Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7052DC6DF6C11ECB4B9B26AC4F9AE02.roa
File:                     C7052DC6DF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          QOpIcvsyldpzUk0tx4FSJ9LgexxwZAz5KDdUwHggk54=
Subject key identifier:   D1:0C:3D:81:57:CE:B3:63:63:A2:92:CE:D1:50:19:0A:AD:53:02:DC
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A2D
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7052DC6DF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:50 +0000
ROA not before:           Wed 27 Aug 2025 01:06:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38718
IP address blocks:        27.254.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 23:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2605 (0xa2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:01 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5885e-6d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:f5:b6:7b:87:55:ea:33:36:85:fe:b2:8e:
                    32:b9:b0:61:e9:71:47:d8:45:e9:e0:37:d0:b2:46:
                    75:90:94:39:c0:10:91:8b:70:37:31:f7:ea:a0:39:
                    df:74:87:93:ea:fc:05:e2:2f:62:d3:93:e6:a2:34:
                    b5:e5:ea:f7:6a:8f:4c:ca:4c:f1:87:9f:2c:44:e9:
                    20:a8:4a:ba:93:a4:5d:30:dd:88:de:79:3b:2b:9e:
                    1c:a1:51:f5:c8:8f:a4:ad:39:d2:c0:58:c6:1a:07:
                    2b:dc:f7:f3:24:b0:f6:68:4e:02:5b:d9:c0:8d:15:
                    c8:96:56:31:4e:35:ee:81:42:f3:6f:32:7b:eb:05:
                    14:5f:03:8b:89:06:36:b7:bc:91:74:a0:70:74:a3:
                    2e:21:85:32:e4:c4:89:92:bc:bc:71:f0:36:53:4b:
                    be:96:03:44:a1:12:e9:d7:f5:b5:50:7a:32:d2:10:
                    27:77:72:a1:80:c2:e1:76:ba:73:cf:9e:18:0c:b0:
                    3e:db:e7:27:2f:11:db:19:31:b2:a0:e9:46:81:51:
                    90:b3:b0:66:34:56:ae:f9:52:25:86:ab:80:93:49:
                    92:dc:c9:0a:96:67:1d:d0:56:dc:ae:a4:ee:8c:95:
                    0c:95:ae:71:c1:da:cc:89:2f:7d:07:10:46:9a:8b:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0C:3D:81:57:CE:B3:63:63:A2:92:CE:D1:50:19:0A:AD:53:02:DC
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7052DC6DF6C11ECB4B9B26AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:01:69:3b:27:c6:0b:23:4d:47:71:dd:9a:d4:6b:cd:b7:
         e8:eb:6e:0f:bc:d3:71:b9:70:b4:26:76:f2:dc:e3:80:0c:d2:
         98:a8:81:85:72:f0:8e:9d:b2:86:41:97:fb:b7:19:a8:29:49:
         b5:a4:15:34:e1:ab:63:c0:04:df:38:98:84:c8:56:b2:60:ad:
         72:74:3a:f0:85:b9:eb:e4:2a:df:8f:24:b7:c9:dd:5b:a8:73:
         e7:13:20:20:90:41:0e:5e:8c:35:b8:ba:bd:a5:02:7c:2f:47:
         58:73:14:37:4e:e0:4a:cd:e1:3b:5a:d3:08:f4:85:07:82:5f:
         4c:d3:eb:a8:31:e0:88:85:fa:58:b2:6d:95:9c:c1:b7:60:37:
         71:98:1f:65:8d:a1:31:3d:e1:b9:c5:35:d5:ea:36:5d:da:f8:
         d3:e3:23:e5:98:05:48:38:d6:0e:53:23:79:cb:5f:2d:26:99:
         f3:89:a9:fe:a7:55:51:a7:0d:1a:f6:9e:a2:8e:18:7a:0b:81:
         f4:35:21:0f:6f:e0:32:7d:49:34:3f:96:ba:23:dd:30:33:09:
         18:a2:4b:e8:ac:2d:bf:3e:ae:89:7c:1a:43:d9:48:9a:95:7d:
         ae:27:a8:a7:85:78:73:ac:ce:4b:48:03:be:02:59:6f:55:ac:
         32:e4:69:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:24:14 2026 by rpki-client