Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/27B19A58F99911EFB6B7F427C4F9AE02.roa
File:                     27B19A58F99911EFB6B7F427C4F9AE02.roa (raw, json)
Hash identifier:          A9CzU8MDj6rLJSlF21HcobLlJ5jlCrKiSpiRirq4aHI=
Subject key identifier:   A6:E2:BC:C4:9E:12:D2:88:FC:D1:3C:DC:EC:1C:4C:73:89:8A:02:E6
Certificate issuer:       /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial:       CD
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/27B19A58F99911EFB6B7F427C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:18:40 +0000
ROA not before:           Fri 17 Oct 2025 10:43:09 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55467
IP address blocks:        203.27.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
                          rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
        Validity
            Not Before: Oct 17 10:43:09 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a58e30-758c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:5b:79:e5:c5:86:4f:ff:3f:88:00:71:12:
                    1a:e4:85:85:a7:7e:e8:76:f3:a7:f2:ef:6d:a3:c8:
                    36:62:b7:42:05:6b:5c:5d:f4:8c:f3:88:6a:af:ca:
                    ff:fe:7d:b7:8e:f0:d7:0b:de:7a:aa:e0:55:11:86:
                    e5:c0:aa:c1:5e:1f:43:79:4f:56:70:13:4f:ea:81:
                    92:43:59:fa:af:15:cd:01:69:5a:d1:a2:16:38:c7:
                    98:10:4d:dd:57:5f:59:23:6a:b5:b6:2a:56:65:72:
                    b7:52:25:68:98:81:54:ac:28:d4:02:62:bc:72:c3:
                    64:dd:9d:fe:51:fe:f9:8e:d3:27:8b:bf:c3:eb:bc:
                    28:f6:8f:3d:31:eb:9c:9e:a0:12:d0:0c:fc:53:09:
                    3c:f6:18:27:d7:0c:fc:22:a0:17:68:ad:f3:ae:15:
                    a2:cd:fa:c6:2c:0c:6f:f3:aa:1f:ad:de:91:b9:79:
                    7b:5e:b4:77:df:eb:01:10:47:c3:8a:21:a1:4a:4e:
                    28:84:3d:83:69:99:f0:9f:30:f2:5a:85:a7:56:28:
                    a6:0a:65:71:2f:0a:9b:f2:b2:79:e3:ea:b3:54:fe:
                    f3:ba:fd:66:75:14:7d:3e:34:13:3b:89:0c:38:bf:
                    e4:bd:0d:2e:9e:12:87:0f:30:d1:45:44:f1:8a:68:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E2:BC:C4:9E:12:D2:88:FC:D1:3C:DC:EC:1C:4C:73:89:8A:02:E6
            X509v3 Authority Key Identifier:
                keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/27B19A58F99911EFB6B7F427C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f9:b0:49:91:ad:3e:31:68:e1:4a:a3:83:18:35:79:29:0c:
         03:6c:47:e1:0c:fb:13:a3:99:85:39:9f:7d:fa:c2:ac:46:79:
         1a:b7:8b:19:bb:92:5a:ca:01:71:93:b2:c3:d3:06:32:a6:71:
         1a:ad:62:cf:16:66:c1:21:cf:d0:3b:3b:28:b9:be:68:20:c4:
         ac:1e:44:2d:13:38:84:eb:99:d7:0c:73:51:20:9d:c7:4e:d9:
         76:71:19:80:3e:5b:4a:1b:21:60:d8:93:5b:34:9e:76:47:9b:
         8b:d7:8c:05:53:c0:35:4d:1d:a2:ff:eb:8b:c2:fb:b5:b5:f6:
         73:2d:87:15:a8:91:6d:89:68:53:2b:1f:14:bc:6d:11:7f:fc:
         6b:61:8f:42:f9:12:a2:bb:21:c9:03:28:a4:ea:a6:40:79:15:
         51:f8:4c:64:cc:c2:47:1e:39:27:37:ce:dc:88:2b:57:64:1e:
         0f:cf:55:1f:c8:e1:4d:60:4c:06:09:5c:9d:d7:c3:85:85:45:
         53:29:66:93:9b:0c:2e:ed:81:90:26:29:6a:60:0d:ef:5d:d0:
         ae:d1:f4:f2:98:5b:31:b0:43:41:07:85:b1:72:1a:bc:c5:cf:
         a1:b6:8d:98:12:75:c3:7e:77:56:8e:a0:80:36:87:3d:9a:9f:
         18:d8:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:47 2026 by rpki-client