Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B5EBBBD0DF6811EC866E2171C4F9AE02.roa
File:                     B5EBBBD0DF6811EC866E2171C4F9AE02.roa (raw, json)
Hash identifier:          rdDqitZN8ybjH35jKf+WexYiDFjsFNPASHYuwktftpM=
Subject key identifier:   6A:A4:B9:70:82:C8:13:59:3D:FC:BE:DB:1B:51:C4:02:09:68:26:C3
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0660
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B5EBBBD0DF6811EC866E2171C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:53 +0000
ROA not before:           Wed 27 Aug 2025 01:05:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24214
IP address blocks:        27.254.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:53 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59f1-2040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:ec:d9:00:97:3f:05:11:4c:41:08:42:52:
                    ab:dd:02:0d:1a:68:94:18:15:be:72:46:32:58:58:
                    8d:a2:92:e5:23:03:68:e6:c3:92:88:47:19:76:ea:
                    06:91:16:f1:da:92:4d:40:9f:cb:dc:28:f6:36:7b:
                    f8:b5:59:3c:1b:f2:a1:59:d0:af:ea:52:81:f0:e5:
                    13:83:b2:c8:8a:1f:87:e1:32:48:8d:5a:f9:d4:00:
                    4f:ec:0b:10:5d:e0:33:e7:11:a0:fc:2f:64:a9:51:
                    5d:60:30:3c:23:d0:59:40:c0:41:e8:10:d1:19:f1:
                    d6:35:5b:04:11:66:81:35:2c:f2:c0:06:27:4f:c2:
                    23:a3:24:23:34:2d:bc:18:28:aa:38:91:4d:c2:66:
                    ca:9e:15:a1:88:ff:69:a1:fa:b9:9c:f4:97:dd:3f:
                    c7:52:06:30:13:77:cc:48:6e:24:08:9f:60:ca:87:
                    96:15:ab:53:dd:b2:8d:42:2f:be:20:bb:e6:c0:f5:
                    6a:3a:ac:26:13:70:aa:a9:bc:ca:5d:87:be:04:8b:
                    4f:00:8e:d6:50:a3:06:40:78:7d:17:41:57:93:54:
                    63:7d:d2:92:62:77:e4:b0:56:7f:b4:f3:28:fc:2d:
                    41:5f:32:ca:07:ad:6e:9a:0b:46:cb:3c:b7:a7:88:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A4:B9:70:82:C8:13:59:3D:FC:BE:DB:1B:51:C4:02:09:68:26:C3
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B5EBBBD0DF6811EC866E2171C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3b:da:58:dc:ae:de:30:23:b0:e9:93:1a:fb:00:b6:f1:0f:
         1a:a2:2b:40:e7:33:a4:ab:f7:d4:71:2e:d2:0d:e6:ec:1e:bf:
         78:d3:d4:d3:56:bc:60:a1:26:e1:c5:bf:1f:ac:6e:9f:0b:72:
         96:d1:3f:6c:13:c1:f6:52:a8:03:b8:92:82:02:e6:b5:54:fb:
         d1:2d:cd:32:c9:28:dc:76:17:1d:0b:fb:fa:ad:8d:34:57:65:
         c7:86:50:19:e9:27:4b:56:10:d3:ab:92:de:5e:68:07:6f:a9:
         73:0b:66:1f:02:ef:48:22:84:14:55:9e:27:67:95:bf:be:8d:
         61:8f:c7:fa:14:13:5c:bf:4e:53:e7:46:4e:c8:ba:49:38:8e:
         9a:e3:73:44:c9:91:21:64:21:05:aa:0a:2b:6a:d5:1f:9c:62:
         96:46:bb:92:10:49:97:dc:04:d7:30:cc:15:1b:e0:5f:e9:ea:
         2d:0c:50:b7:13:2b:a0:4f:4c:9c:ca:1a:79:2d:df:1d:cf:f3:
         92:0f:c7:5e:0a:4b:06:3f:cc:02:71:89:dd:29:d4:37:f5:c1:
         37:9e:d6:2e:3b:1a:d6:31:fc:39:cf:9d:14:86:30:23:b2:46:
         f9:15:09:cc:7c:eb:5e:7a:b4:6f:18:63:84:d5:0e:83:52:7e:
         13:37:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:16:26 2025 by rpki-client