Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2B983840E0D111ECAF88A30DC4F9AE02.roa
File:                     2B983840E0D111ECAF88A30DC4F9AE02.roa (raw, json)
Hash identifier:          bG+J69m3bCjq82zGIJuv/4HHgVsIx2hFxqnd1E00AAg=
Subject key identifier:   5D:81:A6:0F:13:57:7B:1B:C7:2B:C6:FA:62:9A:5A:7A:BB:8A:30:EC
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A17
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2B983840E0D111ECAF88A30DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:32 +0000
ROA not before:           Wed 27 Aug 2025 01:05:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136581
IP address blocks:        203.170.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583 (0xa17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5884c-0346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:12:0b:2c:db:eb:2b:11:26:d0:7c:ea:e4:
                    1d:36:c5:22:7e:47:d2:4a:cf:0f:09:ab:7c:d1:99:
                    5d:5e:5a:ec:f9:d3:7c:e2:c8:66:01:d4:7f:81:50:
                    04:34:f8:1e:e3:42:8e:7d:60:0e:1c:de:b3:5a:b0:
                    84:8c:7f:bb:b7:71:1b:c5:e3:75:67:df:c1:09:24:
                    aa:0c:00:e4:0c:3b:ff:00:39:c9:3d:c1:4b:a6:50:
                    ae:c8:04:f7:e1:3c:2f:e5:00:f6:81:fe:f9:ec:e7:
                    52:cb:10:3d:65:61:3a:c4:cb:fb:ba:77:02:04:50:
                    5f:46:b9:89:88:3c:99:05:0d:b5:0e:b0:c9:13:16:
                    01:86:bd:12:a7:5b:ae:f7:d7:e4:ae:33:ad:e4:a7:
                    e6:a0:88:31:a0:08:dc:07:84:0d:6c:59:ab:66:6a:
                    0f:71:02:fc:cf:7d:44:16:15:8e:9c:88:ee:4c:c3:
                    35:44:0a:f6:45:ce:62:53:e8:4c:1c:a9:79:80:fa:
                    7b:d5:11:94:53:fe:97:2f:be:4e:66:16:a3:d2:2d:
                    68:e0:84:44:ae:95:aa:45:db:94:dc:16:81:5c:bb:
                    7f:0e:eb:73:45:18:60:fa:5f:9e:39:b1:8a:09:4a:
                    ae:1a:23:3e:20:4a:59:98:fc:ae:37:63:6b:17:3c:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:A6:0F:13:57:7B:1B:C7:2B:C6:FA:62:9A:5A:7A:BB:8A:30:EC
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2B983840E0D111ECAF88A30DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:48:e5:c4:51:a0:2a:12:8e:87:93:cb:27:3b:4c:01:87:
         59:54:df:c0:cb:47:0d:b1:df:89:7d:97:d3:dc:0d:d4:d8:b3:
         03:8f:9c:3d:79:78:87:ea:15:ff:bd:c0:36:cd:49:d5:50:20:
         6f:eb:22:0d:19:b5:f8:5f:fa:d3:88:f5:f1:6b:46:ac:e9:cb:
         d3:02:d6:58:1d:6c:78:08:4f:19:ac:00:44:f2:7e:f0:7a:0f:
         16:43:bb:b3:16:0c:89:0d:33:1a:41:fe:8b:a1:ab:a3:3c:a3:
         91:6e:88:97:af:b1:80:d0:b3:f9:f2:5b:26:c0:a6:78:49:b5:
         c1:9a:ec:23:16:5f:4b:50:6b:d9:7d:83:3a:2b:74:0f:a5:45:
         4c:24:4f:1b:f5:fc:6f:d3:a3:9c:c9:f2:fc:da:b5:7e:ab:b6:
         c7:76:96:4d:8f:b8:25:3b:96:d3:88:78:24:37:4b:f9:82:e9:
         4b:67:3f:3b:07:91:d0:41:8b:87:98:74:d1:89:6a:94:7e:82:
         c2:3e:70:52:f6:87:4b:32:7e:be:0f:e8:23:78:f5:8c:cf:06:
         5d:d4:37:cb:d7:65:75:b2:75:c0:1b:fb:56:58:9d:0a:10:8d:
         c0:ad:69:c5:a6:62:ad:48:d4:72:63:a4:8b:d5:10:73:bf:dc:
         66:43:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:19:08 2026 by rpki-client