Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/795A87F8AE2911F096A5955BC4F9AE02.roa
File:                     795A87F8AE2911F096A5955BC4F9AE02.roa (raw, json)
Hash identifier:          iTAndSESNXILneqB7eYQGVdrHG+s2xjqhbTPT61mC30=
Subject key identifier:   AF:29:4D:8D:DB:73:80:83:83:B5:FC:22:6D:30:C1:54:2C:CF:B4:8B
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A45
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/795A87F8AE2911F096A5955BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:54:11 +0000
ROA not before:           Tue 21 Oct 2025 02:56:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154117
IP address blocks:        27.254.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629 (0xa45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Oct 21 02:56:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58873-2fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:b5:5b:77:91:6e:6e:80:b0:8d:6f:2a:a8:
                    db:26:05:95:cc:7f:cc:3d:55:25:40:4f:7a:62:e9:
                    09:e0:8f:3f:78:09:f7:6c:a5:91:50:83:97:c0:b3:
                    7a:f2:7c:43:56:67:a6:9e:0b:fd:a8:5c:11:ee:0b:
                    83:42:b9:a5:77:e3:81:e2:10:6f:a1:4a:70:9a:ff:
                    e4:29:60:5b:d5:bd:37:03:71:d0:fc:f7:46:36:9c:
                    f6:de:ca:21:a4:47:00:f0:9e:65:de:48:06:9a:b3:
                    84:42:a1:b6:18:3d:1e:d8:a1:99:7a:1d:a2:ba:e0:
                    e9:f0:80:55:a8:32:1c:2a:68:3b:71:a7:c8:13:af:
                    b7:50:a7:a6:d8:49:bc:49:6c:a9:ff:c4:9b:df:58:
                    06:a3:aa:b2:0c:32:d8:c3:ec:4d:b4:c9:78:ed:ef:
                    cc:07:4f:bd:a8:78:37:e4:60:aa:d2:e0:dd:5f:b1:
                    6f:48:b1:12:65:0b:88:aa:e0:87:9f:d0:99:b7:30:
                    e1:48:1a:3a:99:52:9a:be:4a:21:fa:f2:75:c2:61:
                    09:44:f7:13:51:55:30:1b:e2:61:b1:d1:d8:8d:27:
                    f6:33:df:a1:2b:2e:6b:c5:be:3a:38:01:1e:60:ef:
                    20:1b:5d:4b:a6:85:59:ca:42:29:00:47:85:75:86:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:4D:8D:DB:73:80:83:83:B5:FC:22:6D:30:C1:54:2C:CF:B4:8B
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/795A87F8AE2911F096A5955BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:b3:d1:33:9b:18:77:36:ba:25:0f:db:af:c2:cc:4e:b4:
         04:84:1c:29:92:52:0b:ff:96:70:02:5d:03:75:7a:d9:68:c4:
         e5:24:cb:91:b6:af:3e:0f:db:c8:3f:f8:ee:87:d0:45:6b:5b:
         11:57:cc:c2:49:eb:f2:65:43:e2:85:c9:d7:37:1d:02:b4:78:
         13:3c:b1:0f:6a:4d:50:f7:ca:b0:15:03:81:c4:c1:1e:6a:12:
         89:83:dc:75:ee:e8:72:26:91:31:8a:27:9c:8c:0c:d9:6c:ef:
         43:cc:0f:51:dd:49:23:48:9a:0d:e5:b2:ee:fe:ff:4f:fe:bd:
         eb:e5:e7:2a:3c:1f:c7:c2:f4:0a:e3:63:53:cc:e4:3e:83:35:
         11:69:ed:1b:86:e0:25:bb:9e:cd:db:e2:fe:ce:8a:12:f1:e8:
         ec:b5:92:3a:48:6e:74:5f:1e:7d:75:e0:cd:28:de:86:ca:ac:
         69:4a:a0:42:42:7d:06:a0:e4:88:70:d7:33:d2:33:69:30:bb:
         2d:ff:39:23:56:cf:aa:e0:33:ef:a4:1a:9c:c2:bf:89:1b:1b:
         ea:f5:4c:ed:f2:a1:3c:fb:62:c2:9b:a4:97:27:b8:3c:63:4e:
         99:66:ed:ff:cd:98:d3:6d:99:f4:76:d3:01:9e:80:1c:f3:43:
         99:48:7c:33
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjUxMDIxMDI1NjAwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODg3My0yZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0f61W3eRbm6AsI1vKqjbJgWVzH/MPVUlQE96YukJ4I8/eAn3bKWRUIOXwLN6
8nxDVmemngv9qFwR7guDQrmld+OB4hBvoUpwmv/kKWBb1b03A3HQ/PdGNpz23soh
pEcA8J5l3kgGmrOEQqG2GD0e2KGZeh2iuuDp8IBVqDIcKmg7cafIE6+3UKem2Em8
SWyp/8Sb31gGo6qyDDLYw+xNtMl47e/MB0+9qHg35GCq0uDdX7FvSLESZQuIquCH
n9CZtzDhSBo6mVKavkoh+vJ1wmEJRPcTUVUwG+JhsdHYjSf2M9+hKy5rxb46OAEe
YO8gG11LpoVZykIpAEeFdYY6CwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK8pTY3b
c4CDg7X8Im0wwVQsz7SLMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNzk1QTg3RjhB
RTI5MTFGMDk2QTU5NTVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAG/6NMA0GCSqGSIb3DQEBCwUAA4IBAQBonrPRM5sYdza6JQ/br8LM
TrQEhBwpklIL/5ZwAl0DdXrZaMTlJMuRtq8+D9vIP/juh9BFa1sRV8zCSevyZUPi
hcnXNx0CtHgTPLEPak1Q98qwFQOBxMEeahKJg9x17uhyJpExiiecjAzZbO9DzA9R
3UkjSJoN5bLu/v9P/r3r5ecqPB/HwvQK42NTzOQ+gzURae0bhuAlu57N2+L+zooS
8ejstZI6SG50Xx59deDNKN6GyqxpSqBCQn0GoOSIcNcz0jNpMLst/zkjVs+q4DPv
pBqcwr+JGxvq9Uzt8qE8+2LCm6SXJ7g8Y06ZZu3/zZjTbZn0dtMBnoAc80OZSHwz
-----END CERTIFICATE-----
Generated at Sat Mar 14 23:08:33 2026 by rpki-client