Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0C362F66DEB011ECAA66AC68C4F9AE02.roa
File:                     0C362F66DEB011ECAA66AC68C4F9AE02.roa (raw, json)
Hash identifier:          yEeKnsTXgGN5158DPv7ymkYd6S+x9phI8cJ9CUwOyw0=
Subject key identifier:   E3:1C:7C:74:07:AF:04:E7:37:08:F0:73:C0:D6:7D:78:63:18:78:C7
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A0C
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0C362F66DEB011ECAA66AC68C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:22 +0000
ROA not before:           Wed 27 Aug 2025 01:05:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133063
IP address blocks:        27.254.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2572 (0xa0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58842-2ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:c6:a4:03:a3:12:12:fa:8c:22:92:0b:5a:
                    01:32:52:94:28:39:c0:48:91:a1:7e:e3:3f:bc:03:
                    27:2b:1c:34:8a:54:bc:30:6f:be:0a:38:19:fa:0f:
                    a4:6d:79:bf:80:3f:06:35:44:19:80:1e:66:91:2d:
                    68:41:7a:65:e0:0f:50:20:0b:23:71:08:ec:90:49:
                    17:57:4c:8e:e0:98:da:bd:7a:a7:8a:3a:38:ca:fe:
                    c2:2c:95:35:ca:63:cb:1a:b4:29:e1:25:42:9e:46:
                    e1:37:00:7d:b3:e1:87:9f:ce:62:aa:ce:3b:d7:3a:
                    53:2c:91:c5:6d:c5:0a:49:57:c5:2d:ac:47:20:f6:
                    ae:e6:df:c1:aa:83:e6:bd:63:87:0c:bd:5d:4b:9c:
                    53:c1:0a:2d:da:65:8a:05:8e:8a:59:31:9c:3a:02:
                    28:a7:0e:f5:ca:4f:4e:09:01:4d:8c:eb:51:e4:11:
                    d6:37:99:68:bb:04:89:90:bb:5d:80:5e:40:c4:93:
                    f9:85:60:97:aa:63:ea:57:43:2e:4c:0d:bf:e0:30:
                    56:c5:72:28:85:ed:8c:1b:ce:26:7d:a9:f1:86:d0:
                    20:73:16:54:63:f7:43:0b:85:2c:5c:56:b8:15:52:
                    86:fb:7a:68:05:c6:2d:31:8e:cb:66:e2:e2:8e:27:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1C:7C:74:07:AF:04:E7:37:08:F0:73:C0:D6:7D:78:63:18:78:C7
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/0C362F66DEB011ECAA66AC68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:eb:8a:e1:c1:ff:08:77:81:f5:6b:1a:23:2f:75:bf:84:35:
         6c:a0:c4:5f:03:15:02:0f:38:ba:46:cf:fa:a8:1e:8f:55:31:
         e5:2c:65:95:f3:e2:d7:c6:51:af:7c:d5:5c:f6:e1:ef:fd:ad:
         7d:91:c6:a3:82:17:ab:b6:b8:06:ac:7a:73:e9:5e:26:0c:d7:
         73:62:ad:45:43:97:51:ab:00:0e:89:1c:70:e5:e4:d0:31:d2:
         1d:03:51:be:55:8e:a3:14:73:ca:11:cf:39:37:26:25:54:53:
         6b:a6:0b:b9:cf:62:36:b0:c6:e2:99:88:12:fa:34:18:9a:6b:
         4d:99:37:b3:cc:4b:3b:09:e2:8a:4d:98:63:31:d0:67:f9:e3:
         93:91:18:4a:ee:eb:25:e4:5c:c8:39:c4:54:dd:5b:98:4a:3f:
         cc:f5:e1:0e:db:16:bd:ed:8b:01:1b:f5:c5:ea:8b:c1:f2:0a:
         94:ee:4a:6f:f0:7b:03:79:17:b6:8c:a3:43:10:c8:3b:73:f3:
         2c:f6:63:eb:8d:f3:7a:91:91:78:aa:cc:a8:73:e0:f4:23:6c:
         e4:c9:fd:34:c2:de:ee:f7:66:56:b2:9c:e9:eb:0d:9b:23:48:
         a8:42:d6:8e:53:25:7e:e2:05:66:a3:28:e6:8c:ed:85:06:fd:
         c6:88:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:19:58 2026 by rpki-client