Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/30C2EFF491D711EF9282BB15C4F9AE02.roa
File:                     30C2EFF491D711EF9282BB15C4F9AE02.roa (raw, json)
Hash identifier:          ggo2dIC5gJkwJpa7oob8YO5fDmGUu7f8Ll54c36bxJE=
Subject key identifier:   54:48:DC:2D:9C:F0:20:FE:CD:05:C8:4C:37:ED:F2:10:82:4D:2C:2A
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B2E
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/30C2EFF491D711EF9282BB15C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:49:45 +0000
ROA not before:           Thu 03 Sep 2026 00:49:45 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     142299
IP address blocks:        27.254.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2862 (0xb2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:49:45 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c429-28cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:00:91:45:a7:96:5a:ef:54:9c:02:fe:15:
                    ab:13:ed:32:02:c2:12:e0:c8:6e:cf:2f:8d:9a:c5:
                    18:1f:14:3f:c2:e2:4e:33:8a:69:a6:9a:bb:76:58:
                    b8:90:08:e5:e7:be:4b:aa:46:94:c4:9f:26:9f:ef:
                    59:56:1d:39:90:77:f7:3a:21:5f:0b:7e:cf:5c:fc:
                    73:4b:4a:55:74:09:b7:be:32:64:cc:3b:f6:5b:80:
                    ff:9c:48:87:73:30:eb:6e:2a:a3:dd:91:10:b5:e6:
                    e2:f3:f0:61:d3:67:2c:36:85:b0:b9:74:5f:c3:34:
                    66:d8:17:bc:3b:14:6c:45:b7:98:62:13:ea:df:17:
                    3a:44:c4:e5:da:fb:7c:6f:2d:17:d2:73:80:58:05:
                    75:ee:30:3f:c6:4e:66:5d:dc:b1:4c:88:36:1d:01:
                    98:86:26:60:86:04:3d:1d:90:0d:be:b9:28:c8:fc:
                    28:2d:e9:1d:86:fc:29:9c:cc:34:b3:6b:8d:f8:8d:
                    26:08:66:10:93:af:59:09:f3:07:01:4a:8d:a9:d7:
                    cc:38:a3:a8:c6:f4:c6:d8:08:94:be:0d:df:2a:f5:
                    01:2f:de:04:e1:b6:3a:ec:cb:ad:8e:12:c9:1d:86:
                    5f:36:ac:8a:69:1e:ac:5d:bb:7a:54:71:be:67:27:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:DC:2D:9C:F0:20:FE:CD:05:C8:4C:37:ED:F2:10:82:4D:2C:2A
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/30C2EFF491D711EF9282BB15C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:65:7e:63:2a:ae:2a:16:4b:93:48:92:1f:63:0f:8a:9d:f1:
         24:6d:16:34:f6:48:ae:1d:0b:3d:f2:dc:e5:2b:00:73:2a:82:
         5a:fd:cf:0c:51:d6:7e:5b:b3:79:80:bd:37:f7:f5:25:ec:90:
         6f:18:23:32:c4:2c:3c:6f:9b:de:eb:e9:a8:c0:99:46:e9:12:
         98:64:a2:2d:b4:e3:97:24:5d:7b:c7:cc:3f:1d:0c:bc:eb:cc:
         e9:3d:39:fd:d5:34:a9:e6:ac:e4:05:bb:7a:5f:28:77:7f:1e:
         cc:47:e5:6f:19:c0:41:f9:cc:41:f9:d0:e4:2a:fe:f8:cd:e1:
         3b:da:68:62:a2:01:50:c4:88:0b:4a:81:13:c1:21:d5:ac:89:
         28:27:74:f6:f3:21:dd:f4:ce:40:68:79:db:6f:32:a0:38:62:
         a2:97:dc:7e:2c:e4:da:52:3a:7c:0f:44:41:aa:dd:bb:f9:44:
         a3:c7:d7:6a:13:d3:f4:34:42:c9:91:84:f7:b5:36:ca:64:e3:
         a5:c4:09:ad:bf:d5:76:f8:79:70:0a:75:90:06:1f:3d:ff:04:
         2d:de:8c:09:27:b6:64:56:ea:b3:12:e1:e1:47:be:47:7e:15:
         39:1c:63:fa:cf:78:f2:5e:0e:83:81:d9:de:df:9e:a3:3d:49:
         44:87:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:43 2026 by rpki-client