Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/62F6493EE3BE11EE933A0461C4F9AE02.roa
File:                     62F6493EE3BE11EE933A0461C4F9AE02.roa (raw, json)
Hash identifier:          5ldMM2cJXLvn3rFlQhmNWhHj8IBemlnHR9gxFxzEiLw=
Subject key identifier:   F7:18:2F:AA:10:46:52:B4:51:99:96:B4:A5:ED:21:A9:F5:78:79:E2
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28A3
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/62F6493EE3BE11EE933A0461C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:20:04 +0000
ROA not before:           Tue 31 Mar 2026 16:20:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     18115
IP address blocks:        27.110.128.0/24 maxlen: 24
                          58.71.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10403 (0x28a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Mar 31 16:20:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf433-5f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8e:68:1b:ec:3e:bc:c2:5a:49:bf:24:fe:b1:
                    3e:04:fb:a8:93:41:6d:5d:86:ad:10:95:5e:00:07:
                    02:17:cb:b5:64:cb:ad:5a:3c:7a:fb:19:b3:b1:2d:
                    61:6c:68:a5:04:7e:6a:e8:c7:a4:6c:2e:ea:65:47:
                    25:b5:85:58:f6:40:d2:60:b0:d2:84:f7:fb:ab:d4:
                    38:ff:fd:29:39:d4:7d:30:07:37:dd:c5:f2:b9:c7:
                    d1:76:af:1f:46:42:70:de:13:e1:0a:37:2f:93:c3:
                    6d:85:f6:ff:69:ce:27:43:89:05:3c:d5:36:e1:a0:
                    8e:e0:da:b1:55:8d:48:0a:38:58:c2:ea:46:bb:19:
                    fd:43:4d:1b:f2:bf:e0:99:1d:ea:55:bc:b4:6d:d3:
                    72:fd:36:cc:ca:58:c0:86:5a:71:53:7a:48:9c:f0:
                    8b:37:a5:97:57:b2:ef:76:87:40:85:9d:22:9c:60:
                    c8:83:b4:fb:a1:7b:3c:13:85:a6:07:c8:76:24:de:
                    b8:ec:40:0a:ae:59:06:9d:60:88:6b:db:ec:df:6b:
                    cc:dc:e9:8a:a5:95:3d:c3:2e:b2:ae:19:ca:45:fb:
                    a0:e0:59:b7:78:4a:f7:51:54:5b:0e:62:86:39:e8:
                    ee:db:cb:3a:2d:97:02:da:cc:dd:d0:87:20:00:45:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:18:2F:AA:10:46:52:B4:51:99:96:B4:A5:ED:21:A9:F5:78:79:E2
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/62F6493EE3BE11EE933A0461C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.128.0/24
                  58.71.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:61:43:4f:dd:d2:8e:50:95:fc:7f:85:f0:aa:28:39:21:
         c5:66:b2:78:00:48:82:ad:fa:c1:29:8d:af:38:02:a1:eb:f5:
         df:88:c1:ac:d3:55:a5:a3:78:88:6e:1b:e9:4f:dd:67:24:59:
         8d:ff:a0:22:aa:de:36:03:3f:60:94:2f:69:79:20:0e:86:d7:
         45:b5:79:c8:5c:8b:68:ac:b5:ae:36:c2:80:5d:f3:f4:e9:a7:
         4a:5e:12:e5:3d:36:24:a1:bb:fc:59:65:fe:00:6f:48:30:e2:
         21:ff:7e:7b:94:86:00:24:dd:01:3c:40:95:ec:f2:3a:31:f1:
         fb:d5:09:5f:fe:d4:8c:97:7a:c3:69:b3:23:07:97:77:da:80:
         5d:c0:29:11:3f:bc:de:97:ed:15:3b:9d:eb:8e:c0:f3:d0:bf:
         f2:45:fe:6b:58:ba:94:54:d8:3f:ba:80:04:cd:42:88:26:2e:
         09:a5:7c:5b:87:e3:2c:5f:e1:33:4c:b6:e4:f2:7a:e4:49:71:
         a0:27:db:80:aa:03:54:66:5d:49:a1:a4:00:ee:dd:06:4a:c6:
         b4:a6:a7:99:2c:a7:42:f4:64:5d:92:a5:39:ef:66:43:e1:6c:
         a8:c1:a9:8e:f2:d7:50:09:50:5c:2b:09:8b:9f:4d:45:eb:c4:
         3e:8a:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:56 2026 by rpki-client