Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
File:                     B11EACFC5ADA11F08ED99A75C4F9AE02.roa (raw, json)
Hash identifier:          /b85QJAGEIhUXpyZhOQ/qz5nFPLO4/gjHJ+SYiuhnr4=
Subject key identifier:   FD:F6:67:5C:3B:DB:0F:C6:7E:B2:58:9C:EF:22:8F:32:56:03:FB:44
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       067A
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:06:18 +0000
ROA not before:           Wed 27 Aug 2025 01:06:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     58955
IP address blocks:        27.254.141.0/24 maxlen: 24
                          27.254.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658 (0x67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae5a09-a7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:f4:0a:58:03:fe:a8:cc:8f:c7:78:d4:a8:
                    04:07:87:14:5b:d7:96:c4:98:bc:ce:5a:de:28:b7:
                    0e:63:e0:a4:f0:a7:fb:15:b9:90:99:35:8c:94:3f:
                    fc:ce:51:24:30:94:ad:e4:88:be:3f:40:49:2b:96:
                    58:fe:9c:82:b8:bd:be:6b:ed:c2:cb:47:1b:41:58:
                    56:2b:b2:0e:16:81:56:17:4c:96:fd:f0:4e:2e:e9:
                    cf:12:c2:69:5f:7b:6e:e6:22:45:e0:02:47:32:aa:
                    84:b8:ba:7e:7e:d3:c2:25:b8:6c:f0:dd:bb:12:ba:
                    b1:40:97:b9:00:84:39:46:76:0b:54:92:68:33:ed:
                    2f:d5:be:b8:2c:e9:73:0b:9d:2e:f2:64:c4:c1:84:
                    97:69:62:3f:b0:e6:e6:ea:8a:b1:21:92:51:ec:3d:
                    38:9d:0b:4e:96:1e:62:80:73:d8:53:d2:e1:41:82:
                    b9:7e:4c:e4:18:f2:f3:44:9e:7c:eb:9a:3b:d7:ef:
                    88:c6:1a:fc:e5:2f:84:c8:ea:b2:eb:d4:64:14:81:
                    bf:26:13:0b:d4:f7:e9:ef:be:eb:37:e4:52:0a:a1:
                    3b:3d:72:bc:d6:b8:3e:a6:14:7c:5b:e2:71:cd:8b:
                    8a:a3:92:33:08:3a:4d:c7:55:e7:67:01:b8:37:f7:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F6:67:5C:3B:DB:0F:C6:7E:B2:58:9C:EF:22:8F:32:56:03:FB:44
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.141.0/24
                  27.254.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:47:c3:0e:62:28:5e:29:ff:63:24:ae:9c:ec:06:a0:6a:79:
         04:54:c3:45:57:5b:99:cd:a1:ab:1f:d2:cf:24:e5:4a:eb:df:
         a8:f0:1e:fa:44:c1:17:85:e8:01:73:59:80:d8:23:c9:2b:f1:
         19:06:41:c7:39:82:fc:9b:f2:b2:65:94:48:3e:ec:15:82:04:
         1b:52:70:4f:ce:40:59:ca:a9:e2:d0:83:c7:92:bd:3c:a6:ed:
         95:c7:61:b5:9b:92:b0:96:6a:b2:39:cb:b9:41:b0:1a:af:cc:
         cf:99:a1:58:03:16:06:20:00:13:5c:76:db:62:be:c8:92:ec:
         f1:5c:84:05:f4:a7:1c:ab:e8:e1:9e:1a:2c:85:bb:d5:97:cb:
         27:cf:35:35:c2:4f:57:22:e3:b5:7f:51:7c:d7:f9:af:32:e2:
         6a:e7:e0:e2:2f:e3:f7:82:65:c4:c3:1b:b7:75:36:60:b8:01:
         9a:a7:27:74:b1:0e:9d:be:f6:71:0b:47:35:b1:3b:ee:a2:3b:
         33:ca:1c:b2:2a:32:6e:e4:f5:ad:49:b3:ac:05:bc:cf:c5:71:
         40:ec:d5:ef:2e:84:72:7d:2f:59:04:99:59:1b:15:79:3a:f5:
         c3:8c:9b:62:4d:42:49:87:9b:61:c2:85:47:5f:ae:c4:89:40:
         f4:92:db:33
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjUwODI3MDEwNjE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGFlNWEwOS1hN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAreD0ClgD/qjMj8d41KgEB4cUW9eWxJi8zlreKLcOY+Ck8Kf7FbmQmTWMlD/8
zlEkMJSt5Ii+P0BJK5ZY/pyCuL2+a+3Cy0cbQVhWK7IOFoFWF0yW/fBOLunPEsJp
X3tu5iJF4AJHMqqEuLp+ftPCJbhs8N27ErqxQJe5AIQ5RnYLVJJoM+0v1b64LOlz
C50u8mTEwYSXaWI/sObm6oqxIZJR7D04nQtOlh5igHPYU9LhQYK5fkzkGPLzRJ58
65o71++Ixhr85S+EyOqy69RkFIG/JhML1Pfp777rN+RSCqE7PXK81rg+phR8W+Jx
zYuKo5IzCDpNx1XnZwG4N/fArwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP32Z1w7
2w/GfrJYnO8ijzJWA/tEMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQjExRUFDRkM1
QURBMTFGMDhFRDk5QTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAb/o0DBAAb/qMwDQYJKoZIhvcNAQELBQADggEBAF1Hww5i
KF4p/2MkrpzsBqBqeQRUw0VXW5nNoasf0s8k5Urr36jwHvpEwReF6AFzWYDYI8kr
8RkGQcc5gvyb8rJllEg+7BWCBBtScE/OQFnKqeLQg8eSvTym7ZXHYbWbkrCWarI5
y7lBsBqvzM+ZoVgDFgYgABNcdttivsiS7PFchAX0pxyr6OGeGiyFu9WXyyfPNTXC
T1ci47V/UXzX+a8y4mrn4OIv4/eCZcTDG7d1NmC4AZqnJ3SxDp2+9nELRzWxO+6i
OzPKHLIqMm7k9a1Js6wFvM/FcUDs1e8uhHJ9L1kEmVkbFXk69cOMm2JNQkmHm2HC
hUdfrsSJQPSS2zM=
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:33 2025 by rpki-client