Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa
File:                     2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa (raw, json)
Hash identifier:          5zf6KG3oytoKwEjI0+t0seHR5ivAdM4+AHfLlUggH6s=
Subject key identifier:   00:E1:63:E6:07:B9:59:77:0E:67:04:98:BD:39:43:92:A8:E3:12:D7
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       067E
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:06:21 +0000
ROA not before:           Wed 27 Aug 2025 01:06:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7568
IP address blocks:        202.183.136.0/22 maxlen: 22
                          2404:b0:f::/48 maxlen: 48
                          2404:b0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae5a0c-6c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:0a:13:ff:22:ba:f5:85:19:3d:96:75:71:
                    e3:52:d1:de:f1:37:b4:14:55:bb:0a:46:bc:fc:6b:
                    da:00:2a:5f:18:5e:55:f9:a7:d6:43:c6:0f:8c:e9:
                    e5:63:a3:6c:ec:e8:ab:56:0b:14:ac:04:96:96:67:
                    46:95:b0:50:d3:74:fa:19:3d:39:7b:ee:a0:01:f1:
                    a7:f7:df:e0:ca:c8:e5:0a:4c:82:20:9a:6e:44:21:
                    1a:58:7a:f8:45:76:8c:5c:7b:f5:14:cb:a5:d4:ff:
                    9e:17:ef:f4:80:ad:b6:4a:8d:24:7c:9f:01:1e:cd:
                    27:2f:7b:e5:1c:fa:d7:57:f3:43:17:0f:73:a5:b1:
                    88:e8:dd:42:f6:b5:f9:b1:bd:93:63:f2:a9:b8:bc:
                    73:36:81:47:8b:17:19:01:d7:22:2d:be:6a:97:ac:
                    7b:43:32:f7:f7:f7:8f:b2:aa:c6:c1:16:87:db:8e:
                    13:90:c1:b7:c3:8b:42:d4:2c:d7:b3:2b:bf:08:0e:
                    38:56:b0:bd:5a:ed:6a:84:50:db:50:a4:34:10:b2:
                    c9:cb:bd:43:8d:09:5d:44:1f:62:51:35:50:08:24:
                    28:fe:25:ed:40:79:ae:d3:4f:eb:fb:ac:43:0b:de:
                    56:84:a7:7a:d9:75:41:5a:ed:ee:cc:5d:32:0a:6d:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E1:63:E6:07:B9:59:77:0E:67:04:98:BD:39:43:92:A8:E3:12:D7
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.136.0/22
                IPv6:
                  2404:b0:f::-2404:b0:10:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:2a:69:f4:86:63:e7:62:4a:68:49:f7:e3:14:08:a0:19:
         09:c9:0e:59:0b:f7:ca:25:7d:28:56:3f:16:64:a7:1f:cd:fa:
         ab:ec:be:a8:46:f5:6d:9f:28:7e:57:6e:14:82:d2:b1:bc:cc:
         b8:01:e7:cb:b2:98:4b:82:a4:6b:15:04:26:a1:75:81:7a:6d:
         22:20:3d:fa:13:b8:7e:87:3d:10:20:58:41:72:27:e3:24:75:
         72:20:63:91:0c:01:49:db:5c:a9:37:4d:0b:00:7b:9c:fb:69:
         a3:da:6f:88:0e:15:34:0e:ef:1b:98:8f:d0:8b:93:f1:22:17:
         a1:53:83:f2:06:f8:f2:90:04:ca:45:e5:5c:8d:1e:da:2e:1b:
         ac:13:00:d6:f7:f1:0c:7a:f4:2e:ed:dc:4a:f4:66:65:b8:73:
         19:77:46:e3:1d:49:8e:98:0a:c9:94:74:c4:83:36:66:09:26:
         15:94:42:2e:0e:a3:e0:06:f7:77:26:3e:c3:e7:96:d6:ef:7f:
         c8:f5:c4:38:e6:71:9c:e7:f4:52:e5:58:33:1a:e6:b0:3d:2f:
         48:39:26:90:d1:b3:fa:d0:ea:1c:49:bf:76:96:25:80:37:19:
         9b:4e:9d:f2:82:96:32:15:68:2b:ea:93:28:33:75:a7:24:3c:
         53:1a:00:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:33 2025 by rpki-client