Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/272C0A0CCFB111F0B4F9703EC4F9AE02.roa
File:                     272C0A0CCFB111F0B4F9703EC4F9AE02.roa (raw, json)
Hash identifier:          KMESsq+GBZhI0b7reYi4+/dzhh2BYmWyNRmR8BGO42w=
Subject key identifier:   32:AA:AF:88:D2:A4:DD:A4:66:2C:26:3D:55:19:50:A9:E1:9C:3B:10
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3779
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/272C0A0CCFB111F0B4F9703EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:08:38 +0000
ROA not before:           Tue 02 Dec 2025 19:00:22 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        175.29.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 21:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14201 (0x3779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Dec  2 19:00:22 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48eb6-154f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:b7:5c:24:73:68:a6:94:9a:d7:38:f8:24:
                    0c:d8:cc:59:26:58:a3:38:4c:31:89:43:aa:c6:8e:
                    aa:94:66:4b:7c:cb:85:0b:97:bf:79:37:bf:8e:99:
                    2d:09:03:e1:98:4a:79:b0:b5:db:27:88:0d:6e:f9:
                    d3:81:e2:ce:96:d7:33:89:43:a1:a7:4c:a2:b7:af:
                    9d:af:de:78:15:ef:72:3a:dd:a9:da:01:84:72:dc:
                    bb:76:ea:1a:52:31:41:26:1b:60:a9:8b:e7:2f:91:
                    54:17:ef:ab:91:cd:32:c3:82:9c:fd:e7:da:4b:21:
                    59:86:19:13:3d:14:3b:f8:e1:f0:38:ff:d1:e3:1c:
                    9e:fb:03:81:1c:5a:d3:d4:5d:06:c1:68:73:26:d4:
                    9c:5a:45:7e:25:4b:de:80:10:23:9e:ee:03:f1:ab:
                    b9:e2:74:80:6b:70:88:e1:4e:1c:06:41:3e:ca:2a:
                    86:c1:84:82:82:1b:bd:1e:28:6b:c4:3f:2a:75:a4:
                    dd:49:aa:55:67:f4:2e:63:e9:2d:93:e9:cb:54:17:
                    81:a0:9b:a2:a2:98:f5:ab:b4:88:94:f3:10:c9:9b:
                    f7:a7:b9:0a:c4:8d:44:cd:9f:1e:14:0f:f0:ea:c1:
                    fd:5a:a2:94:4b:8a:ba:df:93:0e:7b:95:6b:39:62:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AA:AF:88:D2:A4:DD:A4:66:2C:26:3D:55:19:50:A9:E1:9C:3B:10
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/272C0A0CCFB111F0B4F9703EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:b7:ba:c2:67:7b:fc:b2:16:30:53:ff:de:10:00:43:fd:
         02:92:5f:8b:c3:36:01:89:3e:4b:bc:a4:27:36:94:29:4b:95:
         60:e8:1d:3f:33:63:9f:76:58:fc:17:34:6d:2c:cf:d3:bd:8c:
         e7:32:c5:fa:b9:7a:9a:ef:61:05:82:7b:69:b1:f9:c3:6b:b9:
         9c:a6:cc:c6:0d:dd:80:f1:c5:53:34:4d:2c:c6:a9:ad:49:a6:
         ee:ce:98:36:69:a0:6a:1d:a1:fe:72:6a:9f:02:5c:63:67:00:
         8b:b5:1d:d3:1e:d6:f6:10:1c:ee:d1:ab:87:99:d2:7e:57:69:
         6a:8f:72:66:0e:ee:c6:bc:33:f1:45:f6:0e:7f:92:12:87:26:
         6c:48:a1:2c:e4:09:2e:62:ab:a9:5e:f0:1c:d2:55:cc:cb:8d:
         80:e2:ca:cc:63:65:4b:24:7c:7a:4d:05:f8:08:4f:61:43:2f:
         ac:f2:c8:77:22:36:b2:fb:37:b8:22:d4:cd:db:d2:41:16:2f:
         bf:cc:a4:ed:4b:ca:8a:7a:6e:a0:e0:cb:10:41:7b:0a:b1:11:
         46:eb:88:62:87:5f:d2:09:b1:a3:99:13:65:f5:37:92:e4:81:
         06:04:8f:a6:43:44:72:74:b4:1f:e1:1e:dc:35:2c:03:67:ea:
         e6:06:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 07:01:21 2026 by rpki-client