:e3:cf:18:ac:a4:de:f1:b3:f5:99:4f:42:e5:54:df:2c:
         f8:7b:ae:a9:73:e6:f8:a6:89:6b:f5:10:af:8f:ef:18:14:56:
         5a:80:51:f3:70:6b:95:2e:4f:b4:13:45:02:a7:08:9d:ee:c9:
         35:05:89:9c:c6:e5:20:64:02:3f:30:c7:9e:0c:b0:19:f3:f4:
         77:97:46:50:59:3e:b5:ec:2e:82:e5:3e:4a:62:de:56:9e:c4:
         31:31:d7:8f:94:57:92:0f:72:48:39:d4:9b:4c:d8:f3:7f:25:
         2e:75:45:42:05:5f:50:b2:8e:a5:5f:9c:04:2e:b0:a3:03:25:
         bc:13:48:cf:0c:03:21:2d:35:99:e0:5c:b9:2c:c3:70:fc:5c:
         c3:a5:43:13:0c:a4:b3:9f:71:da:9e:e0:a3:21:5d:02:1c:4a:
         2a:54:22:21:d2:d5:84:ce:bf:77:bf:df:c3:dc:cc:a7:92:d7:
         f4:fb:8f:fa:dc:a9:74:b8:92:81:2e:76:9b:f6:2e:1a:a1:7f:
         18:5f:bb:86:49:59:e8:7b:af:50:72:14:b0:2d:24:a0:6b:ed:
         c3:ed:2a:cd:a7:b3:b4:f7:9a:0d:12:d0:b8:67:d8:80:b3:6b:
         4e:09:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:21:51 2026 by rpki-client