Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/27B19A58F99911EFB6B7F427C4F9AE02.roa
File:                     27B19A58F99911EFB6B7F427C4F9AE02.roa (raw, json)
Hash identifier:          Q7i85RevnZqkOBdKbp0/e+tjgTQzpkBCM+sWN4N+OW0=
Subject key identifier:   2F:65:D4:27:A4:B9:48:CB:32:A7:53:C4:D0:D0:F0:D2:00:08:51:9C
Certificate issuer:       /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial:       7B
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/27B19A58F99911EFB6B7F427C4F9AE02.roa
Signing time:             Fri 17 Oct 2025 10:43:10 +0000
ROA not before:           Fri 17 Oct 2025 10:43:09 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55467
IP address blocks:        203.27.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
                          rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
        Validity
            Not Before: Oct 17 10:43:09 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68f21dbd-5309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:77:5d:35:11:d2:35:b5:1b:88:e7:2e:74:
                    5e:cc:c2:68:93:b4:ba:09:e5:cd:83:85:0c:22:12:
                    22:8e:72:e0:bc:64:5f:3f:f7:4c:28:3b:42:23:3c:
                    11:86:35:de:a3:ac:2a:15:ef:5f:02:a4:48:07:9e:
                    7d:51:a9:a6:21:e7:7b:d7:2c:fe:13:b6:32:2b:8f:
                    5a:07:e2:2c:4e:7a:c8:10:88:2e:82:7d:b6:3e:e2:
                    e0:05:fc:1e:41:81:67:12:bc:0f:f2:87:39:6e:33:
                    45:32:24:ec:b8:bf:9d:93:04:fa:fa:f3:54:bc:4f:
                    73:6e:b4:bc:fc:f6:4f:e8:26:84:36:38:0d:df:6e:
                    ed:b3:cb:09:c1:bc:f8:2a:74:d3:b9:7c:64:f0:27:
                    98:26:2d:0f:45:8a:d6:c8:eb:7b:14:cd:3f:e1:db:
                    c4:64:93:ec:16:3d:92:49:cf:1c:96:96:7b:fa:4d:
                    ee:90:30:6c:db:a1:93:08:1b:26:82:9c:e7:87:7a:
                    16:b9:f9:1b:03:91:f2:32:f1:04:fa:01:76:cc:a3:
                    16:04:39:25:81:7f:2a:d4:72:14:cf:a3:5f:92:5b:
                    ac:ad:4e:17:4b:4f:d5:8f:ec:6c:ad:c2:2b:f0:99:
                    d6:fd:2a:d1:60:43:9a:61:bd:6b:59:86:88:de:64:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:D4:27:A4:B9:48:CB:32:A7:53:C4:D0:D0:F0:D2:00:08:51:9C
            X509v3 Authority Key Identifier:
                keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/27B19A58F99911EFB6B7F427C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:2a:63:2f:2a:d4:a5:b7:d0:20:ce:8c:ea:58:f8:76:29:67:
         62:aa:03:1e:be:15:e8:5d:e4:cd:0d:d7:dc:c4:d0:a9:9f:98:
         57:15:69:9f:03:53:3c:4a:7e:c7:9e:0e:d7:11:84:f7:a2:e4:
         bc:c8:2c:18:b8:ed:5e:20:3e:49:00:36:53:ee:00:a3:20:9d:
         f5:ad:32:04:37:fb:30:42:24:8e:1a:01:3b:80:2f:7a:9f:d6:
         f0:28:24:af:35:df:ff:d3:b2:4c:8a:27:6f:a7:3e:66:cb:0a:
         df:3e:c7:8c:4c:5e:af:da:08:96:49:6e:6d:9b:8e:14:fa:08:
         17:43:7a:c7:d5:f7:18:ef:d9:99:05:63:46:07:a9:29:2b:80:
         fd:f1:57:0e:9b:a6:1a:02:d6:7c:06:54:ba:fc:ff:12:7a:b4:
         77:4b:ce:ac:f6:57:96:42:1a:39:91:87:76:44:87:c0:2a:bf:
         3c:00:d4:cc:33:06:f1:33:63:88:d2:51:54:20:bb:b1:3b:5d:
         5c:61:16:5c:0b:ab:fb:30:f2:bb:a1:b3:ee:1a:e0:09:ac:a9:
         a6:7f:21:3a:a1:f6:5a:19:bc:96:fe:43:29:78:14:05:09:ca:
         4c:f3:19:58:50:91:f8:15:b6:e7:86:7f:1f:30:c8:4d:01:94:
         51:93:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:31 2025 by rpki-client