Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/13CC60A0722011EF981BE15DC4F9AE02.roa
File:                     13CC60A0722011EF981BE15DC4F9AE02.roa (raw, json)
Hash identifier:          LxPan/jQo7rsVexdg9s5FzFHliVy8l4UVq4A7dmBvUM=
Subject key identifier:   6D:88:04:64:02:EC:5D:9D:C4:38:FE:21:B7:7C:7E:D8:DA:07:FE:B0
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       0266
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/13CC60A0722011EF981BE15DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:17:12 +0000
ROA not before:           Wed 31 Dec 2025 04:24:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24475
IP address blocks:        202.29.12.0/24 maxlen: 24
                          2001:3c8:1012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490b7-441e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:65:6b:83:a2:de:4c:96:92:50:e6:c9:93:
                    46:a4:fd:53:45:7c:7a:d0:ed:69:a0:98:cc:d5:29:
                    2c:d4:ab:2a:28:f0:13:48:1c:10:f5:10:05:2c:99:
                    ed:2f:69:e5:0a:57:8a:8d:c3:3a:a6:ed:41:a5:4f:
                    55:58:d1:e1:75:d5:4d:08:0b:f9:67:f3:aa:1f:0d:
                    44:2b:18:3d:0c:88:3a:ce:1c:99:cb:d5:b9:0a:20:
                    e5:89:19:e8:47:7a:1f:46:e5:e4:88:e0:98:4c:61:
                    41:8f:d9:52:71:fa:85:c6:81:00:99:8b:50:75:6a:
                    dc:1b:97:85:1d:bd:6a:6d:53:60:50:18:f1:32:bd:
                    a2:35:e6:f3:5f:82:62:dc:94:d3:c5:2a:39:f0:fa:
                    d8:e1:69:47:05:0f:86:ad:8c:c6:14:f5:4a:81:8b:
                    a0:2c:24:d9:db:07:19:68:4c:78:8b:b2:aa:7b:a1:
                    0e:ca:2f:1e:0a:a8:8e:7f:ba:f1:7d:eb:2c:a3:1e:
                    49:20:cb:0a:98:2d:b9:7c:df:8a:bf:aa:71:06:b9:
                    a1:79:4e:0f:f9:72:ec:82:6e:b3:22:05:24:a1:ff:
                    8e:88:40:a2:d9:89:9b:43:ad:68:4a:94:a0:48:93:
                    cf:e4:e2:98:b2:ec:51:dd:8b:fd:84:a3:30:b9:fc:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:88:04:64:02:EC:5D:9D:C4:38:FE:21:B7:7C:7E:D8:DA:07:FE:B0
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/13CC60A0722011EF981BE15DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.12.0/24
                IPv6:
                  2001:3c8:1012::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:9f:95:d2:3f:88:43:73:fa:91:1a:b9:99:4d:7b:7c:bf:
         ea:49:cf:05:e8:0d:31:ed:b7:c8:a4:48:9a:83:5a:f6:d2:10:
         eb:e6:e0:82:17:87:28:f9:8b:0b:15:43:7d:80:bd:9f:ec:5c:
         e2:af:1a:26:a7:8a:72:ca:7b:78:f4:5e:27:21:96:5d:45:27:
         46:40:eb:62:d3:db:a0:39:83:c3:fe:f3:53:c1:c8:5a:bb:3d:
         25:fe:ab:3b:90:d4:ea:32:07:53:54:16:2b:6a:a0:3e:b4:1a:
         55:c2:bf:8a:6d:8e:38:03:4e:42:45:95:01:5e:41:00:48:e9:
         5a:06:6b:c6:35:3b:c8:e8:be:d4:84:92:32:9b:7d:4e:32:c8:
         c0:92:67:0b:92:0a:4d:43:66:56:ff:c2:bc:8b:83:c5:31:0b:
         e4:d0:14:cd:fc:19:ea:e5:71:95:dc:b5:ab:0d:d1:d4:6b:94:
         e1:56:db:23:b3:9a:7c:0d:ca:fa:10:9b:a2:1d:e9:1e:fe:97:
         29:4f:bb:52:6e:cb:4f:bc:70:92:5e:3f:4f:e3:f6:d6:de:c7:
         d4:71:58:6d:dd:52:f9:b0:6b:69:07:71:51:9b:23:61:5d:80:
         11:24:6a:9f:c8:cf:ac:f9:cc:20:79:7e:69:23:28:be:4f:84:
         2a:ef:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:54:42 2026 by rpki-client