Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa
File:                     14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (raw, json)
Hash identifier:          xPXjL37oXeRRpPjLu0GM00DmOaXEa3PmK65wf2oESwE=
Subject key identifier:   B6:30:D3:8C:F3:36:2C:E5:18:06:11:49:DE:05:CC:26:B8:D0:04:ED
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       277E
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa
Signing time:             Tue 08 Apr 2025 15:53:26 +0000
ROA not before:           Tue 08 Apr 2025 15:53:26 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132508
IP address blocks:        27.110.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10110 (0x277e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:26 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67f54675-2c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:67:61:89:be:00:eb:b2:87:dd:ea:ab:59:
                    00:3d:c7:77:9d:87:25:84:f4:cd:c5:b0:dd:74:16:
                    7d:93:83:8d:42:01:29:bc:f9:43:bf:78:28:e1:97:
                    d3:95:9b:6f:a0:69:0e:f3:53:be:ad:08:45:74:8e:
                    30:4d:f7:51:6c:bc:14:9f:ef:f0:9a:96:52:0c:07:
                    35:e4:e1:c6:20:8b:f0:22:db:08:6a:1d:2d:e5:d5:
                    68:8b:20:67:00:45:24:25:5d:6c:78:d9:2e:fb:1e:
                    97:55:cd:29:e2:d6:06:06:92:6a:a4:01:f5:98:33:
                    6b:18:7a:cc:2b:88:1e:f2:49:6b:54:97:91:e1:1c:
                    2d:47:85:86:8b:37:ea:a9:a5:4d:c8:9a:51:67:4a:
                    ab:cb:e9:9c:af:b4:b0:dd:51:70:63:71:9e:62:61:
                    8b:c9:a9:08:d1:96:78:00:35:8e:7c:45:eb:0c:8a:
                    76:9f:14:d8:60:bd:11:d1:d0:4b:98:12:c6:62:10:
                    89:71:f9:59:3b:23:8f:62:72:f5:17:9a:ae:ac:c3:
                    a3:87:7d:87:44:08:23:c7:3c:51:d0:9c:58:b0:50:
                    79:f8:a0:a6:e4:d4:c8:af:b4:46:e4:9d:2f:b4:48:
                    06:1b:70:57:8a:9e:43:36:8b:2b:83:32:74:c1:bb:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:D3:8C:F3:36:2C:E5:18:06:11:49:DE:05:CC:26:B8:D0:04:ED
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d6:33:ce:1d:04:46:6d:fd:bc:56:d3:ce:73:a4:f3:d0:ab:
         c7:60:15:4e:0c:28:fa:b1:b7:63:c3:77:d5:92:db:4a:63:e7:
         c9:92:cb:08:a9:da:83:c9:a8:0b:59:de:93:f4:ba:76:54:01:
         80:bd:2e:6c:74:bd:91:a1:00:71:95:9e:f1:43:0e:48:6a:34:
         e4:2c:02:6f:e4:69:c4:98:fa:9c:d6:a9:12:4b:05:c6:e9:af:
         e0:b7:e6:92:b4:3d:af:e1:64:0c:f3:a9:91:84:ca:67:80:13:
         b3:a7:ce:c7:3b:e0:58:90:c6:c8:60:22:63:ae:71:0c:b4:d0:
         b7:aa:95:bc:18:2e:cc:5e:14:00:7f:30:43:42:e7:bb:69:e0:
         ff:90:a1:20:1c:48:27:4e:b0:72:46:72:44:6f:ef:79:5d:5b:
         08:1c:6a:73:d4:10:a2:ff:35:68:c5:37:82:1c:17:7b:00:73:
         ee:d7:6b:ba:a5:16:d7:56:ef:62:b5:e8:74:df:da:ca:a0:85:
         de:f7:36:40:b5:87:5d:ec:6e:4e:3a:f7:16:cb:59:63:e8:62:
         38:32:37:80:72:6a:d2:14:d4:56:38:38:5e:ab:2a:9d:bd:74:
         2b:54:8f:d1:c8:00:34:5e:1c:c0:40:70:ef:18:9f:19:2a:e1:
         38:bc:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:39 2025 by rpki-client