Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C3ED28C8DF6C11ECB4B9B26AC4F9AE02.roa
File:                     C3ED28C8DF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          uIFUpZ/oXp8ZLya9wFJ79xNvCuNEgXuRy+REZJg4C9I=
Subject key identifier:   85:F4:E1:E5:02:25:C9:ED:73:2A:3C:07:40:13:6F:F6:F1:78:10:44
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B1E
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C3ED28C8DF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:49:14 +0000
ROA not before:           Thu 03 Sep 2026 00:49:14 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132013
IP address blocks:        27.254.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2846 (0xb1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:49:14 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c409-85c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:e9:0c:ac:41:7e:23:20:4e:98:b4:27:2c:
                    f3:0a:cc:a7:1d:c4:d0:f4:a4:14:ca:27:e5:fb:fd:
                    61:c1:fa:7d:c1:fb:45:b6:3d:39:68:01:22:27:5f:
                    4e:8d:81:fc:61:ec:95:be:e0:79:63:38:46:49:bd:
                    8e:36:61:a4:c2:ec:94:bf:f0:e0:8c:70:6a:63:8b:
                    75:35:d1:ca:31:bf:66:00:47:33:ba:fd:ac:51:a6:
                    b9:a3:6d:9d:19:55:ba:6d:40:88:ac:d0:91:2c:0c:
                    8a:d8:4d:ab:65:34:48:c1:ab:5e:03:65:da:05:ba:
                    1e:34:6e:f0:10:18:b7:33:c7:c8:a0:af:3b:0c:a6:
                    c1:f5:0e:9d:4f:e8:55:8b:c0:66:cf:15:24:60:ea:
                    85:31:ba:3d:1d:34:28:42:ee:76:e3:c4:cf:e5:1b:
                    5c:ca:1a:0e:b2:80:39:78:63:90:ff:eb:ce:8e:44:
                    97:fd:3a:e4:ba:c7:24:92:65:63:79:2e:67:db:8b:
                    76:57:cf:1f:be:17:80:a6:dd:5c:fa:a3:cf:2d:63:
                    12:a1:e9:1e:0a:d0:25:65:a6:00:2f:cf:97:6f:72:
                    e2:68:7b:99:36:14:0b:d6:3a:0a:eb:d6:40:0b:f9:
                    a5:ba:2b:32:ac:aa:9f:db:34:4a:89:9a:a0:81:b8:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F4:E1:E5:02:25:C9:ED:73:2A:3C:07:40:13:6F:F6:F1:78:10:44
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C3ED28C8DF6C11ECB4B9B26AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c1:15:ae:8f:71:de:2f:3b:1c:d7:e7:a7:99:f1:37:ff:69:
         dd:ea:d1:a8:3a:e5:5b:49:6d:b8:01:80:50:aa:cb:a1:69:f6:
         4f:7d:ae:db:ef:c7:29:24:5c:0f:83:6a:45:39:0b:91:e3:dc:
         47:09:3d:e6:5f:c0:e5:14:71:e3:83:9d:a1:5a:27:6f:43:ff:
         2a:53:0a:3c:7b:ec:7c:f1:7a:fa:53:3a:00:d6:e3:fd:0e:92:
         cd:37:99:07:a6:91:74:08:98:b9:28:5c:9b:1e:46:85:d1:fe:
         7a:4e:8b:7b:0d:97:e6:56:27:9a:46:a9:3c:ee:b5:d2:2a:39:
         37:90:61:c6:fa:6c:18:71:54:fb:b2:85:b0:29:33:2d:b1:77:
         46:5e:7f:3d:7a:03:89:da:0a:af:2c:14:89:f3:85:23:ee:77:
         63:72:01:52:23:bb:1c:cb:f4:41:e8:cd:ff:fe:a1:2c:ee:f5:
         7d:45:37:fd:1f:22:70:c3:8a:16:76:7e:ce:9f:e9:34:aa:7f:
         51:40:ad:b9:a3:23:a0:4e:08:59:20:22:ab:01:62:ae:5f:ff:
         7f:1c:8a:b6:dc:a8:65:96:80:18:f6:f2:a0:15:58:b0:b5:d8:
         8c:44:32:f8:8b:6e:a7:9a:d8:70:ab:a8:8a:d3:fe:14:f4:9b:
         c6:4f:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:03 2026 by rpki-client