Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa
File:                     B7669D2CDF6811EC866E2171C4F9AE02.roa (raw, json)
Hash identifier:          d0es5BRcgen4RLEPG2kVubm2Ry6AwkUOcyLz+zW2Y5U=
Subject key identifier:   B3:02:A3:00:CD:D5:16:54:78:B1:4D:20:49:4E:86:2F:AA:46:23:1F
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B4F
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:50:52 +0000
ROA not before:           Thu 03 Sep 2026 00:50:52 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55325
IP address blocks:        27.254.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2895 (0xb4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:50:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c46c-d13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:af:07:44:ff:3c:f8:16:a0:82:8c:75:c0:
                    c0:85:c0:48:d2:f4:08:48:03:7a:d7:81:75:69:8c:
                    5f:5b:cf:67:8d:c1:9b:b6:d8:22:10:c5:9b:6a:0d:
                    ed:0f:62:23:5f:40:79:fe:d7:6b:b9:6a:19:bd:16:
                    66:95:e3:fc:e0:b2:61:ec:89:fa:09:a8:b6:0c:3b:
                    82:87:ac:b7:83:4f:21:b0:bd:a3:f8:9a:35:56:7d:
                    ba:8b:5d:06:12:75:6f:72:b6:c2:57:46:d8:70:c0:
                    86:9f:1d:3f:24:fe:b6:6b:f2:2e:84:17:8c:c3:84:
                    50:1b:aa:8e:e7:c5:7b:f0:5e:13:42:d1:a1:cc:d8:
                    59:a6:5e:ef:c3:bc:ea:7b:77:14:6e:9f:c1:93:5e:
                    38:11:02:d7:1e:b5:83:76:38:55:ef:5f:fb:71:d8:
                    7c:a5:ed:47:a1:52:6e:51:3c:ca:bd:92:cf:cd:85:
                    b1:b5:31:0c:91:36:ee:bc:c7:fd:ff:83:f0:16:a6:
                    21:d7:90:37:23:1f:44:6c:31:a2:97:a0:29:1c:9a:
                    d5:ef:7e:3d:6c:e4:ae:fa:75:14:c5:ca:9c:e2:d4:
                    69:92:96:e1:a1:e1:62:2e:40:ac:6d:ad:f2:cd:e6:
                    9b:3b:9d:16:c3:ce:13:fe:94:cf:b1:4d:a1:66:22:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:A3:00:CD:D5:16:54:78:B1:4D:20:49:4E:86:2F:AA:46:23:1F
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:96:00:13:74:ef:32:96:a0:f0:7e:0d:1e:a4:c2:be:95:83:
         7f:c4:52:c9:3c:85:7e:8b:47:ee:c2:d1:d9:9d:5b:0c:bd:ec:
         fc:b2:25:63:ab:6e:d4:3c:c7:d5:f9:5e:08:33:50:7f:85:c1:
         55:e7:ce:f7:c4:30:00:23:be:48:33:ef:19:e8:e5:4b:bf:87:
         7f:3e:9a:00:8a:86:7e:2a:12:c2:2f:4a:44:e3:ee:f3:68:e2:
         28:bb:11:ba:6e:ab:aa:74:8d:f3:6a:cc:b5:47:b9:ab:2e:dd:
         ae:60:60:79:da:c1:a8:08:ac:5d:57:c9:8b:17:a3:99:56:2b:
         62:3c:50:31:42:95:e0:66:96:31:af:9f:aa:dc:54:aa:01:b0:
         e3:d3:02:b7:9b:78:14:83:40:09:e0:01:85:e7:19:53:57:ed:
         48:41:b1:ec:e1:97:aa:f6:0f:71:9a:be:81:e7:da:b9:9d:36:
         1d:0d:bb:01:cf:2e:53:2f:fd:5b:81:b8:4b:54:8d:34:c0:4f:
         68:bd:85:9c:5a:1e:bc:dc:65:43:e1:fd:2a:26:22:09:f0:e0:
         c4:01:d9:96:7f:fa:c0:63:de:cd:a7:3b:54:ae:5c:f6:72:33:
         e7:ea:0d:0e:0a:d6:ac:66:cf:c7:5b:58:64:06:a4:bd:62:74:
         9f:82:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:11 2026 by rpki-client