Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/62F6493EE3BE11EE933A0461C4F9AE02.roa
File:                     62F6493EE3BE11EE933A0461C4F9AE02.roa (raw, json)
Hash identifier:          6ez40T/kWsOD42AMvkDdOjlfAfmn6uYbyfNAHmlFN9w=
Subject key identifier:   13:55:49:E3:5C:34:E0:81:0E:56:59:C8:4D:BB:65:20:79:11:33:35
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2869
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/62F6493EE3BE11EE933A0461C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:39:03 +0000
ROA not before:           Tue 08 Apr 2025 15:53:43 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     18115
IP address blocks:        27.110.128.0/24 maxlen: 24
                          58.71.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10345 (0x2869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:43 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a487c7-847c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:4f:5f:ad:fa:7f:b9:8d:d5:06:00:49:57:
                    82:3b:84:d2:6d:b2:2f:9b:b4:be:1d:01:a7:61:21:
                    03:8d:38:51:fe:99:e5:42:91:92:8f:2a:69:af:a9:
                    ee:d0:97:c9:77:bf:3c:32:72:ac:80:f0:ee:2b:60:
                    64:c1:b6:0b:cd:f5:e6:44:11:e7:80:31:0f:45:8f:
                    68:c8:74:b4:25:20:01:e3:1b:fa:a0:09:ae:26:21:
                    ab:95:5d:19:d7:1a:f3:6f:43:2f:4b:47:dc:29:cb:
                    92:91:3d:90:e8:a4:c9:18:fd:dc:7a:97:d6:17:47:
                    41:52:2d:80:49:7e:5e:61:09:dd:90:23:09:4e:18:
                    0d:67:71:62:3d:ad:64:bd:25:41:0f:c8:d9:f6:6b:
                    85:83:a4:d4:f3:29:d8:e1:d3:59:56:f9:f8:43:70:
                    f0:71:f7:c2:6e:11:b9:40:a3:00:f8:2b:31:01:39:
                    cd:5d:3c:49:21:f1:7c:8f:d5:5b:ae:bb:90:41:bf:
                    a1:b5:d2:1a:6f:fb:d0:e7:0f:85:fa:9a:ff:95:e3:
                    be:bc:94:ed:01:34:a6:7f:c2:f3:9c:54:59:ce:c5:
                    4e:c6:48:65:6e:c4:de:10:9a:4e:6b:a3:77:a3:93:
                    8a:63:e5:79:21:df:64:8a:68:14:ac:04:8a:8a:a0:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:55:49:E3:5C:34:E0:81:0E:56:59:C8:4D:BB:65:20:79:11:33:35
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/62F6493EE3BE11EE933A0461C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.128.0/24
                  58.71.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:d6:d4:b9:39:7b:fa:a5:56:42:d9:47:a4:01:b2:47:5b:7a:
         5d:09:47:83:98:a7:a2:6d:6c:6e:9c:fd:cb:82:75:f2:41:e6:
         f8:a8:30:c5:06:ef:b8:a4:79:f0:c3:d5:7a:d8:75:0d:f8:aa:
         b9:6a:1e:0f:ef:77:10:b7:de:98:3e:78:b9:54:2b:db:cf:6e:
         f8:c7:e9:4b:08:44:7c:01:20:1b:12:d8:86:9b:59:67:ff:20:
         19:95:f1:3d:15:c5:a4:b7:a4:71:c1:b9:0d:98:f5:a6:b8:ab:
         2d:58:e0:6b:da:30:1d:65:78:9f:63:e0:ca:76:04:32:f8:c0:
         d9:ba:7e:6e:7b:b6:2b:df:cd:8c:72:e5:51:f4:d7:d2:f8:7b:
         e3:d5:fe:92:a4:e3:05:e3:a4:45:f2:46:23:eb:b3:67:3d:03:
         d3:d1:40:ec:e8:7a:fb:05:ab:f5:7f:d4:bd:9f:1a:99:65:2d:
         75:39:11:26:8c:af:e6:59:c1:e7:46:7e:92:0c:9a:d1:df:80:
         b8:ae:62:dc:f7:21:c6:4a:ad:24:2c:c8:97:09:c7:aa:84:4f:
         5c:3e:9a:ba:7a:e6:34:f3:86:cc:d2:4e:80:e4:6d:12:c4:10:
         b0:ba:fe:45:ca:87:ae:5d:24:13:a6:25:a7:5b:27:00:bf:4c:
         c4:e2:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:21:36 2026 by rpki-client