Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/3B5B829EABF511F08C00BC38C4F9AE02.roa
File:                     3B5B829EABF511F08C00BC38C4F9AE02.roa (raw, json)
Hash identifier:          Gd8+TlZwI+CWI44n+3dVbfrQ9bdj7BmOFxbH2WqP5KI=
Subject key identifier:   A3:3E:A0:5D:27:4D:46:B4:C0:C6:05:8F:58:BE:3E:18:7B:00:5C:CF
Certificate issuer:       /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial:       E5
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/3B5B829EABF511F08C00BC38C4F9AE02.roa
Signing time:             Sat 18 Oct 2025 07:37:00 +0000
ROA not before:           Sat 18 Oct 2025 07:37:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     26658
IP address blocks:        27.0.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
                          rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 07:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
        Validity
            Not Before: Oct 18 07:37:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68f3439c-daa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:53:4e:ab:04:ab:66:1a:00:5d:d3:99:a6:
                    55:11:40:79:06:b4:8e:b3:80:fc:d1:8a:e6:81:2b:
                    30:7d:10:cb:a4:db:b3:32:da:b2:6d:71:87:66:c0:
                    56:16:42:04:be:78:5e:ca:fc:66:0f:f8:25:3d:d2:
                    aa:88:9c:47:79:40:ae:02:ec:98:26:d9:5a:b2:b6:
                    76:1f:e4:86:8c:64:69:8f:64:d3:04:5e:78:56:2e:
                    d9:d8:da:7c:ec:62:a9:3c:49:90:c3:ed:e4:ce:05:
                    12:bd:91:ba:e1:df:c9:41:1a:cd:33:fe:04:d6:53:
                    6f:5d:90:7c:76:46:a3:30:5d:97:a3:2e:71:75:71:
                    a9:8a:7b:07:ef:68:63:44:7c:b2:f2:31:10:4c:3f:
                    a3:82:0b:a2:30:e7:3a:92:18:80:61:a8:aa:60:3a:
                    6d:e0:c9:37:e9:0e:bb:d5:d5:24:08:2a:bf:65:68:
                    cf:87:49:4a:a1:f9:42:32:80:00:e5:51:af:3e:3b:
                    82:c6:d9:a6:88:ce:b7:56:4b:76:cc:7f:d3:6a:d8:
                    fb:11:62:66:dd:43:81:38:77:34:e3:6c:86:41:6a:
                    b7:32:90:23:53:d4:0a:29:46:cc:88:79:a2:48:63:
                    d4:fe:1f:62:89:31:87:6d:c8:03:a2:57:92:f1:0d:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3E:A0:5D:27:4D:46:B4:C0:C6:05:8F:58:BE:3E:18:7B:00:5C:CF
            X509v3 Authority Key Identifier:
                keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/3B5B829EABF511F08C00BC38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:30:7e:fb:a3:17:d8:57:45:d0:17:e6:68:0e:e8:70:69:80:
         63:15:08:20:f7:e2:0d:96:18:71:a9:7c:0a:ba:12:16:27:e7:
         9a:a4:14:ce:7e:59:0d:56:96:3a:ad:e2:08:80:97:9c:a9:b6:
         c1:43:81:d3:e6:94:af:4f:57:a4:91:37:2b:e8:2c:8c:8c:d9:
         b3:56:68:42:b2:a9:4d:c2:4e:bb:e0:b6:15:cf:dd:31:ff:6f:
         09:fd:ef:f6:ee:85:0a:a3:3f:75:3c:18:ac:50:20:64:59:17:
         55:be:72:db:9c:f2:5c:dc:c3:ec:cd:5d:43:6b:e3:b2:ff:bf:
         00:c6:c3:39:c5:ed:1f:3f:e6:d3:92:ad:90:29:10:92:ba:3a:
         50:94:bc:a0:f9:cc:6c:5e:78:3a:ee:19:47:1e:a5:04:47:74:
         11:13:07:07:b0:86:3b:72:68:aa:55:1e:5e:6e:ad:08:97:fb:
         e2:81:32:81:02:b7:df:87:1d:5e:69:aa:00:5f:d0:7f:b0:91:
         77:41:91:0a:0e:a3:61:6d:37:56:55:05:2a:33:f9:6b:96:a0:
         f7:ca:3f:7e:1d:23:8f:b3:03:73:c6:8d:91:69:ad:2b:01:5a:
         d8:f0:46:33:17:a6:93:99:25:09:9f:37:9c:41:76:f2:0c:c8:
         72:64:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:11:07 2025 by rpki-client