Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5171D3A6DEB411ECB528FF5DC4F9AE02.roa
File:                     5171D3A6DEB411ECB528FF5DC4F9AE02.roa (raw, json)
Hash identifier:          rg4XQBYv0c4z9vhvyYq+rNAWHMKwH7PfdOM5hyQyKp0=
Subject key identifier:   37:CA:73:88:29:54:A0:B1:77:EB:E0:E9:42:F9:6E:97:9C:7C:0A:A2
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       064D
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5171D3A6DEB411ECB528FF5DC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:38 +0000
ROA not before:           Wed 27 Aug 2025 01:05:38 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134695
IP address blocks:        27.254.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:38 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59e2-7226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:7e:11:5c:27:d3:d2:7b:b2:f3:06:e5:17:
                    00:a2:5e:d3:98:7c:9a:e9:58:b8:4f:5c:55:b4:94:
                    5d:43:63:cb:38:fb:b0:dd:89:8e:24:90:40:03:5c:
                    0a:d2:82:02:62:da:92:aa:55:bc:b2:96:43:e2:22:
                    ce:1d:7e:a3:59:dc:73:c6:59:9b:96:fc:66:0b:46:
                    a0:41:6b:fa:14:9d:df:9a:42:b7:34:8c:bd:91:ac:
                    80:b3:da:f3:84:bf:8d:97:a9:61:f6:4a:5b:dc:18:
                    2c:cd:cd:48:ea:80:4f:67:89:ef:7e:b8:3c:19:1b:
                    30:31:40:ef:15:4d:4c:ec:ba:e1:f5:ef:55:12:6a:
                    6d:16:1a:86:18:a5:7d:f9:d7:4b:1b:c4:75:6c:c7:
                    e4:8f:08:58:6a:fb:ad:2b:dd:b0:88:a6:dd:ea:00:
                    ad:20:04:35:23:09:d0:ba:68:36:fe:20:71:5e:3e:
                    ce:05:1d:ac:13:cd:91:ae:dd:52:73:03:a4:1f:14:
                    69:cd:5e:ad:7e:e9:10:60:99:81:d1:16:8b:6e:ab:
                    95:66:24:0d:c4:d8:62:27:f4:9d:96:59:f2:fe:cd:
                    9c:83:09:69:ad:92:8b:f3:60:85:93:c1:28:25:30:
                    e6:3f:06:14:e0:a9:d7:24:bb:60:4c:3b:3d:6b:e3:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:73:88:29:54:A0:B1:77:EB:E0:E9:42:F9:6E:97:9C:7C:0A:A2
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5171D3A6DEB411ECB528FF5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:bd:ca:bc:b5:3a:2c:1c:13:00:76:49:78:be:70:c1:08:cf:
         46:12:d1:5d:93:f5:f1:c3:7e:48:a6:13:2b:62:14:3e:d8:ed:
         e2:14:16:c7:37:ee:58:4a:8a:7b:88:b1:b0:5f:3d:d1:d3:62:
         51:4b:1c:12:02:05:cb:ca:79:f1:d9:a2:b0:44:94:52:31:de:
         c6:4e:e2:ef:5c:c8:c2:9e:f3:f5:85:62:f6:96:21:09:0c:07:
         48:2d:62:94:2c:c8:2d:ad:b0:67:95:f6:47:ec:44:ae:ac:a2:
         48:0a:bc:cc:28:0d:1a:fb:48:20:bf:3f:88:f8:f2:b0:8e:41:
         dd:03:fe:e3:3d:6f:73:44:49:74:31:aa:77:0d:f8:76:dc:93:
         2c:96:14:80:72:a5:6f:a7:97:50:25:89:f9:05:84:bb:c8:30:
         0e:dd:9e:f7:64:1c:40:a6:aa:21:cd:84:d9:ae:7e:6f:2d:48:
         70:53:11:71:ca:f0:2d:2d:fe:87:45:3e:49:62:6f:75:18:a8:
         2f:ef:57:d0:6e:0e:57:7d:75:32:95:a2:0f:3a:62:ad:3f:3b:
         ee:6b:08:95:e4:80:aa:fd:e9:ce:17:1a:33:b4:ca:3e:3c:e5:
         09:9c:c3:e7:fa:4c:97:b4:37:43:f8:2e:2c:99:b1:26:68:04:
         64:7d:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:30 2025 by rpki-client