Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa
File:                     C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          5kUjDqKJGxJ3A1dCnldmn7oe3RMfQ6ZScQN5E38cbX4=
Subject key identifier:   35:94:B6:0F:08:40:53:AD:77:AF:A0:27:4C:5C:06:87:77:4C:76:7A
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0655
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:45 +0000
ROA not before:           Wed 27 Aug 2025 01:05:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138344
IP address blocks:        27.254.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:45 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59e8-fa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:c1:50:d1:23:1e:22:d0:41:66:9c:a5:80:
                    ac:7a:26:eb:16:16:e2:ff:fb:1e:93:c2:8e:ab:1e:
                    75:d0:1e:18:50:d8:a0:d8:09:f2:f5:76:88:d7:46:
                    ab:52:ad:0a:c6:5d:d9:20:ff:aa:43:a0:28:c8:0d:
                    71:bd:7a:40:87:86:df:45:70:c5:12:58:a8:4e:ab:
                    d3:ab:e8:eb:b1:56:0b:4f:df:9f:bf:41:aa:96:78:
                    1e:22:a0:36:a2:64:3b:b1:3a:eb:e7:0a:e1:e8:d7:
                    8a:ad:8f:6c:cd:88:34:01:d7:d2:29:a3:63:7d:d7:
                    69:68:b2:ec:25:71:bf:4b:02:bd:42:a2:b5:7b:df:
                    51:6a:6c:2f:50:90:47:43:fd:2e:4a:56:47:6d:21:
                    3a:d3:77:64:e1:dd:5f:d8:d6:f0:77:22:4f:82:1f:
                    ce:aa:85:75:e1:d8:8e:c3:fa:95:01:52:cb:4f:44:
                    40:f6:72:2e:1b:40:ef:22:f7:4d:13:e2:e7:39:6f:
                    fa:00:ce:72:06:b8:58:cc:4c:d2:7b:f1:f7:87:7c:
                    0a:25:49:79:85:c3:c8:77:26:9e:ea:e7:a0:69:81:
                    11:ee:e1:7b:4b:ef:54:c1:5a:f4:8f:6b:16:43:94:
                    33:59:0b:12:b7:22:52:65:96:f9:81:40:bd:ed:b6:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:94:B6:0F:08:40:53:AD:77:AF:A0:27:4C:5C:06:87:77:4C:76:7A
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C5D8861EDF6C11ECB4B9B26AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:04:36:85:73:11:b0:88:61:4b:ae:51:5f:7e:10:39:74:79:
         c0:f8:d3:a3:38:32:83:52:62:86:dd:14:31:8b:cb:9b:8d:6b:
         ce:51:d2:22:bf:bb:02:d9:8b:16:8e:d6:d3:ec:94:b4:09:ca:
         96:92:ae:99:18:41:63:c9:0a:e2:fb:06:a7:00:37:d9:86:df:
         8b:42:c6:90:70:8a:1a:1f:45:68:68:4d:1d:6c:67:19:c1:26:
         40:71:03:a5:14:ae:ee:79:dc:86:39:ed:7f:b2:d1:8d:04:8d:
         9f:bc:a3:62:92:2c:1d:84:dd:dd:92:ab:a8:39:94:aa:94:da:
         5a:c7:88:14:92:5a:9a:0c:ec:61:23:01:e4:ea:4f:1d:65:96:
         5a:43:f4:f1:e4:27:ec:1b:db:4f:32:e1:29:b5:58:26:de:bf:
         04:b6:b0:be:57:ef:77:b1:dc:7c:3f:f1:75:e9:c6:39:c9:de:
         f0:20:09:c0:41:73:5f:a9:92:8c:16:a8:04:11:20:59:66:2c:
         ae:3a:82:a0:af:da:99:e5:a8:8d:e1:0f:10:6e:48:b0:29:a2:
         86:18:32:e6:0e:4a:c5:8e:3e:14:52:e8:dc:fe:62:fd:1d:86:
         6f:87:42:a6:de:bc:0f:a1:b6:17:4c:68:12:89:e2:c0:d8:26:
         69:2b:42:71
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjUwODI3MDEwNTQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGFlNTllOC1mYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7jBUNEjHiLQQWacpYCseibrFhbi//sek8KOqx510B4YUNig2Any9XaI10ar
Uq0Kxl3ZIP+qQ6AoyA1xvXpAh4bfRXDFElioTqvTq+jrsVYLT9+fv0GqlngeIqA2
omQ7sTrr5wrh6NeKrY9szYg0AdfSKaNjfddpaLLsJXG/SwK9QqK1e99RamwvUJBH
Q/0uSlZHbSE603dk4d1f2NbwdyJPgh/OqoV14diOw/qVAVLLT0RA9nIuG0DvIvdN
E+LnOW/6AM5yBrhYzEzSe/H3h3wKJUl5hcPIdyae6uegaYER7uF7S+9UwVr0j2sW
Q5QzWQsStyJSZZb5gUC97bZdMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDWUtg8I
QFOtd6+gJ0xcBod3THZ6MB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQzVEODg2MUVE
RjZDMTFFQ0I0QjlCMjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAb/t8wDQYJKoZIhvcNAQELBQADggEBAEMENoVzEbCIYUuu
UV9+EDl0ecD406M4MoNSYobdFDGLy5uNa85R0iK/uwLZixaO1tPslLQJypaSrpkY
QWPJCuL7BqcAN9mG34tCxpBwihofRWhoTR1sZxnBJkBxA6UUru553IY57X+y0Y0E
jZ+8o2KSLB2E3d2Sq6g5lKqU2lrHiBSSWpoM7GEjAeTqTx1lllpD9PHkJ+wb208y
4Sm1WCbevwS2sL5X73ex3Hw/8XXpxjnJ3vAgCcBBc1+pkowWqAQRIFlmLK46gqCv
2pnlqI3hDxBuSLApooYYMuYOSsWOPhRS6Nz+Yv0dhm+HQqbevA+hthdMaBKJ4sDY
JmkrQnE=
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:28 2025 by rpki-client