Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C1F18634E04A11ECB5330E65C4F9AE02.roa
File:                     C1F18634E04A11ECB5330E65C4F9AE02.roa (raw, json)
Hash identifier:          KZzTuZ5srtG1fFfMoxNx33SiqUQ310b+mOm3WaFYjgM=
Subject key identifier:   47:95:7E:9B:6D:13:38:77:33:17:64:8C:70:22:75:4A:F1:AF:5A:48
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B42
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C1F18634E04A11ECB5330E65C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:50:24 +0000
ROA not before:           Thu 03 Sep 2026 00:50:24 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38448
IP address blocks:        202.183.146.0/24 maxlen: 24
                          203.146.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:50:24 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c450-0947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:ad:6f:f2:b1:e9:52:7d:11:ba:4a:b3:26:
                    09:65:02:3f:00:00:6b:11:13:5a:56:01:b7:45:3a:
                    d4:c5:26:80:4d:df:06:38:ab:3f:ea:e4:40:c7:2f:
                    11:7f:eb:36:3f:38:d4:c3:af:af:76:8d:fe:ae:4b:
                    85:6a:5b:0f:e3:98:0d:34:c2:b2:c9:23:69:25:41:
                    91:4d:b4:de:2d:e3:ed:37:ac:37:bb:44:aa:f2:4c:
                    9f:44:bb:68:17:3b:ab:f1:34:29:d2:e2:ce:6b:8a:
                    4c:f9:e2:b5:16:95:e4:12:ca:c5:ad:3c:11:20:24:
                    a9:72:ba:c4:6c:93:70:eb:38:a5:4c:24:f4:46:6c:
                    b0:7a:a4:cd:15:53:31:53:96:c1:08:fb:0c:4e:31:
                    96:f9:a4:bc:15:4c:23:27:35:74:5f:35:27:5e:1e:
                    7f:d7:66:a7:37:d7:5a:46:ff:b9:c8:6a:b0:9d:d0:
                    49:42:a8:b4:5c:92:88:7d:89:27:1a:9f:4a:20:81:
                    0e:9f:74:cb:31:e7:50:b3:df:53:0f:6d:7e:e7:59:
                    6e:c0:dd:e9:43:2f:21:4c:be:45:fb:15:f4:e5:01:
                    19:a3:32:80:53:ed:86:40:98:22:42:d0:6d:8d:b1:
                    80:82:7e:8c:aa:7f:8e:52:2b:8e:92:ad:93:72:4c:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:95:7E:9B:6D:13:38:77:33:17:64:8C:70:22:75:4A:F1:AF:5A:48
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C1F18634E04A11ECB5330E65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.146.0/24
                  203.146.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:64:3b:4b:4f:09:36:23:dd:72:4d:4e:a8:42:92:1b:f9:3e:
         1c:08:c0:a5:dc:8b:36:7f:62:2d:28:dc:4e:11:13:09:76:95:
         54:d5:30:43:d1:dc:fd:04:24:72:64:85:9b:a8:9e:8e:19:b5:
         12:27:26:3f:b7:ea:25:be:42:b4:ba:be:98:25:15:ed:0c:56:
         9d:c2:63:6a:f7:0e:04:8b:42:79:9a:23:1d:74:d4:98:3a:2b:
         a8:c4:27:78:f6:fc:8e:b5:36:c3:7d:cc:d0:26:56:3d:2d:b8:
         02:3b:92:d1:71:17:08:8a:20:42:88:71:1e:a2:12:5f:6b:4f:
         f8:cc:86:6c:86:0f:54:18:48:28:62:70:d3:22:d5:e3:d3:fc:
         33:64:70:00:45:01:71:1a:13:36:11:c1:fa:f4:d1:d5:d6:b0:
         08:fe:81:17:76:3e:d6:99:f9:d1:c0:af:cf:ab:49:83:b7:0e:
         b1:c3:ba:65:61:9b:54:59:a6:c3:94:39:e6:87:ac:49:3b:23:
         45:7d:45:bb:4d:5b:7b:a9:40:e7:fb:82:d1:2c:db:be:61:65:
         f4:dd:ee:94:47:b2:41:44:c8:e9:46:c5:cb:23:d3:89:a6:1b:
         f8:cc:b3:a5:d7:b2:65:ba:00:97:68:77:b9:3a:b6:89:ce:69:
         9f:58:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:46 2026 by rpki-client