Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C851DA1CDF6C11ECB4B9B26AC4F9AE02.roa
File:                     C851DA1CDF6C11ECB4B9B26AC4F9AE02.roa (raw, json)
Hash identifier:          GFMduXrLZefKLckPU7xko/qq5wLw3cDo1jqeCUPcoaA=
Subject key identifier:   93:9B:04:63:F1:7E:29:48:7A:C8:4C:CB:91:F5:1C:6A:03:15:CF:DD
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A34
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C851DA1CDF6C11ECB4B9B26AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:56 +0000
ROA not before:           Wed 27 Aug 2025 01:06:09 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45958
IP address blocks:        27.254.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2612 (0xa34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:09 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58864-926c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:53:89:48:c2:c4:30:e8:68:28:10:d5:57:
                    31:c9:86:ef:29:91:6c:e2:e3:00:03:d7:a1:4a:c0:
                    56:30:dd:c3:aa:c7:2f:9d:e2:d9:bf:df:f3:79:44:
                    52:a6:60:f9:9d:83:60:a7:cb:15:18:0a:41:70:d3:
                    b9:da:1f:5d:ca:91:e1:24:1f:64:ec:fa:d0:87:c8:
                    22:7d:e2:fb:66:8b:2c:45:75:0f:31:67:f2:52:85:
                    d3:7e:71:27:2e:91:c8:b7:a0:ae:de:ac:70:21:14:
                    50:0d:e0:bc:55:ad:5a:f7:5b:51:53:a4:1b:aa:bf:
                    95:69:7c:dd:54:e2:b7:ae:d5:f4:d3:c7:b1:7a:5e:
                    bb:c7:a9:c2:4a:05:2a:6d:db:c7:cc:5f:ed:21:af:
                    b9:5b:a6:05:18:19:ab:3b:31:36:1b:a0:16:b9:71:
                    b4:79:8d:ac:fe:e5:b9:16:b7:e5:51:47:e0:0c:bb:
                    01:ba:ff:81:ae:47:a9:f7:cf:c4:f5:6f:f2:9d:a2:
                    be:cc:65:53:61:a6:dc:67:83:11:de:94:e9:fe:f4:
                    11:69:87:75:c7:55:d7:22:64:6b:76:23:26:8b:7b:
                    12:4f:dd:3f:37:6f:cc:dc:48:f4:bd:c0:53:9b:ac:
                    6a:e1:38:2c:8a:96:c7:83:dd:66:52:10:27:9c:01:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:04:63:F1:7E:29:48:7A:C8:4C:CB:91:F5:1C:6A:03:15:CF:DD
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C851DA1CDF6C11ECB4B9B26AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:28:30:be:47:4f:60:80:27:c3:08:93:63:55:e5:76:8b:
         1d:e7:e1:a2:92:f2:18:85:b8:84:f7:87:3a:8e:45:fc:4c:c0:
         f2:23:94:35:c9:30:91:84:32:14:0e:2c:c2:df:f6:8e:33:f6:
         27:4b:3f:b8:c8:f2:b3:f7:c6:eb:a4:3d:e8:e7:f1:e0:e0:33:
         ef:5f:2c:bd:dd:a7:df:53:38:6e:4d:0c:48:2b:9d:2d:c7:89:
         53:23:e7:5f:86:ce:49:da:14:9d:f0:91:06:49:c0:5d:bf:95:
         4b:94:16:57:49:61:47:a7:ab:25:0f:c0:88:2f:eb:ec:8c:bc:
         57:8a:04:6f:4f:a4:c3:bf:9c:9f:8d:44:d4:08:89:19:37:a9:
         ca:f4:34:2c:d9:66:56:57:2d:f2:eb:b5:63:97:ba:87:a1:1f:
         a2:27:67:4b:f5:e0:d1:4a:c6:3c:4f:d1:91:f4:1d:99:29:6f:
         16:8a:c3:04:f5:c9:f9:93:b8:dc:65:8d:fd:61:a8:7d:61:9d:
         a1:36:6d:2a:fc:38:76:96:ec:aa:09:e4:07:8a:88:20:21:1a:
         38:ef:4e:1d:16:f2:45:b9:d5:81:b8:ec:19:1f:e4:ae:6a:cf:
         b1:e5:e2:77:4d:87:ae:4f:0c:43:27:c9:10:6f:20:3e:ed:14:
         ea:f5:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:18:33 2026 by rpki-client