Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa
File:                     BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa (raw, json)
Hash identifier:          bpYWWMrO7+q994Nqw7bVvvIk1CjE7F53yPlfrb2uwFw=
Subject key identifier:   B4:11:DB:D1:89:AF:F7:84:8E:C8:C0:08:F5:45:23:42:71:A9:23:C5
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B23
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:49:23 +0000
ROA not before:           Thu 03 Sep 2026 00:49:23 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134682
IP address blocks:        203.146.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:49:23 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c413-f687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:db:a6:6e:e7:bc:11:b3:9e:09:2a:09:82:
                    5c:df:2a:3f:f7:0b:0c:fe:94:6e:17:7a:6f:c3:9f:
                    8a:a9:50:7c:f3:ac:63:78:9c:00:83:09:1e:74:7e:
                    f0:79:c6:6f:5e:e2:27:e5:61:44:7a:2d:6c:85:28:
                    1f:f6:50:22:90:ab:c9:5e:9e:e9:e8:8e:44:f5:94:
                    4e:bc:c7:a2:9b:e6:d3:01:9a:ac:18:55:eb:72:8a:
                    aa:dc:3a:6f:0c:68:52:94:13:99:7f:db:48:2f:95:
                    57:a4:cf:45:82:49:35:07:47:a7:55:0f:7f:c1:c2:
                    b1:a8:f3:b2:40:99:65:d0:72:c9:96:45:e1:9a:32:
                    66:e8:f8:2d:3f:d4:a3:5d:58:5d:32:7b:86:bf:7f:
                    92:10:59:24:7b:5d:36:4a:7d:28:3f:42:53:c1:b1:
                    0f:59:5f:24:cb:44:7a:05:91:7e:5d:02:43:ba:4f:
                    ff:f0:8e:b2:b3:82:bd:76:03:4d:ad:24:d5:ee:02:
                    88:ce:10:ea:23:46:04:81:0b:3d:57:0c:71:e2:8b:
                    ae:c8:dd:53:23:0a:64:a5:6a:98:fc:44:03:18:86:
                    1a:e7:a8:16:16:6a:c6:d7:11:79:01:22:11:66:6e:
                    fe:19:ff:7f:48:29:b5:25:a6:c4:e4:93:4b:0b:e9:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:11:DB:D1:89:AF:F7:84:8E:C8:C0:08:F5:45:23:42:71:A9:23:C5
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.146.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:6a:62:6f:bb:22:2c:36:a3:8e:cb:76:6c:a9:2f:de:a9:e2:
         52:ff:92:ba:91:1b:ca:ff:30:aa:cd:1d:33:7b:ac:3f:d9:17:
         4f:01:e0:eb:f6:ab:3c:fa:1c:20:19:a5:48:80:21:dc:04:cb:
         ab:b0:38:d1:08:3a:96:8f:24:3c:4b:ab:c0:88:30:23:18:d5:
         db:53:c5:37:41:c0:bc:77:08:dd:86:5d:9b:4d:60:46:b9:b7:
         80:69:a7:a8:f3:f9:62:1d:91:3f:b5:bb:fc:26:7e:08:59:b9:
         a3:36:de:b4:d6:be:b2:e3:d6:c4:e3:47:29:d2:d4:79:73:0e:
         a9:c1:7c:f9:2a:85:c5:2b:69:3f:77:ec:e1:d1:d1:65:37:61:
         ee:16:73:1a:ac:96:b3:31:6a:59:48:d1:37:f8:fe:f5:f8:1a:
         48:a8:b8:57:27:bd:4a:60:6b:61:d8:59:8e:56:b4:63:44:c0:
         91:c4:3c:7c:be:d5:e6:99:a2:ab:07:dc:e1:26:68:e2:4d:15:
         68:92:a2:01:ec:c7:45:e0:7a:5d:d0:1f:7b:44:a4:35:5b:21:
         ee:fd:4b:1d:01:dd:c7:54:00:08:e4:07:43:b5:01:aa:9f:82:
         4d:33:15:c2:f7:2f:78:96:36:80:1d:54:65:29:c2:eb:fb:cc:
         11:12:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:11 2026 by rpki-client