Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/E13B045ACAD611F0AB7FEE55C4F9AE02.roa
File:                     E13B045ACAD611F0AB7FEE55C4F9AE02.roa (raw, json)
Hash identifier:          HUQd5AJYGdLE7NKYHx8Lq6oK6+YpU4Q/zvBoPbc+PIM=
Subject key identifier:   67:C0:F0:4F:D3:AE:4D:BF:AC:CE:00:82:1A:F0:4B:70:77:DB:1D:5D
Certificate issuer:       /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
Certificate serial:       88
Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/E13B045ACAD611F0AB7FEE55C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:28:03 +0000
ROA not before:           Wed 26 Nov 2025 14:47:50 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151786
IP address blocks:        202.1.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl
                          rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 06:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
        Validity
            Not Before: Nov 26 14:47:50 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a58253-cfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:91:c9:d8:4e:21:ba:fc:0d:cd:1e:30:bb:
                    c1:40:1a:74:40:b7:e9:0b:18:bc:0b:2e:43:3d:88:
                    87:3c:dd:e5:5e:c9:07:cd:d7:61:61:ee:c8:c9:54:
                    83:31:ba:2a:c5:58:ed:ca:52:e5:04:7b:11:0d:d9:
                    6a:29:8c:c5:ee:b2:f6:9a:52:7f:f8:74:62:41:f0:
                    c6:50:c4:a2:67:b1:7c:a1:29:e7:5a:d4:f1:47:12:
                    1a:3f:ac:8c:f4:49:96:b3:6f:dd:80:2a:c4:31:de:
                    3c:e5:e1:1d:59:d2:5b:af:90:7a:b0:45:1b:79:a6:
                    bc:dd:81:74:bd:6e:43:51:7c:a0:02:6d:3e:0f:2c:
                    6b:e1:c6:1d:32:7b:17:15:4d:c9:50:1d:0f:4d:db:
                    25:90:a8:e2:31:02:13:35:29:07:2b:fc:b8:03:29:
                    96:78:a3:1c:93:b0:79:e7:b1:a6:70:6f:41:47:c0:
                    e6:2f:c2:f8:53:b9:a8:7c:9e:aa:2b:e9:4b:a9:42:
                    79:77:36:12:1e:ac:db:35:8d:dc:0e:9b:3e:4b:ed:
                    57:d7:9e:05:ef:2c:b9:e8:4f:1e:2a:85:d3:cc:09:
                    56:46:e6:b9:ab:1f:5f:35:ec:75:c6:77:ed:db:b9:
                    7c:be:06:d5:8f:94:93:32:02:f5:04:33:89:86:1a:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C0:F0:4F:D3:AE:4D:BF:AC:CE:00:82:1A:F0:4B:70:77:DB:1D:5D
            X509v3 Authority Key Identifier:
                keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/E13B045ACAD611F0AB7FEE55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:ab:de:7a:ae:81:9b:e3:45:09:98:82:01:63:59:85:42:
         c4:1a:0d:84:25:59:29:a8:ec:07:2e:bf:ef:65:8c:36:02:55:
         b0:f0:b7:b5:4a:e3:83:2f:5b:37:26:4e:50:33:4c:bc:0f:6b:
         b0:ce:a7:84:3c:38:c4:38:cd:8d:e2:fd:31:ca:e1:bb:b0:40:
         0b:86:30:94:27:f7:5e:4a:8d:84:eb:7f:4d:cb:73:a1:42:2a:
         44:5e:40:c1:92:33:d1:d6:55:75:b3:cd:a0:8a:27:cb:c8:76:
         61:e1:0f:6e:c8:19:1f:e8:88:13:f9:85:0b:e3:56:44:9f:a9:
         37:ab:ae:18:fb:19:20:61:ab:f9:bd:e6:94:a9:f0:20:d4:45:
         6d:86:2d:d6:b1:62:c5:ac:3c:07:1d:a7:2d:f8:b6:cf:e0:f4:
         25:e9:40:75:3a:39:ee:3c:3d:b7:21:21:f2:b2:31:9d:c8:1e:
         20:11:79:7a:f5:b3:65:0d:64:c5:9d:5c:1d:ea:3b:e1:8d:21:
         b3:6b:9d:46:4f:e0:a5:ea:31:ed:e7:3a:90:53:f1:c4:9d:bd:
         d7:55:50:42:90:81:c0:05:7f:e5:67:e9:a1:e7:55:57:22:47:
         72:6b:13:8b:19:dd:90:b0:24:56:cb:28:5d:ad:9f:e4:32:df:
         85:ef:7e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:35:00 2026 by rpki-client