Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
File:                     B11EACFC5ADA11F08ED99A75C4F9AE02.roa (raw, json)
Hash identifier:          qcLKDgGrdrQRGFrx4bAX1Nw4fE3XN2+bda63S85B/R0=
Subject key identifier:   6F:B0:FE:F5:AC:00:BB:8C:B8:A0:C0:08:2A:B1:53:4A:3D:72:A3:E5
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       062F
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
Signing time:             Fri 25 Jul 2025 07:51:10 +0000
ROA not before:           Fri 25 Jul 2025 07:51:09 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     58955
IP address blocks:        27.254.141.0/24 maxlen: 24
                          27.254.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 25 07:51:09 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6883376d-d4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:a2:4c:a4:ea:ae:9e:3a:05:d2:bf:06:53:
                    d9:73:4d:fa:13:ee:ac:82:33:0c:b2:ac:c3:f9:98:
                    41:23:3d:ec:b5:24:f8:fe:46:44:2c:e6:28:c0:88:
                    ac:78:26:88:fd:9c:69:ba:3f:37:74:a4:c4:a0:44:
                    fb:fe:5f:78:64:dd:50:3b:8e:df:56:16:95:61:66:
                    a1:9f:01:29:08:3b:fe:44:f4:3a:0e:37:d8:7d:45:
                    c5:25:32:fb:6d:00:41:bb:8d:5f:19:a7:b3:23:b0:
                    3b:34:29:6a:ff:21:7b:4f:fa:0b:00:49:91:ad:16:
                    4b:e3:42:b6:12:96:62:65:f4:14:5a:a4:ab:c7:34:
                    65:1d:d8:ba:13:95:79:86:da:08:27:37:90:b3:96:
                    96:5c:72:65:be:30:bf:f2:c8:c4:46:d1:84:1b:10:
                    eb:0b:f2:d2:68:cd:9e:a2:5a:4a:f3:60:4a:79:24:
                    4f:08:69:52:4e:9b:8a:aa:f7:3a:6e:55:bf:d5:f3:
                    d0:8f:58:2a:13:73:6f:31:6e:05:fe:68:41:ae:87:
                    d8:cb:18:0c:ce:80:c5:1d:9d:0e:2b:94:26:17:ec:
                    65:5d:9e:37:b2:f7:5a:d4:b4:db:a5:ad:d8:44:75:
                    b8:b3:8d:24:aa:45:9b:fe:b0:aa:be:67:5a:52:a7:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B0:FE:F5:AC:00:BB:8C:B8:A0:C0:08:2A:B1:53:4A:3D:72:A3:E5
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/B11EACFC5ADA11F08ED99A75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.141.0/24
                  27.254.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:db:5a:3b:f9:02:ac:f2:b8:ae:8e:31:ca:be:22:b2:83:44:
         72:15:3c:d0:e0:f5:24:f1:d8:0c:3f:5f:4d:32:1c:90:32:49:
         19:90:9a:6d:b4:18:6c:52:f2:d2:bf:df:c3:51:29:9a:d8:80:
         2e:c6:b6:32:7b:c2:c5:7b:1a:83:bc:3d:5e:23:e0:35:a3:c3:
         d3:ad:5d:ab:df:51:f0:15:45:32:14:ea:d6:f6:ac:3c:19:b3:
         cf:99:01:22:9b:ad:62:5e:25:a0:bc:6d:15:2c:4c:97:40:ff:
         2e:53:53:10:14:ed:08:51:99:78:88:82:68:b4:58:d5:97:81:
         6e:78:18:96:eb:da:90:31:c8:eb:46:af:3a:ae:f9:ee:9e:75:
         7b:19:6a:c7:7a:66:57:db:03:86:49:2c:11:5a:c7:7a:a8:a6:
         ba:4a:e1:5b:ac:3d:e4:da:ff:49:ed:a7:e9:f4:38:84:c0:4c:
         7b:c9:cd:bb:e0:4a:4a:12:44:ff:88:ff:99:d5:7e:de:29:18:
         58:a3:5e:c5:d5:1b:e5:ac:b2:59:9a:67:51:b7:cf:ef:b4:f5:
         94:e2:85:36:a5:0b:20:44:a3:2d:1b:03:cc:f8:28:24:99:47:
         1d:b0:f7:7b:52:11:42:2f:b9:43:57:f1:2c:b5:21:74:9f:a1:
         f4:9c:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:31:41 2025 by rpki-client