Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa
File:                     5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa (raw, json)
Hash identifier:          wXd3+UFVG6dfJhttvmjqh9aSOf5/nA220bazjyDh+78=
Subject key identifier:   69:24:0F:12:CD:88:7C:41:94:FD:1C:F5:8C:B5:78:3E:41:E3:59:D6
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2962
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:59 +0000
ROA not before:           Sat 26 Jul 2025 15:54:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153040
IP address blocks:        27.100.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10594 (0x2962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:08 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48f07-4e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:bf:b2:c5:36:94:36:d7:d6:cc:45:d9:20:
                    f8:4b:37:d9:5c:ff:29:4d:2f:f4:c7:16:05:54:7d:
                    9f:08:75:87:b9:39:91:33:99:23:ca:61:89:4d:10:
                    e8:88:71:84:12:39:d5:98:59:32:af:7b:16:ea:64:
                    7e:28:a0:cc:a6:5c:10:8d:45:bb:61:8f:b2:0b:6e:
                    57:02:52:db:71:4e:00:4d:65:6b:9e:65:79:dd:26:
                    47:56:b3:ab:7a:e2:e4:f3:b2:d9:87:2e:48:b5:1a:
                    be:50:95:20:22:92:95:73:1e:0f:56:97:4e:77:4b:
                    96:a1:2d:50:ae:cb:b1:ce:0e:c6:14:c8:73:e3:17:
                    d1:f0:14:e8:d5:a0:8b:68:de:4e:19:20:64:9d:80:
                    6d:73:46:bc:32:e7:71:04:4a:19:fc:78:a4:66:d3:
                    d7:27:6a:98:f5:75:ef:3d:d2:d6:a7:b7:ab:5a:1b:
                    d2:4c:63:ab:1c:46:77:77:b2:a5:df:14:0d:2d:b3:
                    aa:bb:13:1c:62:33:73:7e:9f:0c:79:9c:e9:6d:45:
                    88:71:61:99:52:fa:ff:d8:fe:84:7c:da:75:5b:28:
                    2a:b5:8b:23:6d:c4:0c:1e:f1:a1:4c:b9:27:91:8b:
                    04:d8:68:c8:85:59:48:b7:7b:07:6f:76:94:49:ac:
                    b4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:0F:12:CD:88:7C:41:94:FD:1C:F5:8C:B5:78:3E:41:E3:59:D6
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.100.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3f:6d:47:e0:71:35:18:f4:5b:16:27:6b:ec:11:96:1f:1c:
         40:73:23:8a:17:58:01:7f:bf:91:88:96:c1:da:cb:4d:a1:16:
         55:78:a5:50:09:70:ef:3d:18:1f:03:18:21:fb:95:8f:87:37:
         8b:99:c9:15:93:36:ed:56:0c:df:83:8b:04:17:b3:d8:31:19:
         21:95:db:88:88:0f:da:74:bf:aa:25:30:b1:55:8d:0d:8c:94:
         f8:13:eb:76:ad:a1:54:d6:cd:18:65:2b:e6:dd:22:2b:34:48:
         4a:59:94:11:a8:ff:c3:b1:b0:1e:9c:b8:8c:e2:a2:5d:ba:8c:
         68:d2:0a:d8:64:9b:9e:11:bc:ae:45:3d:19:6c:a2:22:a9:ca:
         94:33:4f:66:15:a3:d7:ac:12:7d:48:dc:fa:b2:78:d5:66:4f:
         84:57:20:e6:39:76:eb:80:f9:12:59:06:64:1e:25:6c:6c:40:
         af:94:36:ab:7c:f2:b3:9f:a4:66:95:65:e2:3d:70:ae:5d:98:
         8d:92:71:d4:7f:5c:40:51:94:02:f4:56:5e:42:2d:96:d1:ae:
         be:22:67:51:9b:f5:ec:f6:e4:5c:fb:d3:b8:5b:7a:df:42:21:
         20:f1:90:55:66:ce:e6:1d:bc:49:39:27:41:f2:ec:e1:88:7e:
         6f:a8:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 23:44:31 2026 by rpki-client