Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/04C3D890B31411F1A02A435E6311F970.roa
File:                     04C3D890B31411F1A02A435E6311F970.roa (raw, json)
Hash identifier:          BukgMgE31GZ8wVxERUNElUvmeL76E30EPV9vWY1U8vg=
Subject key identifier:   4B:68:B9:E8:4E:AE:57:64:DE:31:E1:AA:08:C4:69:CF:67:F0:11:08
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B67
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/04C3D890B31411F1A02A435E6311F970.roa
Signing time:             Fri 18 Sep 2026 03:49:59 +0000
ROA not before:           Fri 18 Sep 2026 03:49:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     63951
IP address blocks:        202.183.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2919 (0xb67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep 18 03:49:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aacb4e6-f77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:f9:08:95:f8:42:e8:bf:15:82:11:8c:b9:
                    19:87:1f:a6:f3:2e:32:88:33:3f:17:29:99:5c:c7:
                    3f:aa:c7:2a:3d:ff:93:68:25:74:53:85:0b:40:07:
                    60:88:2f:f9:f4:d0:44:a0:f0:09:a4:b4:12:ec:bb:
                    81:bf:68:33:af:79:49:b8:ce:01:9e:8d:41:e0:f2:
                    12:9e:aa:c7:2f:00:14:3b:44:ae:37:52:67:37:ea:
                    43:d6:46:bb:3b:ee:cd:e1:8c:d6:d6:94:91:c0:d3:
                    62:a2:88:4c:45:f2:e3:16:3c:92:b1:eb:45:21:ec:
                    13:a5:0f:b2:3f:62:07:89:b4:c2:66:96:74:ba:37:
                    ea:db:e4:8d:be:c4:eb:8b:3c:2a:78:3b:ca:45:a7:
                    0c:81:8d:54:f8:8d:75:5b:d7:12:73:12:39:98:0e:
                    0c:1a:2a:26:28:d4:04:06:03:18:f7:33:16:c8:b3:
                    fe:d9:a1:75:4f:24:18:48:2f:54:89:4c:e1:a1:57:
                    85:b4:7a:a8:85:6a:b8:68:ea:bd:70:ca:f5:10:2d:
                    fe:bd:66:cd:ff:07:d4:1a:53:5c:d9:58:a6:7e:91:
                    d0:45:b2:c2:84:7c:f9:47:93:67:15:00:e8:14:8d:
                    0d:42:fd:c0:f0:11:73:89:5d:d2:20:bc:c1:fc:8f:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:68:B9:E8:4E:AE:57:64:DE:31:E1:AA:08:C4:69:CF:67:F0:11:08
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/04C3D890B31411F1A02A435E6311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:21:8e:a1:27:fb:d9:55:70:ac:17:86:04:5e:20:53:f5:ee:
         40:4b:34:fe:35:e6:c8:db:a5:fe:e4:31:88:7a:37:ae:d0:35:
         76:b5:b5:10:7e:ea:35:f8:aa:43:30:a2:fd:5f:d5:8c:69:d7:
         ec:ca:07:59:e6:11:cd:ec:30:c1:a4:de:2c:3e:0b:4a:62:ac:
         d7:d9:de:55:a9:0f:79:65:8f:59:ed:d6:b0:3f:65:82:96:74:
         a0:26:c6:4d:9e:b6:8f:b7:1d:8f:3e:29:ff:10:4e:94:97:c4:
         ab:1c:2e:80:f2:94:cf:7a:3a:10:de:87:81:f6:20:eb:5a:6a:
         2e:03:4b:9c:7a:b4:e4:d4:fe:82:97:f8:9b:1c:7d:58:c9:d0:
         6a:be:5d:32:4f:1f:a8:0f:4f:71:d2:b8:45:da:91:50:e0:5c:
         50:43:74:06:4f:b8:35:15:98:25:eb:51:2b:5d:0f:e2:2f:47:
         98:24:b2:b1:26:93:8c:ae:a7:b8:5b:83:7b:08:07:c5:cb:05:
         e4:7a:94:0f:6f:a9:05:f5:96:7a:22:9a:15:c3:39:7b:d7:c2:
         0b:8d:c6:d0:ea:ae:76:63:87:a9:95:23:68:03:5f:d3:36:f1:
         6e:fc:ad:5a:2b:6b:00:63:3f:35:a5:8e:6c:c9:81:ab:8c:fe:
         76:68:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:32:42 2026 by rpki-client