Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2C932944E0D111ECAF88A30DC4F9AE02.roa
File:                     2C932944E0D111ECAF88A30DC4F9AE02.roa (raw, json)
Hash identifier:          RWqOEy7E7tkYs3VS1fsBN4+H2n8hYNAFqR3Nl/ZkBww=
Subject key identifier:   6C:BC:35:A7:17:19:70:0C:01:8D:0F:F3:93:A3:E0:92:38:3F:32:CC
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A1D
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2C932944E0D111ECAF88A30DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:37 +0000
ROA not before:           Wed 27 Aug 2025 01:05:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     17475
IP address blocks:        202.183.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 23:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2589 (0xa1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58851-2b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7b:64:12:3b:a7:25:ff:30:2c:44:21:80:af:
                    fc:2d:4d:4c:87:b2:bf:45:a9:77:a7:78:0e:0d:4b:
                    5a:d7:f6:02:d8:b1:18:38:86:2c:94:88:7e:c9:67:
                    7f:85:bd:e5:87:8e:88:48:8a:97:de:54:22:59:9b:
                    e1:9d:1b:85:d0:af:54:a2:e6:f7:f9:59:c2:96:d2:
                    84:c5:a0:0a:ad:ec:65:3d:44:27:c9:2a:60:5e:3b:
                    fd:39:c9:24:f7:92:09:77:e3:42:f0:89:c1:82:40:
                    f1:a4:01:bf:47:06:33:ad:3e:6d:71:0f:6e:96:62:
                    15:5d:13:e7:a6:96:72:c2:17:86:a1:0f:ba:ac:df:
                    cf:de:9e:35:95:3f:b9:ec:aa:73:59:8e:e5:6c:b0:
                    92:dc:3d:e1:c1:51:c0:9d:c6:3c:84:ea:c2:2c:3e:
                    4d:39:75:39:06:a6:f3:2d:71:2b:87:ed:f4:dc:56:
                    4f:87:fa:d3:ae:4a:3a:96:cc:1b:87:1d:3c:81:16:
                    2c:36:67:35:68:b1:bb:c4:27:9a:56:11:fe:4c:b4:
                    87:b7:85:a8:96:3e:bb:7a:e7:2e:7e:6c:07:4f:51:
                    f2:d0:9d:f1:64:a0:6a:b1:c5:a0:06:9a:a9:f0:f9:
                    c2:de:41:63:19:56:31:30:58:7b:4c:cd:d6:cf:35:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BC:35:A7:17:19:70:0C:01:8D:0F:F3:93:A3:E0:92:38:3F:32:CC
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2C932944E0D111ECAF88A30DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:49:6e:b8:c1:ba:15:b0:dc:16:21:3c:92:5a:f8:b4:c9:35:
         09:2a:c6:c3:96:13:91:2e:e1:fe:e8:18:bc:43:6d:83:95:99:
         d6:62:8e:00:3f:fc:1d:8e:00:c7:d1:1a:98:5a:30:d3:31:ad:
         3f:1d:ff:11:af:58:a4:5b:ce:89:19:65:25:06:dc:34:33:a0:
         4b:d8:86:10:f1:e0:5d:e1:73:61:f7:18:ca:3c:ed:f4:06:f4:
         68:14:1a:66:e1:8b:63:87:8b:b9:34:a3:60:15:88:c0:04:3b:
         0e:ae:72:f4:15:86:f9:13:b4:e6:f1:da:bc:36:d5:d4:73:f0:
         0f:ad:ba:56:4f:1a:43:11:33:f5:ac:d0:b7:26:c1:9f:92:87:
         2e:e9:6e:4d:83:44:84:b4:d0:51:c8:dd:19:09:6e:e5:5b:c9:
         82:bf:65:dd:1b:6a:3c:d7:38:8e:a0:fa:30:4f:ff:a5:e9:82:
         72:88:3d:87:5a:3b:a9:d0:55:fc:74:dc:5a:f0:ec:b9:61:f7:
         cb:15:ff:05:9a:81:ad:58:e3:ac:16:17:60:dd:7a:e0:b1:27:
         c4:af:88:60:4a:40:8a:48:72:b1:79:26:70:2a:c3:ca:3d:09:
         cd:a3:c3:78:7f:71:56:e6:3d:54:7f:36:7a:dc:72:a4:48:1e:
         c8:72:38:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:23:22 2026 by rpki-client