Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa
File:                     88E11172F99A11EFA825D961C4F9AE02.roa (raw, json)
Hash identifier:          mh+UCJNFemXmx1rXPNcCjaRpL6VWoi5lGRmYTA/fEi0=
Subject key identifier:   B4:7F:16:6A:2D:F7:01:34:48:FD:85:2C:90:13:C4:BB:9B:8F:4A:A6
Certificate issuer:       /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial:       7C
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa
Signing time:             Fri 17 Oct 2025 10:43:10 +0000
ROA not before:           Fri 17 Oct 2025 10:43:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        203.27.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
                          rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
        Validity
            Not Before: Oct 17 10:43:10 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68f21dbe-259b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:6c:aa:30:7a:fd:5d:98:16:70:e9:74:75:
                    55:a9:d4:6a:13:96:17:ca:b0:9c:9e:aa:bb:8c:86:
                    af:3b:9e:5c:0e:8c:bf:e7:2e:40:d7:31:41:87:03:
                    c9:01:f8:ba:5e:32:1b:bc:6c:49:a8:a9:b8:d8:22:
                    82:7a:ec:0f:74:10:0c:a3:7d:f6:56:09:5e:a0:d4:
                    5d:c9:75:2e:99:81:12:0a:64:67:ed:f1:53:b3:40:
                    07:8b:b0:74:d1:bc:2a:74:7d:8f:8e:92:56:8c:7c:
                    f0:ed:65:31:00:52:26:d6:0e:39:7c:12:db:17:4d:
                    94:98:d3:ce:75:3c:4f:79:ef:03:82:c9:f7:17:2d:
                    5e:66:38:03:65:45:50:21:bc:dc:dd:02:8e:6a:2e:
                    13:e1:c2:66:db:f5:b6:60:ef:ac:47:3c:b7:cf:55:
                    95:ea:b5:12:b9:2a:79:cc:4d:1a:4f:a8:39:d7:77:
                    4a:69:6f:ce:f2:96:38:4a:46:af:ed:c8:06:ba:99:
                    e6:cb:6e:a6:ef:5d:87:8b:ef:c1:4b:77:71:bd:a8:
                    c2:78:3c:36:3d:6c:8c:83:3f:95:2b:f0:e9:15:92:
                    92:35:c9:2a:71:f4:d2:12:67:99:0d:43:ca:36:b5:
                    e3:03:d3:c6:5e:79:d1:cd:92:3b:a2:87:9e:71:78:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7F:16:6A:2D:F7:01:34:48:FD:85:2C:90:13:C4:BB:9B:8F:4A:A6
            X509v3 Authority Key Identifier:
                keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:0f:97:09:a1:f2:dd:03:a6:33:6b:34:cc:b2:17:bf:fe:71:
         2f:de:a8:a4:5c:71:48:1f:2c:af:55:3b:6c:b9:14:a5:ce:2a:
         95:cc:29:a6:be:48:ac:2b:b1:90:0b:f1:d2:fb:c7:de:55:c5:
         fd:e1:26:3b:b6:bd:75:da:6d:60:60:07:f6:fc:30:6a:02:35:
         85:a8:99:59:29:85:64:10:04:6e:73:a8:47:0d:4a:df:11:b5:
         ed:38:61:25:61:5e:19:de:94:ae:be:b9:e4:45:85:44:40:8b:
         b4:20:79:b5:22:35:65:6f:f6:c1:af:97:6a:0d:db:60:d4:99:
         a5:af:c1:d0:0a:f8:6b:67:0e:ce:b9:89:8b:ad:16:4d:54:2c:
         5f:93:be:c8:fd:50:1c:f8:d0:61:80:81:c2:3f:03:9e:8f:0e:
         48:41:ad:e3:df:7f:98:c7:f5:eb:23:1b:f1:64:7d:77:79:1f:
         d3:fc:ef:7f:92:e2:68:d2:b7:75:2c:f1:00:ae:4a:eb:4f:2f:
         87:25:e9:b6:96:c1:0b:e6:2e:0c:84:09:d7:0e:25:fd:8c:29:
         29:69:70:65:0d:7f:28:96:ae:bd:21:6b:e3:40:b5:39:66:93:
         5b:b5:ad:5e:98:b9:dc:c6:0d:a0:45:bf:8a:db:d0:d5:b4:72:
         e7:e9:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:57 2025 by rpki-client