Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7AF1034DF6C11ECB4B9B26AC4F9AE02.roa
File:                     C7AF1034DF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          AXwLxetPBEsJnlB9aJ3GUzNL3M+MzUPoVEc2eZF1gKg=
Subject key identifier:   40:F5:D8:DF:AA:56:3C:26:14:D2:96:37:17:86:58:A0:6F:6B:02:7E
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A2F
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7AF1034DF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:52 +0000
ROA not before:           Wed 27 Aug 2025 01:06:05 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38820
IP address blocks:        27.254.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 23:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2607 (0xa2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:05 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58860-1263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:6c:f5:88:85:85:2e:3f:39:54:b1:18:56:
                    c9:88:e8:0a:53:bb:b4:39:53:fc:f1:f3:30:8c:c6:
                    5a:9c:d2:8a:e7:ff:b3:b8:79:a2:7b:cf:b9:85:a3:
                    f0:40:0e:01:39:7c:40:da:03:7e:ff:d9:bd:d8:d3:
                    e8:bf:65:e3:47:dc:66:7b:24:be:a5:84:17:ca:76:
                    73:8b:9b:be:88:45:7e:a0:67:f4:56:64:99:87:09:
                    a7:f1:a9:ac:71:50:46:2d:e6:59:d2:de:31:b8:cc:
                    0b:11:2e:2a:e9:82:59:4b:bb:1d:d5:7f:e2:3f:7a:
                    f8:d3:e9:15:60:d0:bf:b6:ba:4a:14:63:93:95:ae:
                    bc:d3:8a:25:e7:9a:ac:0d:b6:eb:ae:49:ae:6b:17:
                    c6:37:aa:84:04:a6:a4:1d:5f:45:bf:6f:8c:2b:96:
                    33:f8:26:59:fc:47:89:5b:85:74:5e:1a:29:53:39:
                    76:3d:df:8b:a2:d9:c0:39:fc:5c:a2:cc:9b:fb:11:
                    95:ee:b4:90:9f:7e:fe:23:d3:38:9c:fa:c0:91:b0:
                    3e:52:fe:56:d4:e8:e0:ac:40:68:dc:8a:c2:d1:79:
                    8b:7d:11:42:17:98:a4:a7:2f:68:84:c3:5f:7e:21:
                    23:c4:e5:22:49:94:62:1e:4c:1d:6c:61:9e:94:1b:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F5:D8:DF:AA:56:3C:26:14:D2:96:37:17:86:58:A0:6F:6B:02:7E
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C7AF1034DF6C11ECB4B9B26AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f1:a7:0a:ac:55:a8:85:03:1b:f7:bb:80:2b:f5:05:c6:4e:
         c7:d7:15:0a:e5:67:a3:b8:51:d4:06:b0:e0:d9:a0:f8:ef:52:
         1e:5a:cc:93:f9:be:a9:ab:80:2e:77:e8:1e:3d:d7:c8:74:e1:
         97:c3:14:22:75:4d:35:da:e2:22:92:e2:4a:33:01:3d:9e:cb:
         7e:6e:bb:94:bc:4f:2d:7e:21:73:9f:3a:6f:8d:17:80:e6:ea:
         12:9a:82:1a:f3:35:3f:93:83:9b:7a:60:5e:a1:a9:b5:4b:30:
         f3:0b:cd:a1:bd:3e:d9:20:8c:b1:24:eb:3f:81:e6:38:2b:f2:
         d5:a9:37:7c:9d:f6:d8:69:25:17:e7:cc:3d:8a:2a:34:de:0d:
         51:79:3f:5c:52:8e:b3:75:84:99:3f:dc:e8:47:fc:64:a0:8f:
         a5:5b:d8:9c:ca:09:e2:32:5f:83:2d:81:bf:1f:be:29:44:2b:
         ec:c6:ed:3e:b4:b7:72:27:ae:50:26:c5:0e:b8:6e:20:58:2a:
         8f:a3:02:c8:fd:44:d7:c3:5d:c5:c3:07:0e:73:32:af:dd:45:
         ef:96:40:27:4e:3c:43:90:4a:2f:82:7a:72:95:36:4b:a5:d1:
         35:b6:6b:75:cf:6c:99:41:fa:a3:7c:f1:84:64:f7:a3:4a:03:
         96:bb:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:24:16 2026 by rpki-client