Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
File:                     9EEDB94662C111EE8F200F60C4F9AE02.roa (raw, json)
Hash identifier:          hYzE/PL9aIGvkd88fNtbE442CV+cQXWii1tgJqH7L4c=
Subject key identifier:   88:4E:AE:EC:44:0E:D7:AF:C7:43:B9:BF:43:F7:82:70:53:82:65:DF
Certificate issuer:       /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
Certificate serial:       01DB
Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
Signing time:             Fri 27 Mar 2026 03:37:27 +0000
ROA not before:           Fri 27 Mar 2026 03:37:27 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     17903
IP address blocks:        27.118.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl
                          rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
        Validity
            Not Before: Mar 27 03:37:27 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69c5fb77-7270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:6d:6e:17:15:92:76:17:87:55:b1:17:fd:
                    2a:d2:f2:c6:46:a0:47:26:2e:a4:ae:90:31:97:50:
                    0c:36:e0:3f:02:ae:69:80:ce:53:53:76:0c:45:b5:
                    02:f3:2c:3b:0f:40:d6:e1:60:38:ca:de:b9:e8:19:
                    61:61:d9:41:97:21:16:36:9a:c0:95:7f:04:c8:58:
                    60:51:d2:82:eb:db:84:90:f3:cc:99:ee:c5:b1:e1:
                    43:8f:ab:17:8e:15:9a:23:8a:bc:a0:97:6e:d4:2b:
                    40:33:1c:bc:0f:57:6c:44:ee:6e:91:9c:a9:74:b0:
                    a1:f0:9a:f4:46:f7:3f:30:21:9e:bc:e4:82:ed:dd:
                    19:9e:47:f2:19:a1:7d:e8:0a:b2:c7:ed:5f:70:7b:
                    f4:17:5c:1c:88:1e:f6:5a:f5:d7:b1:75:3c:42:43:
                    d2:02:8f:74:7b:a5:9d:02:86:a2:48:e7:dd:16:94:
                    8c:ac:02:71:f8:a4:eb:42:9c:9e:2d:63:99:a1:d1:
                    fb:49:89:60:a8:05:18:05:3a:ca:40:1a:3e:d6:fd:
                    05:1f:ca:e9:9c:01:44:eb:0f:86:aa:83:dd:e1:fd:
                    bf:42:c8:70:83:1b:c9:25:68:82:95:fc:91:16:2a:
                    1d:8a:63:f9:90:07:b8:d1:e5:43:af:24:3a:8b:b1:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:AE:EC:44:0E:D7:AF:C7:43:B9:BF:43:F7:82:70:53:82:65:DF
            X509v3 Authority Key Identifier:
                keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.118.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ee:4a:ec:4e:59:2f:14:b7:f7:29:b9:26:4a:a9:12:99:39:
         3a:54:20:28:46:34:2b:f6:82:3d:82:9c:7d:77:54:82:56:0a:
         18:f7:79:a0:c5:67:73:d6:48:c6:c3:b2:b0:53:f8:4c:03:2a:
         30:ca:1e:69:45:e8:f2:f7:31:76:f4:6a:f5:13:80:7d:14:b4:
         75:54:9d:09:02:ae:f7:cf:60:55:b2:e0:98:53:1e:8c:9d:24:
         16:c5:5c:27:9a:11:1e:c8:4a:44:b5:38:30:6d:eb:7f:c6:5f:
         57:e0:7d:12:c6:e3:ee:6b:4f:2a:59:a8:19:13:b9:6d:9d:0a:
         03:f0:17:1e:2c:ae:6d:24:4c:71:01:25:d9:b7:79:cc:9b:b6:
         34:22:fd:49:25:9c:4a:cb:9e:ab:73:7e:9f:20:89:d0:05:0d:
         90:63:9e:03:28:93:0f:a3:68:0d:ea:82:c4:8f:ca:c9:da:19:
         db:99:a8:85:4c:09:10:1a:09:35:92:df:09:24:d1:e2:d7:c2:
         f8:b6:9e:58:23:de:9b:bf:e0:3d:f5:7e:c8:61:cb:80:2c:fe:
         b2:22:b9:ed:d7:c3:7b:5d:b1:35:6b:16:d0:fe:b7:8c:3d:84:
         0c:f6:1e:64:12:51:d5:5f:4a:9e:b7:3d:10:a5:8a:96:11:1e:
         dd:fb:cc:58
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF
MjdFOTNCMDMwHhcNMjYwMzI3MDMzNzI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWM1ZmI3Ny03MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZ5tbhcVknYXh1WxF/0q0vLGRqBHJi6krpAxl1AMNuA/Aq5pgM5TU3YMRbUC
8yw7D0DW4WA4yt656BlhYdlBlyEWNprAlX8EyFhgUdKC69uEkPPMme7FseFDj6sX
jhWaI4q8oJdu1CtAMxy8D1dsRO5ukZypdLCh8Jr0Rvc/MCGevOSC7d0ZnkfyGaF9
6Aqyx+1fcHv0F1wciB72WvXXsXU8QkPSAo90e6WdAoaiSOfdFpSMrAJx+KTrQpye
LWOZodH7SYlgqAUYBTrKQBo+1v0FH8rpnAFE6w+GqoPd4f2/QshwgxvJJWiClfyR
FiodimP5kAe40eVDryQ6i7Eh1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIhOruxE
Dtevx0O5v0P3gnBTgmXfMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE
M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0MxRjkvN0U0MzdEMDY1RDNCMTFFRUEyMTVGRDcyQzRGOUFFMDIvOUVFREI5NDY2
MkMxMTFFRThGMjAwRjYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAG3Y4MA0GCSqGSIb3DQEBCwUAA4IBAQCH7krsTlkvFLf3KbkmSqkS
mTk6VCAoRjQr9oI9gpx9d1SCVgoY93mgxWdz1kjGw7KwU/hMAyowyh5pRejy9zF2
9Gr1E4B9FLR1VJ0JAq73z2BVsuCYUx6MnSQWxVwnmhEeyEpEtTgwbet/xl9X4H0S
xuPua08qWagZE7ltnQoD8BceLK5tJExxASXZt3nMm7Y0Iv1JJZxKy56rc36fIInQ
BQ2QY54DKJMPo2gN6oLEj8rJ2hnbmaiFTAkQGgk1kt8JJNHi18L4tp5YI96bv+A9
9X7IYcuALP6yIrnt18N7XbE1axbQ/reMPYQM9h5kElHVX0qetz0QpYqWER7d+8xY
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:49 2026 by rpki-client