Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa
File:                     B7669D2CDF6811EC866E2171C4F9AE02.roa (raw, json)
Hash identifier:          AEO/PGsp2vEFnwLPQdiqTpggV6jEzm1FrfSDo6ylhQU=
Subject key identifier:   0A:6B:23:0E:AD:63:E6:74:EB:7F:FD:3F:02:CD:16:AE:BE:3B:5D:5C
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A37
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:59 +0000
ROA not before:           Wed 27 Aug 2025 01:06:13 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55325
IP address blocks:        27.254.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 23:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2615 (0xa37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:13 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58867-cbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:fd:0b:80:04:a9:72:cc:b2:de:97:9d:df:
                    2c:de:72:39:c0:a1:a6:ea:20:6c:77:ca:e2:be:9d:
                    1e:e0:71:56:df:55:2d:5c:08:00:23:8c:24:86:0d:
                    66:21:04:f2:af:d4:93:56:35:07:f2:ad:af:37:a8:
                    6d:ee:c0:75:bc:ed:e8:ff:32:0c:ae:08:02:1f:96:
                    67:74:bd:5f:a3:ad:31:f3:bb:66:e3:7a:8f:2a:28:
                    bd:68:c2:af:63:dc:48:ab:7e:92:ba:ae:6f:10:99:
                    c2:cc:08:d9:d9:ca:38:5b:44:5b:a4:cd:b2:63:b7:
                    c2:da:bc:24:28:8f:b6:d1:07:81:a0:87:f0:1b:aa:
                    69:92:3a:80:44:3c:14:69:ac:7e:17:87:02:f6:e3:
                    c5:b6:aa:dd:fd:64:c4:c6:42:25:0e:49:73:86:85:
                    33:81:d5:9c:74:b5:33:09:01:2c:12:c0:d2:4f:08:
                    a9:90:ae:c7:cb:6e:ef:42:e2:d8:09:05:b2:73:fe:
                    41:b7:64:ea:49:81:73:f0:5c:24:c8:ec:ba:d3:f7:
                    4e:f5:18:a4:14:24:32:64:8f:07:6c:ec:4f:9d:b8:
                    dd:6d:10:87:af:87:73:f6:79:89:65:dd:76:1b:21:
                    0a:14:14:f9:65:54:4a:56:43:0d:6a:ae:c9:bf:31:
                    82:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6B:23:0E:AD:63:E6:74:EB:7F:FD:3F:02:CD:16:AE:BE:3B:5D:5C
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:6e:2f:29:d6:56:52:e0:68:aa:20:0a:64:94:63:24:63:0e:
         4c:ec:02:c9:16:0f:83:5a:f6:84:92:b0:18:73:6c:fd:0e:39:
         c9:9a:df:82:c7:0f:cc:be:d5:8b:4c:fa:48:10:71:f6:d3:25:
         75:62:b6:73:7a:63:3e:24:c2:c9:6b:dd:08:39:bf:1e:dc:15:
         42:f0:2e:14:dc:66:f4:c1:07:73:5d:55:2a:77:c5:42:c4:66:
         23:03:95:cc:88:40:3d:8f:44:19:39:1f:8b:4a:35:2d:27:99:
         f2:61:6d:25:c5:0c:78:54:1a:55:ea:9d:32:17:09:53:0f:dd:
         c5:e8:30:8a:0a:a3:8a:c7:fb:b4:d8:f5:69:10:fd:ee:70:99:
         f5:d5:be:b2:3b:74:b8:b6:8a:3b:f4:c1:fd:5b:c5:80:1c:e0:
         7a:10:46:46:55:40:60:c5:a9:7d:7d:b9:cd:cb:66:1c:a2:d4:
         13:68:8d:81:97:b8:99:8b:4c:d1:4a:21:3d:a9:e3:ed:58:c1:
         88:71:b7:16:41:dc:2d:d2:4b:4b:54:34:05:d1:50:a8:0e:3d:
         51:56:15:e9:e2:bb:7f:af:2b:bd:4e:9b:0c:cb:df:0d:3c:3d:
         58:3f:79:f0:65:a4:8a:14:70:7d:9c:62:65:3f:5a:34:00:09:
         6e:51:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:23:23 2026 by rpki-client