Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/9B54424EDA0211F19D232573FC65CEF9.roa
File:                     9B54424EDA0211F19D232573FC65CEF9.roa (raw, json)
Hash identifier:          ldY7lV2vqigQTXm0kwJ+/7KI4hhkyC2juxolSjKa4UA=
Subject key identifier:   08:C8:2D:2A:97:40:50:63:11:91:DB:95:4F:E4:84:D4:9E:25:54:94
Certificate issuer:       /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial:       243B
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/9B54424EDA0211F19D232573FC65CEF9.roa
Signing time:             Fri 06 Nov 2026 16:53:36 +0000
ROA not before:           Fri 06 Nov 2026 16:53:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     402279
IP address blocks:        103.27.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
                          rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9275 (0x243b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
        Validity
            Not Before: Nov  6 16:53:36 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6aee060f-b690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:8b:05:1e:fc:23:4b:17:69:19:51:08:34:
                    d0:74:e8:a0:24:aa:a4:42:85:64:4e:43:8b:c3:45:
                    2c:99:ee:6f:4d:a5:51:cf:9e:c2:ca:74:6e:9e:67:
                    03:4c:a9:1f:2c:3f:e3:8d:c5:87:a3:63:5e:dd:8f:
                    21:1c:64:1a:12:34:3c:a3:14:80:19:f1:74:13:4a:
                    0a:2f:0d:27:7b:c4:e9:6e:07:7b:64:b3:2d:62:80:
                    00:7a:a1:41:67:d4:6d:76:4a:af:66:81:26:59:14:
                    a2:13:6d:ea:fe:16:b3:f2:ce:fc:11:4c:3e:5b:4c:
                    73:31:34:ad:eb:b9:c2:34:ec:a2:bb:84:56:77:3d:
                    c7:44:49:b2:f8:16:69:30:5e:e2:5f:19:d7:dc:0d:
                    6e:2f:19:cd:26:74:29:5c:40:cb:4b:f0:2b:40:65:
                    5a:da:a4:24:3f:1e:c8:a1:44:d2:da:d6:d0:72:18:
                    b2:fe:a4:6f:38:5b:aa:a0:6d:16:6d:77:ed:32:25:
                    af:de:46:fe:19:1c:21:81:73:12:4c:30:55:9f:b6:
                    36:74:2c:34:8e:cd:f1:86:8f:ec:f0:61:5f:bd:60:
                    d5:58:ab:e0:54:ea:29:be:05:2a:0d:08:ef:30:4d:
                    9a:c1:5b:c3:60:b6:a2:7b:e4:22:52:eb:7b:c0:89:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C8:2D:2A:97:40:50:63:11:91:DB:95:4F:E4:84:D4:9E:25:54:94
            X509v3 Authority Key Identifier:
                keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/9B54424EDA0211F19D232573FC65CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:35:a3:72:6a:6b:91:2d:f4:63:01:0f:f0:5f:88:ef:83:fa:
         ad:72:35:89:8f:16:c2:58:19:a9:54:5b:fa:db:22:73:88:3c:
         f3:7b:9e:8d:2b:da:8a:65:e2:a4:03:88:31:82:fe:f1:27:91:
         be:72:35:d4:15:fe:52:f7:76:9c:b6:ac:a0:53:46:9a:92:d3:
         56:ff:17:8f:aa:cb:a8:c9:da:b7:76:61:bb:3c:9f:fc:c6:2c:
         0b:a6:a1:7b:ba:8b:4c:5a:d1:c6:34:47:61:ea:82:a8:90:d5:
         3e:fb:33:c5:d5:8d:09:bd:69:74:23:67:0b:42:a5:13:7e:84:
         a7:66:2f:79:f0:d6:aa:fe:76:30:48:97:35:0c:5d:9d:9d:d5:
         70:10:0b:0d:08:9e:c9:21:3d:07:76:b0:99:f7:f0:36:00:0f:
         ee:05:6c:6d:c9:bc:9c:a2:c0:ea:f7:59:3a:b6:d4:b2:6a:74:
         ed:99:66:22:7d:30:4e:52:e0:a5:0d:86:42:f9:14:76:50:7d:
         83:5c:9a:c5:21:88:c7:26:f3:5e:8f:95:b6:52:9f:26:53:dd:
         ed:92:6b:6e:0e:7f:d4:08:30:44:49:1e:f3:35:68:8d:33:4c:
         4f:c1:2d:1c:9c:7e:ff:c0:3a:0f:48:7f:fe:f7:a3:0a:77:bc:
         fd:10:74:a9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE
NDUyODk0MTEwHhcNMjYxMTA2MTY1MzM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWVlMDYwZi1iNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAypmLBR78I0sXaRlRCDTQdOigJKqkQoVkTkOLw0Usme5vTaVRz57CynRunmcD
TKkfLD/jjcWHo2Ne3Y8hHGQaEjQ8oxSAGfF0E0oKLw0ne8Tpbgd7ZLMtYoAAeqFB
Z9RtdkqvZoEmWRSiE23q/haz8s78EUw+W0xzMTSt67nCNOyiu4RWdz3HREmy+BZp
MF7iXxnX3A1uLxnNJnQpXEDLS/ArQGVa2qQkPx7IoUTS2tbQchiy/qRvOFuqoG0W
bXftMiWv3kb+GRwhgXMSTDBVn7Y2dCw0js3xho/s8GFfvWDVWKvgVOopvgUqDQjv
ME2awVvDYLaie+QiUut7wIkI3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAjILSqX
QFBjEZHblU/khNSeJVSUMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3
RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTAxQ0UvOTNCQTg1M0E5N0YwMTFFNUI5MjAxMDZBQzRGOUFFMDIvOUI1NDQyNEVE
QTAyMTFGMTlEMjMyNTczRkM2NUNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZxtMMA0GCSqGSIb3DQEBCwUAA4IBAQC0NaNyamuRLfRjAQ/wX4jv
g/qtcjWJjxbCWBmpVFv62yJziDzze56NK9qKZeKkA4gxgv7xJ5G+cjXUFf5S93ac
tqygU0aaktNW/xePqsuoydq3dmG7PJ/8xiwLpqF7uotMWtHGNEdh6oKokNU++zPF
1Y0JvWl0I2cLQqUTfoSnZi958Naq/nYwSJc1DF2dndVwEAsNCJ7JIT0HdrCZ9/A2
AA/uBWxtybycosDq91k6ttSyanTtmWYifTBOUuClDYZC+RR2UH2DXJrFIYjHJvNe
j5W2Up8mU93tkmtuDn/UCDBESR7zNWiNM0xPwS0cnH7/wDoPSH/+96MKd7z9EHSp
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:27 2026 by rpki-client