Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D555B866CAD411F1A8DD9FDC4211F970.roa
File:                     D555B866CAD411F1A8DD9FDC4211F970.roa (raw, json)
Hash identifier:          AKV2+QzUJ+YnzikOlmAyQrA9qrSF9NNBx1cRuaa7q4Y=
Subject key identifier:   95:AA:7A:88:E5:87:39:5C:A4:91:B3:0E:2C:D7:E4:96:55:66:A9:FE
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       3034
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D555B866CAD411F1A8DD9FDC4211F970.roa
Signing time:             Sun 18 Oct 2026 09:18:09 +0000
ROA not before:           Sun 18 Oct 2026 09:18:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     9387
IP address blocks:        202.92.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12340 (0x3034)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 18 09:18:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad48ed0-937e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:db:b4:95:d8:f0:7a:06:3d:64:4a:f8:d6:
                    7e:eb:1c:4d:22:bc:aa:4f:4d:27:a5:c8:af:b9:6a:
                    37:aa:d7:4e:74:54:0d:26:98:53:ec:87:eb:23:ad:
                    f2:dc:64:d1:68:06:80:02:0b:50:f2:ac:39:d2:a8:
                    3b:f9:ab:b2:94:e9:ac:06:e1:f0:ac:c2:8d:6a:04:
                    79:f8:4d:2d:fa:34:fc:70:3c:ea:62:00:f6:00:1c:
                    f5:d2:11:a1:01:54:49:4b:2e:f8:cb:70:8d:26:1d:
                    3d:ab:31:5f:4b:06:3f:53:57:de:7c:02:b1:61:88:
                    f2:ea:93:79:ec:5c:79:87:20:72:17:e5:e2:65:a7:
                    ed:d6:52:ae:23:8e:fc:e9:35:3c:5e:bb:9f:2c:5a:
                    7e:a2:2e:81:22:d5:21:d6:9f:15:f5:d8:8f:de:1d:
                    1d:97:2a:f5:5f:03:eb:cd:0c:29:62:09:de:e5:90:
                    74:0b:d2:a1:f4:5a:db:66:28:0e:17:d1:a5:e9:68:
                    82:80:8f:cf:38:d4:64:ea:8d:6b:40:5b:a6:4c:f9:
                    d2:ef:31:03:27:68:f7:57:97:a4:bd:de:89:41:d8:
                    0a:f1:80:98:4b:2d:70:c5:bd:80:8e:03:9b:6a:f0:
                    53:2c:9f:d4:e8:75:7d:4b:45:20:36:a9:32:7e:44:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AA:7A:88:E5:87:39:5C:A4:91:B3:0E:2C:D7:E4:96:55:66:A9:FE
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D555B866CAD411F1A8DD9FDC4211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:9c:db:b3:a8:f3:b7:b0:fa:cd:99:08:fd:fc:cf:ba:d9:
         8b:af:77:80:a6:61:01:bc:97:15:dc:b7:2d:b8:54:55:3f:6b:
         ac:0e:f6:78:ff:8f:16:ef:bf:97:33:72:74:e7:b6:f0:b6:93:
         b6:fc:e9:39:25:e5:53:bc:63:de:dd:a9:5e:6b:c8:1a:84:57:
         9d:d5:56:e4:b9:9c:c2:92:14:fd:72:8a:46:e8:f6:dc:9f:1f:
         81:3a:e1:b4:0b:0f:95:63:f4:58:9c:a9:63:18:e6:5a:52:f3:
         88:d1:c1:8d:56:c2:ce:8e:4e:90:c5:d5:9c:09:52:b5:d3:93:
         82:5c:1d:04:f3:6c:9f:9b:5e:55:74:c1:22:7b:f7:91:4c:b6:
         ec:a9:23:2f:78:99:8e:2d:18:ac:a2:59:43:f3:6a:05:b1:26:
         44:0e:cd:fd:35:f5:8a:b6:38:ad:40:06:fc:c4:1f:7d:0e:0e:
         62:d3:61:1d:07:75:71:37:de:31:2c:ad:f3:1d:a2:66:e9:23:
         fe:32:8f:f3:77:96:df:d0:d2:3d:35:0f:e3:14:31:8c:a9:50:
         ca:13:24:29:97:1f:bc:61:18:10:b0:35:a8:50:ee:ee:97:74:
         3e:91:5d:d5:a2:b0:ed:8b:0d:73:29:77:83:34:91:71:0e:99:
         28:f4:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:10 2026 by rpki-client