Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa
File:                     B7669D2CDF6811EC866E2171C4F9AE02.roa (raw, json)
Hash identifier:          wy56wBnBMCQ3bSl+n0Dqzd3VJWocC0PfohiGGV4qu9s=
Subject key identifier:   13:69:C8:6F:40:36:12:4F:D3:E5:41:0C:8F:8E:C8:18:A7:F5:7E:E0
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0674
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:06:13 +0000
ROA not before:           Wed 27 Aug 2025 01:06:13 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55325
IP address blocks:        27.254.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:13 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae5a05-bee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:fa:0c:e3:a6:c5:b1:ef:51:6f:87:ab:07:
                    c2:9c:5e:ab:fc:fe:08:4a:1a:b8:28:69:6f:d1:af:
                    de:90:eb:24:28:66:34:be:0d:ac:b5:c7:49:b8:42:
                    f0:10:f5:5c:82:3d:5f:73:64:c8:fc:e1:a8:f3:6b:
                    ca:5d:9c:ba:e3:8f:37:c2:f2:b0:93:36:38:a3:89:
                    bb:8f:99:4c:03:23:58:eb:9c:bf:f4:8a:e9:e4:70:
                    2e:b9:1c:89:e8:73:ff:92:d3:41:22:2d:86:6f:fd:
                    78:f8:e9:94:20:ad:d5:5e:df:36:b5:93:05:c7:29:
                    eb:b8:ac:73:eb:4a:d9:77:d7:f0:64:a7:97:d6:95:
                    11:b3:21:89:7e:77:8d:d9:eb:b7:71:79:57:fc:27:
                    2e:b4:af:cc:c1:1f:71:fc:0c:62:b3:33:df:27:12:
                    5c:77:9e:d5:5b:70:e6:2c:95:c1:f2:27:e1:a3:96:
                    d8:9b:bd:39:ac:e5:df:a7:b8:97:2a:46:bd:42:57:
                    36:d8:56:6e:49:c0:17:eb:2f:53:ff:15:dd:89:f3:
                    fb:42:da:6a:37:12:3a:ac:39:31:dc:3d:ae:6e:b6:
                    fe:57:95:cc:b5:e4:c4:0b:68:50:aa:1b:0d:21:f0:
                    d1:eb:94:f2:17:09:10:7d:2a:d1:3e:51:e7:eb:66:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:69:C8:6F:40:36:12:4F:D3:E5:41:0C:8F:8E:C8:18:A7:F5:7E:E0
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B7669D2CDF6811EC866E2171C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:e1:75:44:3b:56:00:93:31:d3:dd:53:de:5c:36:aa:10:
         34:18:26:34:b2:d6:b4:3c:a1:05:cd:58:7e:dc:3e:3d:7c:a6:
         d7:01:29:0b:da:0c:da:83:57:ad:4a:8a:0f:13:43:8d:65:ca:
         33:22:b9:ea:f7:d3:77:62:77:b0:86:3b:a7:cd:30:2b:d8:cb:
         0a:6e:34:e6:8f:6f:1e:6f:9a:a8:c3:e8:c3:2b:af:13:20:a5:
         30:bb:14:f7:a8:8f:cd:3f:14:9f:13:ed:b8:0d:4e:9c:08:82:
         62:ef:8f:67:bd:f3:2c:73:6c:7f:46:0f:14:1e:47:d9:ab:49:
         c6:3e:44:c8:fd:6a:31:dc:38:7b:c5:33:01:c9:63:18:3f:51:
         96:42:3b:c9:65:ce:0d:71:7d:29:d7:27:04:42:41:9f:d5:cb:
         69:90:e1:a0:09:86:e8:0b:fe:fb:48:d4:95:03:2b:ae:c2:2f:
         78:e8:6d:0e:6e:39:0b:4b:14:7d:d0:64:8f:3c:94:47:83:33:
         36:e3:68:40:c3:bc:1e:8a:88:52:e0:b5:d6:d4:c2:77:a9:03:
         96:69:4d:ec:32:94:18:cf:44:93:a7:67:41:a1:4b:46:00:64:
         f4:ce:58:ed:62:fb:5e:82:62:cf:74:a9:e6:d8:91:f6:36:b4:
         d8:74:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:19 2025 by rpki-client