Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B5EBBBD0DF6811EC866E2171C4F9AE02.roa
File:                     B5EBBBD0DF6811EC866E2171C4F9AE02.roa (raw, json)
Hash identifier:          9WVo/2bVx+vCXxJwujbWchu/sVG88xfOaCyOKCLH/M8=
Subject key identifier:   29:E3:41:62:B6:0E:E4:BC:0F:EE:48:7F:91:9E:45:26:3F:70:1B:F9
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B3A
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B5EBBBD0DF6811EC866E2171C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:50:08 +0000
ROA not before:           Thu 03 Sep 2026 00:50:08 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24214
IP address blocks:        27.254.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2874 (0xb3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:50:08 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c440-6aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:02:fc:e1:79:08:d4:7e:ea:22:8c:5b:e0:
                    54:1b:b5:8b:8e:5b:04:02:ff:b5:00:06:8a:e2:c0:
                    2e:de:c8:ee:61:07:55:19:b0:5b:80:76:33:40:bf:
                    2a:1f:0f:b2:60:84:74:16:7c:e1:93:fe:41:03:a0:
                    7e:b3:0f:9a:25:d0:62:85:b7:f4:d4:9b:07:5b:b4:
                    6e:28:df:3e:38:d5:0e:bc:1b:e2:34:fa:ab:2b:0d:
                    39:6b:dc:27:63:d7:f1:74:27:d0:e2:5f:df:16:0a:
                    b0:bd:00:d4:8e:8a:84:22:e2:5f:6b:74:cb:67:69:
                    c8:17:6f:14:03:57:a6:f2:e9:15:ee:a5:75:9d:e3:
                    0b:6b:22:5a:eb:47:48:ab:3b:de:89:fb:e4:e0:58:
                    b4:c7:31:2e:21:1f:67:a3:e8:7d:a8:bf:8a:31:f9:
                    dd:cb:f4:24:ce:00:79:d5:b0:20:a4:6d:5b:a2:aa:
                    dc:68:7a:94:ab:4f:d2:ad:60:61:eb:0c:c8:c7:f9:
                    d2:87:6e:8c:40:47:ea:07:c1:16:6b:9c:8e:c3:0c:
                    7d:fa:b5:15:5a:0b:a2:b6:d4:df:5a:3a:0c:0e:11:
                    32:e9:0e:1f:75:e6:97:c0:1a:06:28:6a:a6:a6:57:
                    b6:c4:01:78:6a:19:b4:04:2e:f7:12:d4:cd:33:f4:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E3:41:62:B6:0E:E4:BC:0F:EE:48:7F:91:9E:45:26:3F:70:1B:F9
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B5EBBBD0DF6811EC866E2171C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:73:f4:1b:d7:95:2b:87:fa:ed:ed:00:53:48:35:55:d4:2e:
         cb:1f:0a:17:43:9e:9a:2b:3d:c8:0f:60:b6:51:a2:12:73:ae:
         42:52:47:bc:b4:0c:e1:4f:0e:aa:e1:57:9d:28:0c:75:5c:85:
         26:8b:d4:75:71:59:54:25:95:4a:a4:45:b1:8f:a1:7d:d0:06:
         8a:79:20:35:1d:af:47:55:65:68:f4:66:40:ae:53:ff:de:b4:
         22:17:a7:3c:b1:25:b9:ba:a2:58:52:81:d7:30:21:92:3a:02:
         fa:24:e7:ff:3d:4b:53:26:ba:80:57:1b:6b:69:ef:e4:5a:da:
         bf:67:b8:8b:9c:ac:b7:a7:55:e6:ea:9a:ca:f8:3d:79:02:fc:
         f9:77:15:38:d3:09:c7:9c:4f:e9:b0:eb:80:80:dd:e8:17:dc:
         14:36:bf:05:aa:2d:11:84:ad:70:ae:17:4b:ec:9b:f4:c7:ae:
         d1:6f:9b:f2:99:6a:66:c4:30:39:08:f9:8f:65:0a:26:35:de:
         bf:4c:8d:61:bf:8c:57:fd:bf:43:0f:33:d7:a5:9b:98:1a:8b:
         f2:f6:a2:4d:35:2b:80:01:90:eb:d9:c4:b7:ff:10:ba:58:03:
         b4:ec:a0:c1:17:6a:3c:f1:68:ad:a6:27:35:f8:e0:98:35:d1:
         a9:db:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:44 2026 by rpki-client