Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa
File:                     E101BEF6BA1111EAA2AF621EC4F9AE02.roa (raw, json)
Hash identifier:          KuZTxHp0fquU3vOYsc/ZT4rMTUBwZrUSC5c3xgaDYh8=
Subject key identifier:   B5:74:7E:A0:8C:EF:0F:30:6C:7E:23:0F:9E:3C:A5:21:37:27:09:EF
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       0971
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:45:50 +0000
ROA not before:           Sat 12 Jul 2025 21:00:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     62500
IP address blocks:        202.95.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 19:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417 (0x971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Jul 12 21:00:46 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5948e-a95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:3f:f5:ef:76:ae:67:55:44:51:2d:fe:29:
                    df:a4:96:fd:86:30:27:71:be:15:2c:d0:3c:c8:9d:
                    19:0c:1c:7f:0d:49:6e:3e:ef:23:8a:c2:ce:e7:4e:
                    b3:0c:da:11:5a:29:ea:1b:7a:09:e3:9d:e2:1d:5c:
                    08:af:cb:43:d8:c0:40:3b:37:0e:30:0c:8a:00:47:
                    77:25:05:d0:fe:1f:58:de:3f:36:ee:5d:d4:0d:a9:
                    07:7e:6c:9a:70:5f:d4:f4:0f:72:ad:36:a5:9d:24:
                    f1:e5:9f:d2:89:a8:39:cb:3e:51:a9:63:6c:66:ad:
                    3c:f8:1e:42:62:50:de:f2:37:7e:4f:3b:16:f1:d0:
                    ec:33:60:9d:dc:f2:d7:aa:ed:78:f7:d2:37:1f:58:
                    52:71:35:c7:0d:8a:6c:c6:b0:ff:7e:d8:c2:ea:1b:
                    32:1b:26:d7:3f:29:62:68:5f:08:bd:51:50:d5:cf:
                    11:f4:87:7b:00:76:1c:ca:06:93:e6:13:8f:61:33:
                    74:1a:8e:9a:81:b8:ea:11:c0:62:08:60:15:75:87:
                    75:32:79:fb:55:e1:47:29:a0:00:7a:38:bb:45:81:
                    ea:17:88:c2:0d:8d:fa:0a:09:30:08:4f:dc:ff:d5:
                    80:fe:69:93:7d:3d:48:9b:ab:dd:b8:98:a0:a3:e0:
                    0b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:7E:A0:8C:EF:0F:30:6C:7E:23:0F:9E:3C:A5:21:37:27:09:EF
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.95.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ff:fa:a2:5c:ad:b7:de:02:8f:97:fa:dd:44:44:d2:97:0d:
         8b:3a:bd:c0:fd:57:2b:41:1b:1d:89:5b:d1:b9:f1:d1:9e:04:
         18:04:c8:6a:e1:36:20:32:16:e9:f3:f0:25:e9:60:83:af:76:
         a2:5d:dc:b7:78:bf:bf:5c:71:3f:f7:0b:5c:ac:16:51:ba:f9:
         ab:75:37:44:3d:fb:4e:15:83:99:26:c6:9a:b2:ec:95:1e:0e:
         d3:22:c4:e8:8d:f0:6f:3c:f8:e2:44:70:c3:66:60:f7:75:6a:
         8f:59:8b:22:73:18:8b:c7:28:a0:40:26:53:17:96:89:b8:d9:
         36:e3:5f:53:ce:3b:d5:3b:9c:24:d6:81:a1:25:5a:24:61:ba:
         1c:0e:c4:ec:5b:c8:ba:07:3f:6f:38:b8:80:ff:19:91:b1:55:
         7f:08:ff:3b:ad:2f:6a:21:34:bd:21:eb:15:d4:bb:6d:91:f5:
         aa:89:22:e2:e9:d4:8e:47:67:b2:61:ea:40:5a:88:94:aa:73:
         1d:41:39:f1:ae:54:ec:28:66:2e:b7:c7:c8:fa:92:1d:97:4c:
         1e:e9:93:15:e0:cd:e1:5e:2c:ff:54:23:28:69:d3:94:32:86:
         ca:ee:a4:d3:0b:4b:a6:10:c2:f4:b4:f5:b2:9b:cf:3a:19:80:
         ed:e3:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 05:33:02 2026 by rpki-client