Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa
File:                     27A84B00A1CC11ED8DDB785DC4F9AE02.roa (raw, json)
Hash identifier:          Sottj9k4RXjczj3TRXwNeTc3keyEZnkoE9tmU2Bbb+s=
Subject key identifier:   20:19:B4:90:E0:2E:C4:14:56:1A:EF:14:55:B7:02:3E:04:E1:A9:7B
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2793
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa
Signing time:             Tue 08 Apr 2025 15:53:45 +0000
ROA not before:           Tue 08 Apr 2025 15:53:45 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     21443
IP address blocks:        27.110.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10131 (0x2793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:45 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67f54689-1e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:4c:ac:7a:b5:73:f2:51:43:c1:69:e5:bd:
                    0f:b7:ef:df:f4:dc:81:78:a2:e0:c4:cf:f6:38:80:
                    5d:21:e2:7f:88:6c:45:bd:aa:41:80:5b:03:13:82:
                    07:69:70:83:96:de:30:9f:ce:03:1e:4c:49:ff:29:
                    46:4c:14:ed:65:58:68:87:c8:ed:3a:8f:d2:9c:3c:
                    6e:b8:f1:45:fb:a2:63:b5:f1:ec:34:b7:57:11:a6:
                    fc:33:2c:50:5e:c3:49:25:a8:e0:4e:9a:81:4d:46:
                    f9:d9:97:0b:e9:4d:00:7d:88:e7:30:2f:bc:4e:91:
                    b9:fa:17:fa:ae:60:57:77:92:14:30:b2:e2:b0:b9:
                    1d:07:00:4c:68:73:3c:3d:06:90:e4:24:fe:f1:3b:
                    e7:d0:60:69:3b:ec:39:1a:ee:0c:70:ba:60:6d:87:
                    1a:80:48:ea:b7:01:dc:e8:be:ec:f1:37:40:aa:ec:
                    73:31:8f:33:6f:ca:1e:73:1f:5c:4c:c6:ec:c9:18:
                    ba:c2:ea:45:f4:db:b5:3b:c1:5e:17:78:99:bc:fa:
                    0b:5e:47:f0:ae:c8:25:05:1b:03:2c:cb:f8:ce:2d:
                    57:6c:f3:b4:bd:1f:37:b5:1d:ae:a1:b0:2c:e7:34:
                    48:ef:8e:7e:bc:73:53:07:c3:2f:9f:b0:eb:a6:6e:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:19:B4:90:E0:2E:C4:14:56:1A:EF:14:55:B7:02:3E:04:E1:A9:7B
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/27A84B00A1CC11ED8DDB785DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:75:e4:3a:74:6d:cc:13:0c:73:67:26:fb:0d:ac:b9:2d:54:
         fa:1c:0d:18:48:f8:37:c2:ea:6b:93:77:71:68:02:bc:fe:bf:
         74:98:e5:aa:15:36:1b:0a:1c:f1:ac:8f:44:ba:96:ba:e6:68:
         06:d3:ec:2c:dc:bb:b6:14:f8:e4:35:3f:27:20:15:0d:39:6d:
         d9:5b:62:5b:e3:0f:3b:c8:96:6b:b6:2c:b5:3f:0b:9f:a1:f9:
         97:53:6d:f9:b1:53:39:01:00:51:3c:61:fc:f3:2b:e5:45:65:
         69:89:54:3a:7b:c1:9e:61:4a:68:a9:4e:9b:80:f7:6b:64:63:
         e2:b3:d5:f3:ed:2c:fe:e9:90:51:6c:df:30:ac:7e:12:af:df:
         25:87:68:ed:8f:9e:82:59:89:b1:33:fd:b3:bb:9b:71:e2:93:
         2c:27:ea:c0:c8:70:d0:e0:d6:a8:ae:b3:cd:df:71:b1:37:2f:
         5e:78:63:46:2a:c1:67:7b:11:b1:21:5c:3a:91:2b:b9:f4:1e:
         24:17:82:aa:5c:35:79:65:99:be:90:f0:9b:6d:2a:d9:1b:58:
         60:b8:eb:bf:64:12:78:09:61:b0:6f:10:8b:62:2e:e2:bb:df:
         3f:b1:18:1e:48:46:fd:ee:c8:47:4c:da:f3:ae:42:d3:75:36:
         e5:af:82:6d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJ5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Y1NDY4OS0xZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxwxMrHq1c/JRQ8Fp5b0Pt+/f9NyBeKLgxM/2OIBdIeJ/iGxFvapBgFsDE4IH
aXCDlt4wn84DHkxJ/ylGTBTtZVhoh8jtOo/SnDxuuPFF+6JjtfHsNLdXEab8MyxQ
XsNJJajgTpqBTUb52ZcL6U0AfYjnMC+8TpG5+hf6rmBXd5IUMLLisLkdBwBMaHM8
PQaQ5CT+8Tvn0GBpO+w5Gu4McLpgbYcagEjqtwHc6L7s8TdAquxzMY8zb8oecx9c
TMbsyRi6wupF9Nu1O8FeF3iZvPoLXkfwrsglBRsDLMv4zi1XbPO0vR83tR2uobAs
5zRI745+vHNTB8Mvn7Drpm4+MwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCAZtJDg
LsQUVhrvFFW3Aj4E4al7MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvMjdBODRCMDBB
MUNDMTFFRDhEREI3ODVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAbbuMwDQYJKoZIhvcNAQELBQADggEBALx15Dp0bcwTDHNn
JvsNrLktVPocDRhI+DfC6muTd3FoArz+v3SY5aoVNhsKHPGsj0S6lrrmaAbT7Czc
u7YU+OQ1PycgFQ05bdlbYlvjDzvIlmu2LLU/C5+h+ZdTbfmxUzkBAFE8YfzzK+VF
ZWmJVDp7wZ5hSmipTpuA92tkY+Kz1fPtLP7pkFFs3zCsfhKv3yWHaO2PnoJZibEz
/bO7m3Hikywn6sDIcNDg1qius83fcbE3L154Y0YqwWd7EbEhXDqRK7n0HiQXgqpc
NXllmb6Q8JttKtkbWGC4679kEngJYbBvEItiLuK73z+xGB5IRv3uyEdM2vOuQtN1
NuWvgm0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:19:06 2025 by rpki-client