Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa
File:                     2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa (raw, json)
Hash identifier:          8j/Q19IkhUtDNx51ILlnOVUtMBOl2wS478qnonLpZbI=
Subject key identifier:   07:48:E0:B3:89:DD:BA:1A:EF:5C:C8:DA:CF:40:BA:FF:31:F6:D1:2B
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B59
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:51:10 +0000
ROA not before:           Thu 03 Sep 2026 00:51:10 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     7568
IP address blocks:        202.183.136.0/22 maxlen: 22
                          2404:b0:f::/48 maxlen: 48
                          2404:b0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2905 (0xb59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:51:10 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c47e-ef80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:45:f6:0f:60:93:08:71:f5:c1:13:18:26:
                    55:b4:4a:7b:1e:a5:aa:1f:0a:0f:df:d6:65:62:75:
                    aa:3a:10:2d:41:2e:55:22:05:3a:ed:6a:de:98:fe:
                    17:44:98:91:d2:1e:6e:8b:4b:95:12:3c:94:2d:eb:
                    31:ad:b4:39:57:fa:b5:b0:a5:b8:44:ab:82:32:d1:
                    7d:be:7e:9d:08:c3:5f:31:f9:33:54:f1:f5:cc:5a:
                    68:ff:b7:5c:ff:20:5a:5b:85:66:00:2a:f4:ca:86:
                    ea:ef:f1:bc:fc:62:9b:1e:2f:b7:a3:20:5b:60:f4:
                    98:da:2f:65:f1:63:98:05:e9:87:08:32:a4:0c:84:
                    8f:f7:4c:09:d9:24:dd:da:57:7f:8b:e0:ef:8c:76:
                    13:2d:6d:b5:57:cd:2f:47:e6:32:e2:1e:03:0d:28:
                    05:83:2e:e4:ff:03:ef:5a:5a:0a:ed:70:70:6d:eb:
                    c2:8d:77:fb:d8:e7:8a:da:93:e0:b0:3c:1f:17:12:
                    2e:0c:12:6e:d2:0e:2f:14:bc:33:bf:93:b8:a6:b9:
                    78:83:92:a6:40:29:33:37:10:ad:1f:39:57:32:91:
                    ac:0b:77:50:c7:37:d1:cc:49:05:4b:cf:c3:f1:b3:
                    7f:78:64:6d:c2:b8:8c:79:cd:a7:3e:bc:1f:9b:8e:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:48:E0:B3:89:DD:BA:1A:EF:5C:C8:DA:CF:40:BA:FF:31:F6:D1:2B
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.136.0/22
                IPv6:
                  2404:b0:f::-2404:b0:10:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:e3:3d:c4:a8:f9:bb:4f:1c:f9:79:87:06:06:63:82:58:
         51:13:47:fe:e7:23:3a:6f:c7:3a:26:1f:f8:f9:1b:4a:72:c5:
         27:fd:26:50:8a:d0:2f:04:1f:4c:f9:c1:e5:da:ce:f8:d4:55:
         aa:85:8f:37:0f:25:8f:1f:51:00:6f:d5:1e:f9:16:23:e1:b4:
         69:72:cf:07:4f:c9:a2:3a:d1:75:60:06:16:b4:86:10:52:09:
         19:72:3e:38:12:98:24:95:e0:ab:e4:a1:7d:ac:7c:f8:5b:c9:
         6c:ce:69:4b:29:d9:e9:57:22:5c:3c:78:bc:67:4d:33:4d:3a:
         d8:98:3b:36:75:f4:0b:56:2b:75:56:9a:2d:f1:60:8f:7a:e4:
         0b:08:5c:e9:35:f4:6a:14:63:96:85:4f:9d:56:a2:de:ba:40:
         a6:af:4c:6d:9c:21:89:2f:27:97:bc:81:de:ae:e9:f3:ad:6e:
         a6:63:fc:c6:89:da:18:7b:db:58:43:e2:06:6b:ea:55:c0:e1:
         bf:9b:8d:08:16:56:93:d4:20:e2:35:d8:78:44:54:fe:4f:31:
         4a:e1:5b:63:a8:df:8f:b5:5f:6f:2c:3d:e2:1c:89:64:a4:5b:
         7c:2a:6c:12:ac:48:77:9d:a4:10:b1:05:2a:e5:67:f8:e7:b3:
         61:3a:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:08 2026 by rpki-client