Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/24AAD02CABB011EFA8B1AB11C4F9AE02.roa
File:                     24AAD02CABB011EFA8B1AB11C4F9AE02.roa (raw, json)
Hash identifier:          /2wWxQEwQ8lM5VPrt6awJzwgdS/jSFUgKDveiXGSqSA=
Subject key identifier:   BA:FC:30:3F:1D:69:1E:48:3C:64:D9:18:E6:F3:12:4B:40:EF:10:63
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B2F
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/24AAD02CABB011EFA8B1AB11C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:49:46 +0000
ROA not before:           Thu 03 Sep 2026 00:49:46 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153459
IP address blocks:        202.183.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2863 (0xb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:49:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c42a-4ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:dd:35:83:a5:ff:3f:b1:c1:38:13:0a:7a:
                    65:25:3f:ed:69:18:e3:a3:7b:bd:14:d6:2d:20:23:
                    b6:fa:bf:57:90:ce:24:0a:13:6d:79:8f:64:f1:a3:
                    d7:e9:19:33:3c:89:f3:70:30:e4:74:4c:ba:d6:b7:
                    78:d6:a5:57:b7:89:39:be:81:f3:25:0f:2c:e1:b2:
                    52:8a:28:ce:59:49:73:07:1a:a9:e3:02:a6:c1:a5:
                    04:86:98:53:90:20:6a:87:d7:de:6f:a3:22:80:e6:
                    50:8e:06:2a:14:64:4a:9f:4c:2c:3a:bb:33:e9:90:
                    68:57:38:5f:be:f9:1f:b9:c2:10:e3:96:4f:ae:9e:
                    01:ee:3e:60:30:8c:3e:27:58:df:97:e5:3f:7b:c8:
                    2e:0b:69:a7:3a:b6:e8:81:57:ce:62:1e:5e:cc:ab:
                    ea:e1:42:13:92:c4:55:ca:a2:cf:8d:86:48:a6:7f:
                    e1:af:d4:a6:02:d8:54:09:cb:91:eb:e9:31:6d:85:
                    49:5f:cb:fe:38:f5:53:7c:4c:dd:6a:05:9e:1d:3d:
                    7c:ab:ae:77:98:2e:4d:9f:02:93:da:d2:74:83:23:
                    4c:56:3b:00:43:f0:76:24:19:0f:86:fe:e3:3b:e5:
                    06:0f:08:9e:3d:3e:d9:e5:c3:d7:05:3a:42:e8:80:
                    80:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:30:3F:1D:69:1E:48:3C:64:D9:18:E6:F3:12:4B:40:EF:10:63
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/24AAD02CABB011EFA8B1AB11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:17:64:e3:4d:79:4e:db:4d:a7:b0:7a:e7:77:95:51:08:
         f1:4f:f6:76:14:0f:9d:de:11:7f:e8:91:7e:b0:5d:66:4c:6c:
         b1:e4:51:49:ef:f8:eb:39:72:5d:62:f1:82:c7:07:7a:61:17:
         bb:e8:f8:7d:76:1a:00:0e:8a:33:b0:b3:2e:e7:6e:3f:36:8b:
         50:c4:79:0f:48:87:4d:17:1a:2e:9e:b0:30:26:4b:f9:9e:c5:
         6e:c5:cf:62:d8:cf:52:d1:37:4a:f8:51:1e:e1:15:fd:3d:32:
         00:18:e1:36:c8:58:99:bf:c1:28:39:e6:c8:37:9b:30:61:64:
         a6:9c:65:ea:bd:7b:b3:99:b9:78:3e:d2:07:ce:88:b5:91:11:
         f7:2e:fe:86:9f:5f:79:f8:ba:c1:2d:6e:ee:a5:9d:1e:a6:19:
         ce:0f:1d:63:88:be:82:b6:5e:3b:1f:55:81:2d:dd:55:d3:a3:
         20:ca:62:11:b7:bc:7e:3c:92:2f:42:2d:33:78:46:56:48:d1:
         f1:c1:10:7b:7a:19:4e:c1:9b:4c:42:cd:52:9a:26:a1:9e:ab:
         b1:38:ad:32:c3:96:ac:09:1e:06:89:88:d8:39:db:2c:a9:10:
         9b:9a:41:61:54:36:1b:2d:d0:b6:d6:1a:c9:61:33:ba:da:60:
         bf:c1:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:40 2026 by rpki-client