Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/32018F50298A11F18373785BBE833773.roa
File:                     32018F50298A11F18373785BBE833773.roa (raw, json)
Hash identifier:          SACFDv2YzVexfoTWP5wUNpnF8By0up2HtbKZrNM5pec=
Subject key identifier:   78:4A:B9:7D:3F:2D:90:1C:EC:9D:63:37:7B:64:D5:F2:96:17:26:4F
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B55
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/32018F50298A11F18373785BBE833773.roa
Signing time:             Thu 03 Sep 2026 00:51:02 +0000
ROA not before:           Thu 03 Sep 2026 00:51:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     58955
IP address blocks:        27.254.141.0/24 maxlen: 24
                          27.254.165.0/24 maxlen: 24
                          27.254.166.0/24 maxlen: 24
                          27.254.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:51:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c476-2303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:2b:d3:d3:b3:66:9e:70:0b:9c:2a:f1:ff:
                    a7:93:2b:03:b2:06:74:83:6d:2e:8d:5a:c2:ac:78:
                    e3:82:99:d8:72:72:17:04:e7:13:2b:8b:7a:aa:3c:
                    69:53:65:7b:da:c3:6c:8b:64:20:3a:7b:bc:6d:79:
                    cb:f6:53:01:1e:ae:2a:6c:fa:ce:94:2d:95:12:a6:
                    bf:bb:b6:6b:d8:00:36:68:13:47:b7:99:20:06:4d:
                    d6:9f:b6:6b:12:2c:d2:89:69:0b:a5:23:35:8b:38:
                    5d:4c:9b:dc:65:a4:e5:bb:73:59:2b:c0:c4:af:62:
                    d6:0c:f4:bb:a0:c1:85:aa:b6:c3:6c:a1:8c:0d:bf:
                    4a:c7:96:58:03:03:7e:27:a5:de:40:f4:ac:27:62:
                    35:e5:8d:00:94:01:43:2e:8d:0e:79:83:2f:ba:dd:
                    98:cb:6e:2b:ad:05:f4:0a:30:53:9b:6f:0a:b4:f0:
                    7a:b8:2c:e8:e7:02:97:3f:8f:c6:85:8d:44:a8:99:
                    ae:ba:6a:52:c9:63:60:f0:d9:72:ef:64:b1:17:d7:
                    17:58:ae:ca:54:b3:74:a1:d8:8a:d1:5a:cd:77:3a:
                    cd:d6:72:ef:a0:e8:f0:c9:5b:00:49:c3:0a:be:c1:
                    63:39:9f:6d:a7:e1:aa:9a:53:86:d8:65:44:e8:6e:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:B9:7D:3F:2D:90:1C:EC:9D:63:37:7B:64:D5:F2:96:17:26:4F
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/32018F50298A11F18373785BBE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.141.0/24
                  27.254.165.0-27.254.167.255

    Signature Algorithm: sha256WithRSAEncryption
         54:99:61:6c:a2:c1:23:cd:a4:82:95:4a:07:67:cf:00:1f:da:
         ec:bc:a5:eb:80:86:89:da:32:02:e8:a5:8b:9d:fb:2e:9c:d9:
         3b:a2:35:0e:e0:18:11:71:9a:2d:14:5f:ed:27:b6:5b:6b:e4:
         f4:d6:94:f7:b0:f4:36:f8:66:d2:19:b9:60:35:74:b5:f8:c7:
         db:d7:41:69:5e:e4:45:14:98:dd:75:04:a2:5f:2f:a7:43:d5:
         17:4a:4b:db:f1:e3:92:f2:28:c1:be:6b:c2:83:1f:ad:46:40:
         5f:4f:b9:f7:8e:95:fb:5b:d2:a7:84:35:5d:73:20:be:68:ac:
         27:53:96:6a:d6:a0:bc:1b:a2:fa:61:fb:9e:bd:1e:8d:ae:2f:
         25:5a:0b:76:29:76:84:f0:2b:c0:46:08:ab:30:a8:98:19:a0:
         28:f1:df:ea:d1:8f:ac:a2:1b:79:48:c1:67:9b:dc:18:33:5b:
         b1:c4:93:a7:00:d9:d4:55:79:fb:25:64:0f:a7:54:16:6e:93:
         bf:d4:d6:07:d0:23:fc:66:c7:2a:0a:5a:08:55:6f:9f:1b:c1:
         cf:39:9a:63:ce:c2:50:48:90:00:36:db:79:a9:4f:af:31:2a:
         21:ce:4f:49:f4:ae:22:f2:1b:df:49:49:da:23:08:54:83:ba:
         5c:44:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:00 2026 by rpki-client