Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa
File:                     C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          +hAz0TAD2JHlj/90VsgI+Orzo+v0MkrKUBl77SEFuH0=
Subject key identifier:   A6:3F:4F:ED:43:BA:36:91:01:FF:8E:B5:9D:0B:12:72:E2:AD:86:4C
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B2C
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:49:41 +0000
ROA not before:           Thu 03 Sep 2026 00:49:41 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138344
IP address blocks:        27.254.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2860 (0xb2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:49:41 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c425-530e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:73:f9:17:1c:33:ea:3d:58:d1:a3:e9:f2:
                    51:41:6d:7c:96:1c:8d:a8:60:ca:19:ea:34:ed:1d:
                    29:1b:f8:2b:c6:ef:c6:56:d2:21:16:35:98:69:25:
                    cd:af:57:aa:10:a3:c2:97:9b:82:bb:92:60:97:8a:
                    9b:a4:46:43:e5:00:88:27:a9:43:30:db:db:b3:73:
                    2e:10:08:80:dc:e3:6c:f0:d3:e6:30:04:61:e9:01:
                    e0:62:5f:3b:cb:7f:f2:79:7a:de:e1:85:e5:04:24:
                    68:f1:8e:0f:36:6a:ee:e0:d3:40:c9:ca:5d:fb:a1:
                    a9:06:28:6a:53:44:9e:c8:2e:61:91:7f:77:2d:5a:
                    84:e0:cd:f1:0b:bf:4b:b2:91:e5:b2:dd:4b:1c:14:
                    eb:c1:dd:2c:3a:0c:31:1c:28:ef:c9:b3:49:7f:1f:
                    71:d2:ce:18:b6:d8:76:8d:8b:13:4c:94:73:c5:8d:
                    88:0d:16:6d:28:71:77:a6:38:84:82:41:81:c0:1a:
                    20:2e:6b:89:bd:78:6e:3a:75:7c:b6:64:82:4c:82:
                    18:0a:94:15:b3:8f:01:26:a7:fa:09:c5:55:81:2e:
                    8d:b1:f9:a1:77:48:20:1b:14:23:af:4f:7f:92:03:
                    57:71:3c:f0:94:6a:23:11:94:28:92:32:0d:b5:07:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3F:4F:ED:43:BA:36:91:01:FF:8E:B5:9D:0B:12:72:E2:AD:86:4C
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:91:04:e3:eb:06:4c:dc:8f:0e:cd:62:1c:21:0e:e9:2d:8c:
         ae:ec:14:dd:89:ee:37:5a:fc:b0:d5:1f:20:56:19:a0:eb:73:
         87:0d:a8:b7:c1:1d:fc:de:7d:79:47:fd:27:8a:1d:c9:6a:17:
         d1:42:9f:db:47:b7:b2:be:b6:29:a1:24:10:55:b7:73:2e:af:
         83:b5:07:72:ea:4a:78:e1:c7:ca:cc:1c:be:5f:08:3e:79:bf:
         0f:27:62:15:04:ac:1e:c9:b8:95:a5:74:8a:bf:b5:ec:cd:92:
         9e:7e:72:91:3a:ec:de:a9:f5:62:05:d9:75:4e:1e:d6:be:43:
         58:b3:46:fa:88:76:13:f0:f0:95:56:ba:52:a3:08:1a:b1:0b:
         2a:84:12:b3:0e:fb:d9:40:e3:45:30:74:8d:65:41:6e:d3:58:
         a8:bd:ea:91:52:4c:82:a2:68:3d:dd:62:da:8b:51:b1:63:cf:
         30:3b:c2:14:d9:01:ab:0a:4f:c9:f4:1a:c2:71:19:44:2b:34:
         29:5f:b9:02:e3:19:5e:86:7a:c3:5e:1b:7a:cf:02:15:d4:d7:
         b4:92:3b:9d:13:97:32:3c:63:7b:30:64:50:03:b9:95:62:d7:
         84:4e:4d:39:f1:7d:75:69:84:88:f5:e7:77:1c:6f:19:b9:76:
         b4:31:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:11 2026 by rpki-client