Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/30C2EFF491D711EF9282BB15C4F9AE02.roa
File:                     30C2EFF491D711EF9282BB15C4F9AE02.roa (raw, json)
Hash identifier:          9WsMz6olRmkIbQEzcumeXyn3d5E+puBSPuGYLRLPDfA=
Subject key identifier:   F2:A2:BB:A7:53:2D:45:40:3B:F4:C5:57:4C:DA:10:43:9A:F5:51:9F
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A1B
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/30C2EFF491D711EF9282BB15C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:35 +0000
ROA not before:           Wed 27 Aug 2025 01:05:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142299
IP address blocks:        27.254.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2587 (0xa1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5884f-ee6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:32:cb:51:3e:2a:52:02:89:fe:d6:ac:08:b2:
                    e7:f4:30:17:01:f4:a8:a1:74:00:57:22:b0:2c:99:
                    c2:ae:e9:98:6f:e2:db:3e:28:4c:aa:d4:22:2f:5c:
                    96:1c:80:cd:ec:2d:02:d4:07:e8:77:07:e3:ef:14:
                    3e:97:ef:3c:ff:af:37:b6:cb:ca:52:c1:25:f5:80:
                    09:22:69:b6:be:01:b8:8d:b3:cd:45:fb:2a:18:fb:
                    79:4f:f8:01:96:c2:68:c0:72:83:0e:66:69:1e:46:
                    42:1e:fa:0e:6b:9d:ba:4b:1e:c2:56:a3:b5:e8:8a:
                    f5:e7:e3:51:b7:14:04:88:38:97:dd:f2:11:2d:93:
                    ac:ae:f6:ef:d0:ac:9d:e1:d9:a2:85:31:e4:91:df:
                    af:f2:09:e5:52:30:1f:f3:93:8f:9a:d0:2d:d9:64:
                    3a:7a:23:7b:f5:c7:ab:94:97:1d:7e:39:7f:93:cd:
                    40:c2:b9:79:8a:d1:90:5c:08:72:f5:31:9d:c4:70:
                    df:b2:08:50:1d:19:41:4e:45:94:7a:3a:89:f6:72:
                    76:68:1d:59:3b:1e:2e:ae:d2:b2:39:d0:7f:52:d4:
                    ca:f8:96:8a:7d:87:05:db:d1:8a:a0:38:bf:d8:af:
                    06:30:00:8d:a6:fe:24:16:3f:7d:a6:7a:37:6b:ae:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A2:BB:A7:53:2D:45:40:3B:F4:C5:57:4C:DA:10:43:9A:F5:51:9F
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/30C2EFF491D711EF9282BB15C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c4:d0:cb:39:eb:cb:49:40:48:0c:0f:a8:6a:e8:6e:0b:7d:
         0a:c8:b2:8f:ee:87:7c:a8:e7:82:c8:d3:c8:a5:1c:c9:8e:c8:
         28:77:41:48:b9:a1:dd:a2:95:ce:27:22:79:16:4f:63:58:0a:
         99:5c:dc:d2:e7:96:a5:fb:f9:30:4c:c2:a6:10:ba:a5:37:94:
         e5:2b:78:bb:da:2e:7b:bb:3e:a8:e7:9d:c4:bd:3e:db:d9:3b:
         6d:34:0b:d6:8c:0f:c7:20:79:54:68:f2:f9:20:22:ec:2b:a0:
         4a:b9:a7:75:a2:5a:22:2e:3a:89:12:1d:5e:25:45:c6:c8:53:
         d3:a3:ce:26:76:3f:b7:4d:5a:06:51:21:74:2a:54:61:29:07:
         4a:d0:37:e6:92:d5:02:71:41:32:d8:17:81:4d:7d:eb:ba:ad:
         10:c8:c6:dd:37:fe:51:60:47:ab:d4:d2:c0:c4:f1:31:38:f3:
         c6:97:7d:98:e5:c4:52:71:ec:0b:70:cc:b8:71:91:ef:bf:23:
         d2:fc:72:92:13:2a:48:9b:d7:73:cf:26:e0:85:f3:74:b8:df:
         4f:15:0d:b3:86:89:51:e2:f5:2a:bb:ba:8c:44:c1:f4:75:d9:
         cd:f2:83:ca:97:f3:55:58:0e:d2:bc:bd:1f:14:38:33:52:23:
         5e:42:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:19:25 2026 by rpki-client