Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa
File:                     27E277D891AA11EF9DBFF265C4F9AE02.roa (raw, json)
Hash identifier:          Cm6SNftrBnSD3jYbITKEqMiIlgpHYhJOCLzuSrSmvv0=
Subject key identifier:   40:D2:E2:21:4E:95:97:59:C9:59:2C:D9:30:5E:E5:4B:C7:12:29:4E
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C12
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:21 +0000
ROA not before:           Fri 04 Jul 2025 14:50:27 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     133952
IP address blocks:        112.196.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15378 (0x3c12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:27 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4aefd-e8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:f8:04:f3:ac:2c:0d:84:93:1b:ff:f2:bf:
                    35:20:5a:89:4d:91:ea:65:92:a5:88:33:d8:2f:44:
                    32:7c:c9:bf:2d:eb:8f:d9:64:4e:c1:24:a3:60:68:
                    fa:0e:59:86:2f:3e:a2:25:1b:2c:3b:c3:d5:42:98:
                    51:48:54:0f:b0:c2:d9:15:82:79:95:29:88:4b:8d:
                    fc:87:5a:bc:1d:09:db:c6:bc:28:7d:97:83:e2:ef:
                    5e:79:c0:49:57:c5:ef:a9:a5:5f:58:a5:a3:82:2d:
                    37:02:d3:dd:c6:8f:66:14:10:8f:2d:fb:2c:69:0e:
                    7d:8f:32:2c:f3:4f:d1:1a:ea:8e:34:9f:68:0c:af:
                    af:ec:54:30:7a:40:62:27:e1:c7:04:15:fb:5b:8c:
                    f5:60:36:f8:a5:e1:fc:c7:7e:db:00:8f:17:e0:a7:
                    f9:bc:f0:46:85:71:3f:06:3a:1a:43:80:c9:74:56:
                    3c:85:c5:a1:54:7c:14:65:67:4c:9d:64:29:c7:2c:
                    54:56:89:64:ea:c7:43:a6:c9:fd:02:31:c6:6e:ac:
                    18:ad:d7:68:1f:fa:2a:79:ce:3f:0d:4b:2e:93:e7:
                    74:a7:b2:be:ed:e1:22:0d:af:b9:96:8b:0b:17:8f:
                    e7:85:e7:d4:56:79:c1:56:14:f1:2e:33:67:fe:85:
                    2b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:E2:21:4E:95:97:59:C9:59:2C:D9:30:5E:E5:4B:C7:12:29:4E
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.196.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:1f:55:7b:d4:65:3c:c8:2a:81:0c:c9:80:3c:da:12:11:9e:
         66:e1:6d:0e:fb:df:8f:a4:55:06:4a:bb:55:d5:a6:71:a3:35:
         7a:17:d9:e1:fd:00:30:3f:ec:08:ff:47:c7:de:60:4e:4a:30:
         13:5d:b6:00:7e:ad:13:91:0b:26:b6:24:95:98:c6:d7:b0:01:
         99:b4:9c:50:bb:56:39:79:6e:ce:6b:46:df:2b:1d:ab:f9:20:
         bc:d8:01:55:88:4d:33:62:5d:76:dd:16:c4:f5:28:1a:2e:70:
         86:30:7f:be:de:d7:5b:94:1c:31:85:5b:80:2a:85:7a:38:8c:
         bc:40:86:54:b1:9a:d5:67:c5:21:b1:1b:1e:28:53:9d:63:1c:
         54:3b:84:cf:fb:22:46:43:cb:55:e5:15:9e:6e:89:e9:43:2a:
         58:f6:78:04:63:cf:5b:ee:7e:7a:3b:87:5c:55:4d:a4:dd:3f:
         70:1e:3e:a2:fe:16:33:5d:ab:30:8c:d4:47:c5:c6:19:93:be:
         20:08:ec:19:9a:7e:c4:8f:f9:70:66:04:70:17:5d:7f:e4:c9:
         c2:b9:c3:43:a8:e2:3d:59:2b:81:c4:6e:82:ad:aa:a9:17:32:
         f9:07:20:bd:22:60:ba:25:d0:a2:90:b2:ef:1d:a9:15:a7:fb:
         9a:e0:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:43 2026 by rpki-client