Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2B983840E0D111ECAF88A30DC4F9AE02.roa
File:                     2B983840E0D111ECAF88A30DC4F9AE02.roa (raw, json)
Hash identifier:          Ai4sBAmo2o6y+hf+5CS9X7cxH6y54p/FZZSTIupnL8c=
Subject key identifier:   A6:76:6F:22:43:6A:4F:48:3B:CD:15:71:88:CD:4C:BC:E3:51:20:5C
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0653
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2B983840E0D111ECAF88A30DC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:43 +0000
ROA not before:           Wed 27 Aug 2025 01:05:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136581
IP address blocks:        203.170.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1619 (0x653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59e7-83ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:f0:e7:1b:b2:6e:30:5e:97:81:29:dd:2e:
                    87:2a:85:59:38:6d:ee:c8:1a:6a:8a:30:66:1c:ae:
                    92:eb:3f:cb:35:6c:ca:76:9b:81:ec:91:f4:0b:bc:
                    e5:be:cd:49:f1:58:5c:fb:b8:f9:6f:ac:be:e0:90:
                    9a:35:9e:92:89:c9:27:54:81:c3:ad:fd:0b:cc:56:
                    de:1a:d6:42:d7:4e:68:84:86:55:65:7e:2d:a6:80:
                    0d:7a:18:28:a7:a4:8e:c4:69:d4:99:56:db:cb:e0:
                    74:84:94:e8:0d:b2:b9:ca:37:0b:85:8f:ab:60:8f:
                    49:54:36:8a:09:ea:a6:36:81:1e:fc:f8:de:20:d9:
                    4f:42:05:9d:72:1f:d4:07:25:9d:a0:b4:9e:b9:d0:
                    04:da:a2:c0:46:85:04:03:e5:c3:ad:61:25:20:fd:
                    2b:2f:fe:88:08:a7:71:64:ef:b1:c5:0d:48:69:ff:
                    4a:96:0b:2f:52:bb:bb:11:3d:18:28:3e:38:bc:f7:
                    1a:c8:a6:ab:9a:23:d5:af:82:31:fd:26:b6:12:6a:
                    88:d9:78:ee:89:58:74:34:c2:a3:d6:a4:b9:a1:7c:
                    f1:e5:78:ad:83:91:3a:42:a5:25:55:59:53:a2:13:
                    24:45:7b:b7:6b:ac:5a:17:2e:4c:9e:b5:3d:89:39:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:76:6F:22:43:6A:4F:48:3B:CD:15:71:88:CD:4C:BC:E3:51:20:5C
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2B983840E0D111ECAF88A30DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d9:2b:b7:79:21:46:af:2a:26:02:67:4f:d1:24:1b:8f:2d:
         de:d3:18:b2:d1:98:e2:a3:77:10:c9:88:c7:a3:50:e5:76:da:
         cd:b6:f6:ab:f0:3d:56:ed:eb:3b:c6:05:c6:bf:21:17:c1:37:
         9b:9c:e3:b6:0a:6e:e6:a0:a2:fd:b7:df:f1:b8:3e:2c:44:ea:
         a0:a7:8b:57:d6:8e:d1:06:5e:68:be:ee:dc:7a:0c:65:de:15:
         bb:70:5b:05:4a:90:e3:01:10:7a:9b:d4:ee:b2:c4:2e:97:90:
         58:ee:3f:eb:03:3a:0c:5b:6a:34:96:f0:9b:02:02:3b:be:fd:
         ea:26:48:af:c6:06:d3:40:a2:7c:50:74:a1:40:cc:25:a9:be:
         1a:1e:90:b1:9a:3f:6a:e2:13:53:38:c3:6e:0f:6d:1c:22:62:
         ab:64:98:f6:03:fd:ca:42:7d:f9:b0:8f:1f:e2:dd:ad:00:77:
         59:26:92:69:6e:6c:92:36:70:73:c7:1e:9a:9b:c0:cc:d7:81:
         62:74:09:97:1a:ee:6e:b7:83:84:86:d8:4b:57:14:fa:84:ff:
         0e:3e:cc:8a:f1:3b:be:98:33:d1:f8:7c:a6:cf:77:5c:77:f9:
         47:d2:0d:5e:0d:c1:6f:eb:ff:a2:b4:a7:4c:c4:12:35:90:e8:
         31:d5:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:16:18 2025 by rpki-client