Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2E4393FEE0CD11ECB03A892AC4F9AE02.roa
File:                     2E4393FEE0CD11ECB03A892AC4F9AE02.roa (raw, json)
Hash identifier:          sTdxKrHO+m64BE4ytHr617H9h+6stf78mnuEFOkcDZ8=
Subject key identifier:   36:F6:62:4D:1E:53:A9:00:CE:5C:A9:37:38:5C:80:3E:CF:EE:66:3B
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B3D
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2E4393FEE0CD11ECB03A892AC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:50:13 +0000
ROA not before:           Thu 03 Sep 2026 00:50:13 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24465
IP address blocks:        202.183.134.0/24 maxlen: 24
                          210.1.38.0/24 maxlen: 24
                          210.1.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2877 (0xb3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:50:13 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c445-c79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:b3:f1:41:a0:9d:45:f1:10:6b:07:d4:b7:
                    32:07:b3:f5:da:72:37:67:61:31:49:70:90:a5:18:
                    86:22:dd:16:1c:5a:26:45:7a:aa:35:42:ee:6d:d9:
                    04:02:1a:0b:c6:30:76:54:41:9e:01:9d:0a:fb:a6:
                    79:ee:32:29:5b:dc:71:60:35:3d:2c:42:58:c6:8d:
                    cb:47:6a:61:53:d4:d3:64:fa:b6:89:c5:17:da:83:
                    e1:43:1e:6e:ca:2a:ee:0b:da:67:e4:bf:58:41:2d:
                    60:27:24:9a:f3:1e:f7:64:bc:f8:29:b7:74:84:6b:
                    d5:33:6e:cb:07:b5:e1:d0:88:a5:75:f8:64:71:96:
                    4e:94:5a:70:a8:f9:61:83:6a:f0:de:49:4d:a6:70:
                    4e:1a:de:38:5a:a0:8c:66:7b:f2:74:3a:6a:a0:64:
                    58:77:76:6f:3c:6a:e7:81:62:50:6f:1e:38:3d:9a:
                    e6:2b:6c:2e:ee:51:08:4e:9c:24:a4:ff:67:cd:75:
                    f6:1e:bd:48:7e:7f:6c:d0:94:f9:ec:4f:67:d4:f4:
                    6e:01:8f:f6:2f:81:93:bf:a7:c0:fa:72:8c:f1:b8:
                    1d:0f:c2:f1:11:ed:7b:d7:81:0b:8e:a4:a8:6d:7d:
                    37:e9:03:d2:f4:a7:a3:d8:c7:3c:25:10:a6:2f:bb:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:62:4D:1E:53:A9:00:CE:5C:A9:37:38:5C:80:3E:CF:EE:66:3B
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2E4393FEE0CD11ECB03A892AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.134.0/24
                  210.1.38.0/24
                  210.1.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:9d:2d:21:df:85:33:42:9a:ea:32:17:13:a2:d2:d8:c0:58:
         9b:a8:70:32:3b:80:e9:8b:97:6d:f7:a6:65:5d:79:7b:c4:00:
         11:8e:f3:f8:4c:0b:ba:8d:bd:ac:48:ed:30:d5:13:50:67:00:
         9c:93:77:0a:75:5f:ff:6e:81:ef:5d:2e:27:af:60:6c:e7:16:
         31:4e:4f:e1:2a:03:a8:9a:b2:3b:33:97:20:5c:9e:36:a3:05:
         7d:f0:41:3f:49:e6:13:8c:15:b4:86:74:e5:b2:26:9c:9d:f9:
         a2:a1:c2:3f:87:a0:50:7b:f2:13:87:8a:2c:22:47:3b:83:cc:
         e9:60:f0:20:a6:5a:64:ba:b0:b0:fd:25:84:de:fc:75:ed:7e:
         02:09:f9:dd:4a:bf:a1:e2:d7:d0:69:5e:c1:0e:84:78:76:de:
         58:49:fd:6c:df:52:a3:2b:53:7a:7b:dd:1e:a5:d6:c2:40:c0:
         27:f3:bf:1e:04:7d:e6:85:63:44:1f:b2:94:8a:b8:8a:fb:44:
         2a:82:0d:e7:b7:72:8d:1a:c5:b0:60:e5:97:03:a0:2f:96:61:
         29:55:45:be:39:00:d8:84:be:e4:a8:b9:3a:3f:ca:e8:01:7f:
         de:8d:08:dc:21:8e:87:e6:e1:fd:02:2a:62:3d:4f:96:ac:ee:
         8d:ea:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:03 2026 by rpki-client