Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/27C38AF4C0C111EE84A55128C4F9AE02.roa
File:                     27C38AF4C0C111EE84A55128C4F9AE02.roa (raw, json)
Hash identifier:          70C0AVQXSlXh5lhA4Wl74F+onzlnDN8NRL0TkfSedbQ=
Subject key identifier:   40:15:F4:35:16:A3:FD:C7:69:52:76:55:CF:2F:04:B7:92:67:E6:80
Certificate issuer:       /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial:       027C
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/27C38AF4C0C111EE84A55128C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:54:45 +0000
ROA not before:           Sat 17 Jan 2026 01:21:00 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141681
IP address blocks:        103.41.92.0/24 maxlen: 24
                          103.41.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
                          rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912127A, serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
        Validity
            Not Before: Jan 17 01:21:00 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43715-02cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:f5:de:80:54:62:02:a5:81:34:aa:27:6d:
                    49:70:ee:f2:a5:f7:b7:3c:8a:47:03:7a:c7:30:5d:
                    ad:78:f9:f8:9f:db:4a:ea:ea:7a:fe:44:30:0a:1a:
                    8d:bc:99:22:c2:4a:97:bc:b8:4f:f1:5d:63:3a:f1:
                    d7:c7:b8:c3:1b:3b:77:db:04:5d:c8:31:d0:eb:2d:
                    99:a7:e8:03:70:3a:58:4b:cb:a8:f4:a0:62:0f:ef:
                    5b:42:71:3a:e1:6e:33:70:a0:29:6b:af:bd:dc:cf:
                    73:4c:a2:09:68:a8:bd:76:c0:47:d0:76:da:16:01:
                    59:43:be:e5:0e:aa:4f:28:bb:b7:4b:49:66:d6:76:
                    e0:6c:8d:e2:3b:af:05:5a:d3:39:e1:f9:75:99:6b:
                    39:6c:06:77:a9:54:11:d9:6b:a5:3c:89:67:3d:5b:
                    66:cd:03:4c:5f:a6:be:5b:19:c2:8a:39:4c:1d:b6:
                    0c:24:34:4d:cc:7e:0b:e5:e6:d7:a8:f1:37:bb:ad:
                    37:4e:d8:55:9d:bd:c8:87:70:3f:1f:05:c8:f3:92:
                    fc:6c:0d:d4:71:3d:70:09:c4:42:99:02:a4:ec:2f:
                    95:21:d1:81:a0:4c:5d:37:f6:f7:a1:03:05:e2:4e:
                    50:f9:2d:73:cd:36:06:d3:b7:a6:01:03:bb:9b:15:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:15:F4:35:16:A3:FD:C7:69:52:76:55:CF:2F:04:B7:92:67:E6:80
            X509v3 Authority Key Identifier:
                keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/27C38AF4C0C111EE84A55128C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:f0:98:68:ad:e3:2a:75:3e:3c:d1:77:7f:f5:b6:45:b6:
         ec:14:98:f6:f2:d2:59:2d:65:af:9d:47:fd:24:8e:d3:90:f5:
         bd:12:2d:c1:60:e2:37:36:bb:aa:33:96:96:f5:41:0f:da:5a:
         ff:b9:c1:09:b0:66:92:1b:e4:de:40:6e:f7:88:ba:89:62:0e:
         63:b2:1b:13:a6:b3:45:e1:57:8b:6f:8b:5e:05:eb:4e:3d:9f:
         43:6f:ff:77:29:6a:63:b1:fb:db:90:8b:df:a7:57:00:da:2f:
         66:63:a1:9b:74:fc:37:0c:c5:a4:2f:cc:bd:a1:78:9c:8f:28:
         eb:7a:d6:19:c8:fc:d7:b6:04:a7:9d:e3:62:f5:44:46:b8:ee:
         54:85:4a:f5:a7:e1:47:5e:01:93:c1:aa:f5:be:b1:5e:ac:41:
         96:79:cb:5e:0a:cc:cf:60:9e:85:2c:91:a4:a6:d2:5b:25:e0:
         cb:4c:ed:9a:45:1e:86:d1:92:83:11:77:94:fb:c7:58:6b:ac:
         ce:f3:0a:3d:72:51:7c:3c:39:50:2b:39:ce:dd:85:ae:57:94:
         2f:ce:7e:c6:df:b9:6d:67:82:f3:f8:4d:6f:15:7f:1a:32:3a:
         a8:fb:6a:28:d8:5d:bb:12:3e:ba:1d:e0:da:2d:36:ab:f2:e8:
         3a:2c:66:b4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjEyN0ExMTAvBgNVBAUTKEU3NTIwRTI0ODlGRjYwMzhCMEQ4NzlCMDQ3MTcwRjlD
NTFBQ0Y3Q0UwHhcNMjYwMTE3MDEyMTAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzcxNS0wMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1D13oBUYgKlgTSqJ21JcO7ypfe3PIpHA3rHMF2tePn4n9tK6up6/kQwChqN
vJkiwkqXvLhP8V1jOvHXx7jDGzt32wRdyDHQ6y2Zp+gDcDpYS8uo9KBiD+9bQnE6
4W4zcKApa6+93M9zTKIJaKi9dsBH0HbaFgFZQ77lDqpPKLu3S0lm1nbgbI3iO68F
WtM54fl1mWs5bAZ3qVQR2WulPIlnPVtmzQNMX6a+WxnCijlMHbYMJDRNzH4L5ebX
qPE3u603TthVnb3Ih3A/HwXI85L8bA3UcT1wCcRCmQKk7C+VIdGBoExdN/b3oQMF
4k5Q+S1zzTYG07emAQO7mxXoMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEAV9DUW
o/3HaVJ2Vc8vBLeSZ+aAMB8GA1UdIwQYMBaAFOdSDiSJ/2A4sNh5sEcXD5xRrPfO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTI3QS85RUIwMDlCNjY2
RTExMUVEODU1MjQ3MUJDNEY5QUUwMi81MUlPSkluX1lEaXcySG13UnhjUG5GR3M5
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUxSU9KSW5fWURpdzJIbXdSeGNQbkZHczk4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjEyN0EvOUVCMDA5QjY2NkUxMTFFRDg1NTI0NzFCQzRGOUFFMDIvMjdDMzhBRjRD
MEMxMTFFRTg0QTU1MTI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZylcMA0GCSqGSIb3DQEBCwUAA4IBAQBe+/CYaK3jKnU+PNF3f/W2
RbbsFJj28tJZLWWvnUf9JI7TkPW9Ei3BYOI3NruqM5aW9UEP2lr/ucEJsGaSG+Te
QG73iLqJYg5jshsTprNF4VeLb4teBetOPZ9Db/93KWpjsfvbkIvfp1cA2i9mY6Gb
dPw3DMWkL8y9oXicjyjretYZyPzXtgSnneNi9URGuO5UhUr1p+FHXgGTwar1vrFe
rEGWecteCszPYJ6FLJGkptJbJeDLTO2aRR6G0ZKDEXeU+8dYa6zO8wo9clF8PDlQ
KznO3YWuV5Qvzn7G37ltZ4Lz+E1vFX8aMjqo+2oo2F27Ej66HeDaLTar8ug6LGa0
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:04 2026 by rpki-client