Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa
File:                     88E11172F99A11EFA825D961C4F9AE02.roa (raw, json)
Hash identifier:          +IS6BQPlYHRlENNfFD5PNm5HOT08Tf9LEgNwUaL5c+c=
Subject key identifier:   61:4D:32:BC:34:63:78:9F:C4:17:0C:FB:2D:C4:2A:F7:DB:1E:E6:EB
Certificate issuer:       /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial:       013D
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa
Signing time:             Tue 29 Sep 2026 06:55:47 +0000
ROA not before:           Tue 29 Sep 2026 06:55:47 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        203.27.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
                          rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
        Validity
            Not Before: Sep 29 06:55:47 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abb60f3-a8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:e4:af:51:c7:e2:39:d7:c6:e7:2f:df:56:
                    ed:d4:0e:da:25:6c:40:29:65:60:61:29:f7:30:c3:
                    9f:f4:87:3f:b6:4f:08:78:bf:07:7d:ee:85:c9:fd:
                    0b:d4:3e:ac:f4:2b:55:e0:9c:97:1f:67:6f:5a:ce:
                    d0:f9:18:f9:4c:14:0b:2a:39:60:0d:a6:f2:94:6f:
                    3e:7e:07:96:fe:03:ce:74:86:e0:82:09:3b:fd:19:
                    df:63:9b:6b:25:17:56:e7:e6:8f:73:59:17:1f:fe:
                    7d:11:de:27:c4:ac:19:7d:6f:d8:66:f0:8c:48:07:
                    d8:72:c4:50:a3:57:76:41:94:ff:19:75:f9:6b:05:
                    a6:62:07:93:40:cc:05:ee:d2:bf:30:3c:95:f7:54:
                    b4:67:80:a5:67:8a:0e:08:a5:ac:ef:be:73:15:c9:
                    47:08:e5:ce:9f:59:61:5d:00:a8:3c:40:b5:fe:dd:
                    8e:d3:60:90:36:63:65:61:1d:69:a4:b0:a8:85:4e:
                    14:b0:25:20:37:7b:57:29:f1:14:47:e3:28:44:e5:
                    1e:20:40:ff:16:06:41:52:c6:65:3e:c3:db:b9:98:
                    22:85:4c:e1:38:0c:f9:f3:9e:fe:34:a2:62:6c:37:
                    b1:23:1f:e3:2d:d8:4a:39:d8:66:c2:bb:ef:a5:e9:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4D:32:BC:34:63:78:9F:C4:17:0C:FB:2D:C4:2A:F7:DB:1E:E6:EB
            X509v3 Authority Key Identifier:
                keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:da:24:fa:b6:54:ce:ba:cf:67:0b:d8:87:3d:5d:8c:83:11:
         12:20:3c:d7:b3:02:4a:f0:85:bb:da:3c:74:9b:68:4e:e5:b7:
         bf:68:a1:67:25:bf:9a:b8:f7:f5:61:d8:df:d5:e8:b4:be:b1:
         d4:d2:28:56:7f:a2:3d:04:97:52:2a:0b:b8:46:42:9d:6f:4f:
         00:db:84:e2:bd:c9:c1:c9:74:ca:7f:1f:15:61:4f:d9:37:33:
         7e:e6:19:12:2f:ac:49:24:39:73:65:7c:df:14:5e:2f:db:c1:
         24:7b:02:30:f1:e0:5c:33:01:17:e8:ef:f5:fb:d6:e2:80:2e:
         ff:de:e4:c5:9f:24:f4:ab:a6:ab:68:ee:c1:6a:69:59:8d:9a:
         32:4c:d2:aa:a9:2e:77:ae:03:cd:7b:e3:42:ec:d4:28:4d:4d:
         70:bb:03:0a:16:8e:54:1f:ec:ca:9a:da:79:68:20:99:5b:fe:
         7d:6f:e5:2f:1f:bd:d1:f0:ae:a4:3a:10:c7:04:d5:86:46:51:
         1c:fa:a0:0c:09:44:73:a5:e3:52:85:7a:94:a4:96:aa:2f:52:
         62:13:77:38:56:db:0a:1b:ab:da:27:d9:44:e1:5c:c2:9e:a1:
         ef:12:4d:5b:19:62:35:dd:d3:65:eb:a5:fb:fd:c1:67:60:6e:
         1f:6d:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 00:30:48 2026 by rpki-client