Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/92F62AF0032811ED8DFE1842C4F9AE02.roa
File:                     92F62AF0032811ED8DFE1842C4F9AE02.roa (raw, json)
Hash identifier:          Mcnw9cU8VxSTIzbCnuuHLM/p/44XqAFiwLx0phruJEk=
Subject key identifier:   30:F7:49:06:B9:16:07:F1:5E:4C:7E:ED:32:80:89:95:3D:F8:7D:2D
Certificate issuer:       /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial:       036F
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/92F62AF0032811ED8DFE1842C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 01:31:21 +0000
ROA not before:           Fri 05 Jun 2026 01:31:21 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        202.94.32.0/20 maxlen: 20
                          203.24.63.0/24 maxlen: 24
                          203.27.44.0/24 maxlen: 24
                          203.29.208.0/23 maxlen: 23
                          203.55.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
        Validity
            Not Before: Jun  5 01:31:21 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2226e9-252c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:bf:69:69:1e:94:b4:09:c1:f7:5c:7a:96:
                    13:90:b7:21:92:5c:04:d1:1c:77:97:b1:5f:56:2f:
                    70:39:a1:97:24:ef:c3:40:33:66:6e:87:7b:a5:8e:
                    71:ce:f7:e2:9f:f1:c4:0e:b5:bf:a1:33:02:22:a8:
                    76:e5:ae:8d:fa:87:64:8a:08:b9:93:36:3d:6c:fd:
                    b0:54:12:80:a5:55:1a:13:57:bf:e3:61:85:6f:21:
                    10:2d:ae:46:61:d6:cc:ea:96:62:6c:86:46:3c:61:
                    13:3d:85:91:63:08:8b:ef:0e:35:5b:9e:ce:ca:df:
                    de:3d:0c:d6:96:29:59:53:07:8f:41:bb:ea:4a:14:
                    a5:b2:1b:28:b7:98:65:72:33:2d:64:a0:92:4f:d7:
                    7c:1e:6e:10:f7:57:9c:8b:24:eb:ef:cf:13:72:72:
                    1e:31:d2:b0:fc:e5:0c:8b:5e:6d:73:f1:21:e4:9e:
                    d9:ed:1c:86:c1:f5:56:7f:bb:ab:be:4a:07:10:e0:
                    ce:d8:12:11:61:06:6e:ca:1f:4b:8f:56:96:f4:f5:
                    96:86:ba:67:2a:51:03:27:85:7f:74:b8:f6:6d:4a:
                    49:05:d7:6f:a7:88:80:59:64:6d:ed:58:c4:58:f5:
                    51:6d:66:2c:a2:51:1e:16:6d:ee:f4:2d:ed:9c:1e:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F7:49:06:B9:16:07:F1:5E:4C:7E:ED:32:80:89:95:3D:F8:7D:2D
            X509v3 Authority Key Identifier:
                keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/92F62AF0032811ED8DFE1842C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.94.32.0/20
                  203.24.63.0/24
                  203.27.44.0/24
                  203.29.208.0/23
                  203.55.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:24:56:03:c4:e0:24:44:75:cd:00:07:7d:0c:07:4f:27:c7:
         b7:15:8d:eb:6b:86:be:7b:32:2e:af:e3:89:8a:e8:60:21:59:
         c0:0f:79:06:f9:02:62:5f:f5:d8:40:9b:aa:7a:42:b8:40:ad:
         42:c2:fb:44:2c:6a:d5:b6:8e:c0:cb:40:4e:6e:1d:23:a5:c5:
         b2:70:2f:c0:ef:91:cb:b5:6c:68:94:3d:dd:b6:aa:5d:02:9c:
         7c:16:63:f8:43:3a:ed:89:15:aa:8c:c1:68:92:29:76:c5:65:
         a7:88:c1:63:45:89:8b:2b:37:6a:13:b8:95:5a:13:9d:20:94:
         02:c0:6e:c4:4e:8f:3b:0e:6a:26:9a:f7:88:c1:0e:4d:0a:76:
         44:26:2f:8f:76:b6:19:c8:d7:86:d7:8e:99:67:92:fc:6c:04:
         27:5a:0f:0e:cf:f3:d0:29:0d:bf:2a:7d:0d:fc:f9:35:6f:dd:
         15:53:24:7a:f6:95:b8:ec:fb:78:94:d3:f3:a6:ed:bd:b0:33:
         ed:83:47:a9:44:97:1c:f5:19:15:25:1b:a1:31:1c:66:1e:ec:
         44:6f:c7:12:93:a6:43:5f:5d:e7:f6:52:54:20:8b:81:8a:73:
         eb:46:79:bf:f1:f0:06:2e:24:dc:4c:58:7c:05:2e:df:ef:3e:
         07:e9:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:45:53 2026 by rpki-client