Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa
File:                     A49C2DF0E07D11F0A337A81D3B6F56BC.roa (raw, json)
Hash identifier:          33ghJ+/qFZxFnKH4VbkZcfEoi8o/kSn4k397FhG//Aw=
Subject key identifier:   D3:64:D2:6F:73:71:4C:14:E5:82:CE:F1:44:B8:ED:EC:FE:D3:C0:DC
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3A7A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa
Signing time:             Sun 01 Mar 2026 21:22:46 +0000
ROA not before:           Fri 16 Jan 2026 16:13:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9341
IP address blocks:        27.124.87.0/24 maxlen: 24
                          27.124.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14970 (0x3a7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 16 16:13:55 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4ae25-8676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:8f:c6:13:66:b9:5e:6f:b7:8e:3e:c3:39:
                    b0:b5:d7:b6:b9:c8:70:02:43:11:c9:7a:28:89:ef:
                    1e:71:28:a8:13:f9:ba:81:bd:09:c6:c1:83:e7:be:
                    45:d7:14:ad:19:c6:b7:e2:a5:00:0f:db:98:93:dd:
                    21:9f:43:eb:17:c4:7b:60:ce:77:1f:d9:74:53:bc:
                    d6:cc:f5:76:c7:95:51:f2:f1:f7:45:d1:4b:47:95:
                    cb:3b:dd:4b:36:27:5d:e7:eb:d5:e9:ad:fa:d4:a4:
                    91:e9:22:28:6e:70:bf:3b:33:b8:99:28:5b:4c:19:
                    d7:25:98:95:03:1c:ee:76:51:0b:cf:11:92:49:c6:
                    37:2a:f0:27:02:0c:50:7a:52:c4:5c:a6:2a:0f:89:
                    11:07:eb:5e:ab:06:5d:ab:f0:f3:de:13:92:ae:e5:
                    33:62:a7:00:0d:85:d5:cb:c1:2d:80:29:4a:1a:38:
                    64:f6:bb:8f:da:df:83:ec:2d:4f:ca:4c:c9:63:58:
                    56:f2:3a:af:e7:be:5c:9c:98:68:98:93:72:28:73:
                    50:c4:6c:ec:e8:f3:ff:a0:cf:3f:aa:49:c5:c9:7a:
                    57:f4:d6:03:7b:b0:70:da:3e:0b:00:67:9b:4e:8c:
                    1b:68:36:46:ae:d1:ee:6c:c7:34:7d:80:9a:c1:00:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:64:D2:6F:73:71:4C:14:E5:82:CE:F1:44:B8:ED:EC:FE:D3:C0:DC
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.87.0-27.124.88.255

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:fb:97:e8:d4:01:a0:f3:83:bc:99:65:07:c6:3f:60:fc:
         2d:06:1e:61:3f:77:8d:2e:c3:83:f9:00:2a:67:55:f1:2f:56:
         5d:de:40:02:14:ba:52:48:07:c8:10:66:f9:2e:d2:a4:b5:1c:
         39:b7:82:b7:35:2b:14:b1:19:06:e9:c8:0f:c1:f0:06:49:b7:
         d1:aa:66:2a:7f:bb:52:ec:14:6b:8e:ea:66:1a:c6:35:22:ff:
         b1:a6:81:8e:51:a0:69:3f:f5:4e:03:1c:51:f9:a8:11:b8:e9:
         a7:f1:aa:1a:04:0b:7e:47:4d:87:dd:ad:f4:bc:cd:0a:ae:a1:
         7a:e7:17:97:3f:62:05:31:06:cd:6e:e4:63:78:40:bd:6f:ec:
         5b:48:42:51:47:ee:2e:59:19:9c:53:16:29:36:f4:d2:d6:f2:
         33:fa:dc:87:1d:49:80:4e:d6:9f:e8:81:9b:a5:df:ed:db:0d:
         c2:8d:76:af:05:9b:71:9d:82:75:2b:32:ef:38:4f:7b:fc:b5:
         bd:ac:e4:58:e8:73:e1:f4:e2:2a:18:ae:f3:ae:68:bf:8f:17:
         80:8c:a0:ac:00:a6:51:fe:aa:61:88:ee:21:30:7e:bd:95:d5:
         1a:9c:3e:c0:e7:fd:d4:ba:f8:4b:64:4a:c6:ec:a9:86:ba:82:
         1c:fd:64:6f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICOnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWUyNS04Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoCPxhNmuV5vt44+wzmwtde2uchwAkMRyXooie8ecSioE/m6gb0JxsGD575F
1xStGca34qUAD9uYk90hn0PrF8R7YM53H9l0U7zWzPV2x5VR8vH3RdFLR5XLO91L
Nidd5+vV6a361KSR6SIobnC/OzO4mShbTBnXJZiVAxzudlELzxGSScY3KvAnAgxQ
elLEXKYqD4kRB+teqwZdq/Dz3hOSruUzYqcADYXVy8EtgClKGjhk9ruP2t+D7C1P
ykzJY1hW8jqv575cnJhomJNyKHNQxGzs6PP/oM8/qknFyXpX9NYDe7Bw2j4LAGeb
TowbaDZGrtHubMc0fYCawQAGCwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFNNk0m9z
cUwU5YLO8US47ez+08DcMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTQ5QzJERjBF
MDdEMTFGMEEzMzdBODFEM0I2RjU2QkMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAAbfFcDBAAbfFgwDQYJKoZIhvcNAQELBQADggEBABrF+5fo1AGg
84O8mWUHxj9g/C0GHmE/d40uw4P5ACpnVfEvVl3eQAIUulJIB8gQZvku0qS1HDm3
grc1KxSxGQbpyA/B8AZJt9GqZip/u1LsFGuO6mYaxjUi/7GmgY5RoGk/9U4DHFH5
qBG46afxqhoEC35HTYfdrfS8zQquoXrnF5c/YgUxBs1u5GN4QL1v7FtIQlFH7i5Z
GZxTFik29NLW8jP63IcdSYBO1p/ogZul3+3bDcKNdq8Fm3GdgnUrMu84T3v8tb2s
5Fjoc+H04ioYrvOuaL+PF4CMoKwAplH+qmGI7iEwfr2V1RqcPsDn/dS6+EtkSsbs
qYa6ghz9ZG8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:28:37 2026 by rpki-client