Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/30C6735E371C11F1AB220340C9833773.roa
File:                     30C6735E371C11F1AB220340C9833773.roa (raw, json)
Hash identifier:          GKqgW8C/qsqYastwtBswfWup1b4iv3bhSThGxDK7GGs=
Subject key identifier:   70:5E:97:2B:5C:09:A1:AB:A5:DB:D2:54:58:0C:44:8A:0F:5A:F7:ED
Certificate issuer:       /CN=A9190A18/serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Certificate serial:       57
Authority key identifier: 88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/30C6735E371C11F1AB220340C9833773.roa
Signing time:             Fri 21 Aug 2026 08:59:21 +0000
ROA not before:           Fri 21 Aug 2026 08:59:21 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154600
IP address blocks:        27.110.80.0/24 maxlen: 24
                          27.110.81.0/24 maxlen: 24
                          27.110.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
                          rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190A18, serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
        Validity
            Not Before: Aug 21 08:59:21 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a881369-9f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:a6:f3:ec:f7:8d:15:8b:d5:2d:7e:77:1e:
                    b6:60:99:77:74:95:50:a9:c7:9a:b2:d1:60:43:d7:
                    3b:c7:bf:90:8e:3c:c2:db:79:6d:fd:c4:d4:a5:e7:
                    4c:20:54:e6:9f:e0:55:6b:e6:c9:a9:44:d4:43:b9:
                    e7:6a:4e:db:a5:cd:89:8d:bf:25:5c:b6:c4:0f:7c:
                    61:00:74:a3:84:f2:8d:ba:43:39:cf:46:43:c9:7d:
                    82:86:d2:30:c7:a9:1c:08:5b:a7:df:b9:3b:8d:c3:
                    b2:72:3b:68:87:cf:e7:db:34:65:ec:17:f8:c7:61:
                    5f:fa:bc:fa:a0:ad:2e:e5:7f:fc:0d:02:7a:1a:e5:
                    55:75:ca:20:87:f2:00:22:1f:8c:20:23:f8:89:02:
                    10:e4:7d:60:56:e8:9b:4c:1b:75:cf:a3:1c:c5:fb:
                    d0:5b:74:0c:f0:b7:55:ce:aa:15:46:4e:49:c5:22:
                    97:31:a9:f2:7a:a0:28:c2:72:b7:be:c2:b2:9b:73:
                    b4:d1:9e:ae:5a:01:8a:1a:8f:62:94:e7:6f:25:af:
                    9b:1e:f1:c2:d6:71:3f:3b:cd:3c:de:4f:d6:79:57:
                    17:16:79:c4:54:fc:89:0f:cd:c4:a9:86:6a:90:92:
                    a9:1a:f5:86:68:a5:36:3f:75:47:56:fc:ec:01:be:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5E:97:2B:5C:09:A1:AB:A5:DB:D2:54:58:0C:44:8A:0F:5A:F7:ED
            X509v3 Authority Key Identifier:
                keyid:88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/30C6735E371C11F1AB220340C9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.80.0/23
                  27.110.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:0b:9f:b9:4a:1f:56:18:af:d1:98:d4:7c:1e:0d:f9:26:20:
         34:5d:c7:bd:dd:a0:84:e9:a8:77:ec:3e:a8:a9:5f:a3:b3:f4:
         38:11:c9:64:ef:18:bd:5b:a6:9d:0e:e5:d2:ae:62:26:eb:26:
         18:61:cc:8e:74:db:fd:04:d0:e5:03:d2:8e:16:99:c0:6d:76:
         13:bb:b8:70:00:36:03:74:12:57:72:16:13:54:02:80:8b:fe:
         37:5a:04:6f:e2:3c:70:7e:d5:70:88:60:78:25:55:1c:3e:53:
         4d:7d:04:54:cd:bf:cf:7b:15:07:fa:b1:2d:63:14:17:ed:4b:
         79:7d:ec:64:93:86:a4:f2:91:9e:bd:ea:d5:2b:2d:4e:5d:7d:
         55:e2:f7:32:e3:cc:fd:91:e3:73:fc:ac:7f:09:59:6b:7f:a3:
         2f:5e:40:a3:d4:89:6d:05:2c:de:d8:18:2f:cc:82:6a:19:03:
         dd:04:5e:e0:43:f4:cf:30:c7:75:4e:43:e5:47:ad:31:2e:bd:
         26:ef:5d:5c:57:04:33:ed:b5:6a:93:1d:b2:99:d9:4d:73:a5:
         bd:c2:3b:c2:75:8a:11:86:bb:29:33:ad:52:28:f3:7c:a0:95:
         c7:60:67:83:77:5f:01:a3:b3:28:05:c7:18:21:d0:88:23:43:
         cb:ec:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:01:41 2026 by rpki-client