Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C55556FEDF6C11ECB4B9B26AC4F9AE02.roa
File:                     C55556FEDF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          uPF/wCeaZvEwGF78lnTEpau0sGpOrykG4jdHy8HSOrk=
Subject key identifier:   BF:17:C5:DB:93:A3:57:BA:F0:B6:7F:54:16:22:45:4E:42:EE:77:80
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       064B
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C55556FEDF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:36 +0000
ROA not before:           Wed 27 Aug 2025 01:05:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134064
IP address blocks:        27.254.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59e0-991e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:f8:74:ab:a7:be:0c:61:01:66:f4:27:52:
                    c6:c4:07:5e:64:bf:46:d8:f7:15:f8:34:ef:f9:7b:
                    33:78:30:62:20:e6:51:7d:c2:09:a0:44:95:4d:f9:
                    07:17:4b:f3:0d:72:fc:f9:43:3d:49:08:d9:29:98:
                    75:72:d4:7b:60:81:77:cc:64:d0:47:47:9f:cb:86:
                    64:8f:44:bf:f4:71:27:8f:25:3f:f5:e6:d6:68:93:
                    6a:47:17:2e:5b:f8:46:57:66:8a:ef:48:73:11:b9:
                    2c:d3:df:3d:34:4a:0d:af:49:b7:8a:6f:a3:14:42:
                    19:9e:38:db:2b:3e:b0:12:20:f2:67:88:30:74:3a:
                    27:a7:db:95:c3:b9:7e:2b:d7:4c:73:a6:c8:b8:e6:
                    91:68:f9:88:22:55:2f:56:c5:09:b2:1a:1f:ef:ed:
                    22:af:c9:57:b4:d6:80:9e:8d:38:2d:c0:33:27:cf:
                    2b:13:b5:86:40:95:45:7e:61:b6:91:22:3a:07:62:
                    29:ae:10:7d:3a:0d:2a:87:91:8f:00:2c:f4:c9:c3:
                    d7:c8:87:3b:4c:32:8d:b7:92:47:ad:bc:c3:90:bd:
                    2a:97:41:fa:05:53:d3:bb:03:eb:cc:0f:6e:5d:ae:
                    67:0b:4e:15:45:57:af:9e:5f:6d:b4:9b:62:ee:f5:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:17:C5:DB:93:A3:57:BA:F0:B6:7F:54:16:22:45:4E:42:EE:77:80
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C55556FEDF6C11ECB4B9B26AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:9c:c1:f3:73:47:b5:04:98:e2:e4:d1:6a:dc:99:f8:48:
         8c:67:14:64:f6:3c:46:07:f2:44:fa:a1:96:20:c4:8d:0d:ed:
         5b:c2:33:97:20:01:02:37:3f:92:f7:80:4c:46:64:d2:6e:29:
         02:c4:ef:e3:0b:92:32:35:ca:6c:a0:a7:dd:51:9d:eb:61:c4:
         b5:2f:14:de:95:d9:c8:72:3e:72:08:e5:37:64:11:88:d2:d7:
         cd:d8:f0:ed:8e:4d:3c:30:5e:11:af:85:2f:19:a1:83:1e:9a:
         56:2c:48:28:88:2a:f1:87:82:25:21:5b:f9:bb:04:86:d9:e3:
         f1:b7:1f:f9:67:69:cf:76:e8:10:0a:92:17:57:c2:a6:78:77:
         09:8c:7f:a3:db:ae:01:3b:06:6e:8b:64:bd:a8:38:2d:53:5f:
         48:89:22:fc:a4:6f:08:67:39:3a:4d:85:0c:33:53:ee:85:3a:
         0a:29:ca:85:c4:43:97:4b:c8:26:d0:0f:6b:6b:b4:a2:c6:65:
         99:99:ae:8b:ee:87:52:08:aa:28:c3:ee:d2:a0:60:82:70:3e:
         06:5d:d5:e4:3a:56:c5:cd:a3:82:9c:60:ca:2a:71:84:a3:27:
         a5:83:d0:92:ca:b8:41:e2:69:ae:15:22:3d:78:33:b4:1b:92:
         83:5c:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:28 2025 by rpki-client