Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6CF915F2636511EFAB755B09C4F9AE02.roa
File:                     6CF915F2636511EFAB755B09C4F9AE02.roa (raw, json)
Hash identifier:          B/MNZDY9kkLGt+B9HhlO2bERjlT3T1CyPFPlm6pbUfk=
Subject key identifier:   DC:CF:3B:CE:F2:31:80:BC:22:05:66:ED:18:9D:37:43:FA:B1:DC:DB
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A3D
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6CF915F2636511EFAB755B09C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:54:04 +0000
ROA not before:           Wed 27 Aug 2025 01:06:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     59374
IP address blocks:        27.254.155.0/24 maxlen: 24
                          27.254.164.0/22 maxlen: 22
                          27.254.164.0/24 maxlen: 24
                          27.254.165.0/24 maxlen: 24
                          27.254.166.0/24 maxlen: 24
                          27.254.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2621 (0xa3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5886c-a56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:ae:b4:8d:b9:92:57:b2:20:74:27:3e:86:
                    4b:fc:1b:ae:ce:86:db:fa:4d:9f:1d:b4:71:bf:9c:
                    34:d9:f3:ce:d3:75:52:ea:0d:10:64:55:5d:9e:ff:
                    66:da:a1:9c:7a:95:81:d0:64:db:f8:38:ce:c4:cf:
                    9f:b5:27:f1:e3:04:69:2a:d0:52:e3:f2:de:f2:28:
                    da:e6:fa:74:10:5a:c9:05:4f:4a:e8:df:be:ee:db:
                    a7:d9:af:4c:92:13:16:e6:52:25:70:05:79:34:8b:
                    42:39:76:c9:39:2a:0c:a3:e8:98:10:65:15:94:e8:
                    e1:0b:76:38:c9:f6:15:4c:2f:c8:29:bc:d1:aa:ea:
                    74:e7:dd:09:50:4f:d9:5d:8f:85:59:31:07:6c:9d:
                    20:4f:13:70:57:0a:bd:e0:46:46:44:07:78:7d:6e:
                    45:a2:93:00:c4:ad:ec:a9:25:55:b3:8c:4b:ae:78:
                    76:5e:ae:ea:73:8c:99:16:97:5c:96:37:d9:c5:4e:
                    b9:99:22:1b:d3:f2:1c:f1:58:8a:5f:84:ba:e4:5f:
                    bf:bb:39:b4:6b:99:f2:b2:5d:b1:b5:d5:0a:cb:27:
                    e3:bb:21:18:4d:6a:e1:e0:5a:63:a4:2b:a2:c0:e7:
                    09:36:5b:cc:04:4e:cd:7a:93:41:67:70:fc:21:56:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CF:3B:CE:F2:31:80:BC:22:05:66:ED:18:9D:37:43:FA:B1:DC:DB
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6CF915F2636511EFAB755B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.155.0/24
                  27.254.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:c9:5a:64:5e:6a:cb:b2:f3:e1:8d:98:34:a9:15:be:0e:d8:
         9a:ce:f8:57:fd:f5:90:08:7e:da:a7:83:9a:70:86:b9:90:9f:
         20:62:be:a8:7f:7c:5a:b3:3d:f3:ff:f0:0e:59:a1:b4:22:5b:
         c4:37:d0:d8:62:e9:45:45:b0:72:9c:96:88:85:8e:c8:6b:64:
         17:02:c0:95:35:5c:1e:e4:82:d6:96:25:b3:40:e2:75:44:77:
         d2:4c:3c:fd:0f:67:71:5c:7d:9c:48:00:dd:f4:f4:8d:98:fa:
         73:6e:3c:8d:2d:60:19:e6:49:99:a7:63:f3:cb:13:e2:97:c8:
         07:eb:92:d5:ab:af:6c:12:93:bd:06:df:20:e8:e3:91:ad:4a:
         56:94:42:9c:fc:1e:3a:29:c5:68:ab:44:52:39:f6:a2:e2:7a:
         ea:7d:ba:2e:eb:01:6d:4d:aa:b2:17:58:fc:76:da:ce:8f:f1:
         cf:bb:ba:05:ad:57:83:70:83:4a:c3:a4:fd:9e:14:04:60:de:
         0a:34:c6:ad:11:0f:e2:d3:bf:ad:78:06:83:e9:de:4f:18:7c:
         82:63:e1:de:ed:3d:75:58:d5:fb:5c:b4:d8:6c:c8:4b:e6:76:
         3b:7c:d1:6a:11:14:3c:aa:83:3b:6f:ec:fb:c7:b2:e3:2e:97:
         7f:21:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:18:13 2026 by rpki-client