Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa
File:                     B57E9D8C98D511F0912EFD62C4F9AE02.roa (raw, json)
Hash identifier:          b4Mprh3FY9jiajkTpj7Ymhe1pwhQkrAyxJif5RXr/pI=
Subject key identifier:   CE:96:84:76:B0:91:1A:2F:27:DC:37:A2:97:4F:9C:5F:4D:4E:B7:9F
Certificate issuer:       /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Certificate serial:       58
Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:30:21 +0000
ROA not before:           Wed 24 Sep 2025 00:09:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154262
IP address blocks:        27.126.156.0/23 maxlen: 23
                          27.126.156.0/24 maxlen: 24
                          27.126.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
        Validity
            Not Before: Sep 24 00:09:09 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3dcfc-c2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:56:8c:5f:ac:32:f0:55:b7:48:03:59:c9:
                    6c:fc:a5:4c:32:57:51:74:d1:e7:65:71:a1:69:5f:
                    86:1f:c8:c8:c8:2d:e1:8f:05:32:d1:d1:56:9e:75:
                    32:0a:9a:87:df:ee:4a:18:bb:4e:c1:a7:5a:99:70:
                    70:a3:57:74:f8:97:d7:86:87:7f:bf:8d:79:13:31:
                    0f:4d:4b:bd:76:81:97:7d:ca:4c:e3:65:40:93:84:
                    97:02:9a:bf:a6:7c:95:44:57:0f:14:85:16:89:43:
                    6b:83:82:e5:29:8f:eb:e5:d2:7c:2a:a3:a5:a4:eb:
                    b4:8e:72:1e:74:40:8b:ea:d2:20:10:c8:e5:92:38:
                    5f:b7:29:b6:42:db:bb:26:4c:16:bf:0c:c3:8a:9a:
                    4a:e6:b1:ce:7b:cd:af:d3:af:e1:61:a0:c6:d0:0c:
                    9e:53:3d:70:37:87:43:e5:42:6c:b5:fb:b7:79:d1:
                    a2:96:52:6b:84:24:ef:73:c9:c0:a5:74:74:39:07:
                    e6:5d:ba:23:68:3b:6b:68:68:c3:78:30:b5:48:22:
                    62:d5:d0:a5:79:6e:38:df:7e:c3:f3:c4:55:ec:81:
                    69:12:68:a3:6d:2d:e7:a1:a3:50:cf:94:70:1d:7c:
                    f7:8e:74:91:02:5f:eb:d7:60:ec:11:53:dd:36:22:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:96:84:76:B0:91:1A:2F:27:DC:37:A2:97:4F:9C:5F:4D:4E:B7:9F
            X509v3 Authority Key Identifier:
                keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:87:f3:57:21:76:93:9c:62:d6:25:77:2b:d7:c2:68:40:33:
         82:5e:66:6b:4a:ee:bd:4a:78:50:d4:f7:28:17:29:e7:83:ae:
         90:70:7c:af:63:95:2f:69:de:33:5d:2a:62:b9:42:e5:0b:01:
         fe:8e:24:66:78:06:1b:72:91:4b:af:eb:e0:55:96:09:4b:5b:
         e5:7e:7e:7c:ed:3b:d8:61:1d:83:6e:b8:3d:4e:c1:3f:c5:43:
         25:d5:c3:9e:08:2c:45:c7:aa:5c:be:77:26:00:8d:23:a0:7d:
         6a:56:3b:07:11:98:24:0c:b2:a0:8a:c5:12:93:e0:fc:a3:9c:
         40:77:b9:6a:3e:c8:5e:3e:b1:1c:20:94:e6:1e:4a:db:9c:38:
         42:32:2a:2c:88:97:c4:91:ff:39:18:42:1f:dc:7f:ae:12:71:
         d3:f6:a4:45:18:c7:e1:ae:0f:ce:47:ff:69:7c:30:09:05:9f:
         0b:d5:d7:03:53:33:7f:5a:ab:c0:61:af:45:99:d0:00:47:80:
         a4:26:c5:3b:b7:44:e8:f9:0b:8c:df:5d:32:7a:47:be:bd:39:
         aa:ec:62:04:3f:9f:0c:f9:f3:57:64:7d:48:84:39:2f:bd:06:
         0c:0d:08:12:73:88:c4:77:af:71:be:e7:7d:d0:f3:ef:de:a6:
         a8:e4:af:83
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OEE5NDExMC8GA1UEBRMoNjRDMEMxRDk2MTUwMTEwNjI1MTNFRjQ3QjhFRTM4ODk4
MUQzRTgwRjAeFw0yNTA5MjQwMDA5MDlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkY2ZjLWMyZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNBVaMX6wy8FW3SANZyWz8pUwyV1F00edlcaFpX4YfyMjILeGPBTLR0VaedTIK
moff7koYu07Bp1qZcHCjV3T4l9eGh3+/jXkTMQ9NS712gZd9ykzjZUCThJcCmr+m
fJVEVw8UhRaJQ2uDguUpj+vl0nwqo6Wk67SOch50QIvq0iAQyOWSOF+3KbZC27sm
TBa/DMOKmkrmsc57za/Tr+FhoMbQDJ5TPXA3h0PlQmy1+7d50aKWUmuEJO9zycCl
dHQ5B+ZduiNoO2toaMN4MLVIImLV0KV5bjjffsPzxFXsgWkSaKNtLeeho1DPlHAd
fPeOdJECX+vXYOwRU902IiazAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUzpaEdrCR
Gi8n3Deil0+cX01Ot58wHwYDVR0jBBgwFoAUZMDB2WFQEQYlE+9HuO44iYHT6A8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTk0LzZDRDAwREQyOThD
QjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZB
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWk1EQjJXRlFFUVlsRS05SHVPNDRpWUhUNkE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEE5NC82Q0QwMEREMjk4Q0IxMUYwODJDM0YwNUZDNEY5QUUwMi9CNTdFOUQ4Qzk4
RDUxMUYwOTEyRUZENjJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAEbfpwwDQYJKoZIhvcNAQELBQADggEBABmH81chdpOcYtYldyvXwmhA
M4JeZmtK7r1KeFDU9ygXKeeDrpBwfK9jlS9p3jNdKmK5QuULAf6OJGZ4BhtykUuv
6+BVlglLW+V+fnztO9hhHYNuuD1OwT/FQyXVw54ILEXHqly+dyYAjSOgfWpWOwcR
mCQMsqCKxRKT4PyjnEB3uWo+yF4+sRwglOYeStucOEIyKiyIl8SR/zkYQh/cf64S
cdP2pEUYx+GuD85H/2l8MAkFnwvV1wNTM39aq8Bhr0WZ0ABHgKQmxTu3ROj5C4zf
XTJ6R769OarsYgQ/nwz581dkfUiEOS+9BgwNCBJziMR3r3G+533Q8+/epqjkr4M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:11 2026 by rpki-client