Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F8312D62DD8E11EC8005001CC4F9AE02.roa
File:                     F8312D62DD8E11EC8005001CC4F9AE02.roa (raw, json)
Hash identifier:          x8kr3vhA5c1OA9xQFn80eoJ015pRU8P1PoRktR9XKpo=
Subject key identifier:   11:97:6D:45:C1:8E:26:8A:C2:01:AA:7D:E7:A2:11:A6:4D:1B:F5:16
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B58
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F8312D62DD8E11EC8005001CC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:51:08 +0000
ROA not before:           Thu 03 Sep 2026 00:51:08 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     63989
IP address blocks:        27.254.140.0/24 maxlen: 24
                          27.254.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2904 (0xb58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:51:08 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c47c-549b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:71:ad:57:eb:f4:b6:31:e2:33:2a:3e:b0:
                    a3:65:bf:fb:cd:11:7b:0a:4a:55:7b:af:95:55:97:
                    e4:81:09:23:b8:ac:81:74:7d:f5:45:95:7a:ca:3a:
                    a4:b2:aa:85:e3:75:35:0d:f5:fe:e9:d4:d8:5a:63:
                    a3:51:6d:68:51:73:20:0d:58:9c:e9:ab:b9:a4:4d:
                    4e:58:a5:eb:f9:55:5d:69:c8:86:97:3f:51:1c:3a:
                    20:60:1a:06:34:32:44:99:c2:10:1c:6f:43:af:f6:
                    15:a3:93:a8:2d:e6:8b:fc:e1:ab:8a:01:2a:cd:68:
                    e0:9a:1f:26:89:dd:d6:71:1b:66:c6:a9:4e:a7:ef:
                    18:94:73:b0:ab:74:56:a9:6b:cf:1b:f8:b4:c6:97:
                    1f:c9:5a:68:b9:a5:04:9b:23:84:96:2c:ae:7c:3d:
                    8b:25:39:b7:af:d5:d9:a6:ed:61:82:b2:e6:f3:b7:
                    b3:3a:a4:b3:22:4b:e2:f6:36:8a:88:dc:97:c3:d5:
                    90:97:4d:3b:9b:56:7c:67:73:70:7a:d4:70:be:45:
                    6d:df:28:7c:19:e1:1e:11:88:25:25:1e:a0:5b:ea:
                    e2:5e:4f:6b:cf:2c:ff:6d:6a:0b:7a:f6:cc:5d:4d:
                    91:d0:02:d4:66:97:57:3f:0e:d4:46:8c:40:04:26:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:97:6D:45:C1:8E:26:8A:C2:01:AA:7D:E7:A2:11:A6:4D:1B:F5:16
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/F8312D62DD8E11EC8005001CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.140.0/24
                  27.254.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:a8:5b:2e:2c:3d:8b:93:87:c3:22:52:91:80:fc:99:14:c9:
         90:b2:df:70:a1:11:6a:34:ea:71:13:d6:38:11:86:b9:e6:73:
         f7:00:a5:fe:d4:57:70:d7:13:a9:d5:c8:eb:43:29:08:01:57:
         99:69:d9:b3:97:48:68:30:87:5a:53:ec:65:6b:7d:f2:d2:74:
         99:44:f7:85:50:8d:57:50:2f:a2:fa:7b:7a:d6:6c:a6:9b:d8:
         d9:bc:3d:e2:19:9a:b2:35:ff:02:97:12:18:d9:e6:aa:9d:43:
         0b:f7:02:79:32:64:5d:a1:b7:7e:cd:e2:38:6b:c2:fd:25:00:
         54:78:62:ec:09:6b:70:64:3d:13:0b:98:20:d7:65:08:01:81:
         7d:79:84:4e:a1:d9:8e:84:1f:1c:bc:8f:0e:da:9a:9b:6b:ec:
         aa:42:72:9c:ff:02:6c:bb:0e:0a:18:01:6f:41:5d:08:8e:fa:
         10:be:2f:d4:2d:3b:9f:a4:79:74:05:a3:a8:71:55:14:0a:99:
         95:86:02:05:1d:b0:47:5b:3d:9f:77:dc:0f:5d:ee:9b:62:2d:
         69:89:4f:83:af:eb:8f:f3:ac:7f:1c:3d:38:f6:d6:3f:56:99:
         a5:bc:48:ab:7a:9a:3d:01:da:5e:8e:ee:f1:41:4f:80:89:c0:
         c1:c9:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:58:06 2026 by rpki-client