Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7DCC2C42721B11EF81654E68C4F9AE02.roa
File:                     7DCC2C42721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier:          6AzD9aTvsjX8okZ6Eu+w7vKyfGnp0MFmYDLyLmyq1WU=
Subject key identifier:   7D:F4:44:50:07:DC:35:EF:12:05:22:FB:82:8E:26:F2:5A:71:DF:4C
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       0257
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7DCC2C42721B11EF81654E68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:16:58 +0000
ROA not before:           Wed 31 Dec 2025 04:24:26 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139753
IP address blocks:        202.29.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:26 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490aa-c786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:97:fc:ed:5a:3b:09:c5:a4:1f:a2:0e:ec:
                    0b:73:a6:e1:1b:1e:86:ae:84:95:0b:6b:fc:8f:00:
                    52:51:e5:73:0e:f6:71:33:5f:64:96:5a:11:bf:b4:
                    0a:e2:cd:89:96:c9:93:98:f7:7a:a4:c5:2a:d5:f4:
                    e4:0e:47:05:a9:dd:da:7a:48:3b:66:94:57:58:08:
                    34:df:fd:a3:39:ca:9f:db:d6:be:ba:32:ac:17:73:
                    44:6e:18:0d:74:57:3f:5a:f8:ca:46:7a:0e:37:2c:
                    0f:45:f5:2a:b2:81:3b:9b:71:79:12:07:79:1f:73:
                    c7:1d:d8:82:c2:5f:15:cd:7e:68:5d:4a:6c:a0:94:
                    fb:d7:96:ed:7a:a1:ac:97:10:76:07:2d:ca:64:6d:
                    14:9c:bf:f6:9e:95:cf:8d:f4:1a:a6:96:cc:14:98:
                    53:19:b3:6c:63:ae:a2:13:29:9b:8e:10:d9:28:ab:
                    f0:62:27:87:d0:6e:3f:1d:a2:a8:c4:41:01:37:6e:
                    ce:e2:ca:b4:68:06:b3:3b:e8:14:2b:2e:ca:19:fe:
                    5c:3b:66:42:42:2b:9c:58:52:0a:71:3f:fd:84:07:
                    9a:0b:a3:2e:64:60:75:3d:91:e2:66:a0:76:ef:0c:
                    38:6e:f0:03:73:94:45:ce:8e:82:a4:e4:9a:ac:5c:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F4:44:50:07:DC:35:EF:12:05:22:FB:82:8E:26:F2:5A:71:DF:4C
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7DCC2C42721B11EF81654E68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:07:11:ed:94:87:c6:56:7e:17:de:6b:b7:a3:36:ab:b9:
         ed:c2:f5:c7:2a:34:2e:1d:d2:eb:3c:9c:58:40:f4:4a:0b:76:
         7a:79:18:e5:84:ce:82:eb:9d:a5:4c:dc:21:ef:5d:ee:31:c5:
         3b:93:c8:f0:ed:9e:40:b7:c1:d5:2d:79:73:3a:ed:29:f4:81:
         05:9f:6c:1a:a0:e1:12:e8:bb:fe:99:f0:db:7f:1d:a5:a6:22:
         8e:9c:50:78:52:95:b5:1c:33:22:33:4b:17:1e:a8:35:c0:3c:
         c8:d9:c7:ca:85:3e:fb:e6:03:03:d1:09:64:98:5c:15:e3:1e:
         3d:61:f1:fd:ca:99:66:8a:16:20:00:9d:b8:d2:4b:29:e5:4e:
         4a:01:c1:01:34:10:b1:51:3a:cb:27:01:ae:58:ed:13:d5:c9:
         f4:c1:d3:fb:b7:7d:07:a7:eb:8f:bf:6c:49:57:ba:81:eb:b9:
         1b:14:0f:c1:f5:74:83:fa:72:d4:7d:49:f3:14:66:50:56:93:
         13:d6:95:ee:c5:ee:d0:c2:66:31:86:a5:1b:cb:94:7e:34:7c:
         dd:23:8a:c4:f6:02:4f:f9:cb:f7:9f:26:8c:6c:96:3a:9b:9f:
         22:d5:75:54:09:5b:30:8f:2d:c7:7f:e4:02:e8:78:91:c1:0b:
         e0:a9:1e:65
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTBhYS1jNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2RyX/O1aOwnFpB+iDuwLc6bhGx6GroSVC2v8jwBSUeVzDvZxM19klloRv7QK
4s2JlsmTmPd6pMUq1fTkDkcFqd3aekg7ZpRXWAg03/2jOcqf29a+ujKsF3NEbhgN
dFc/WvjKRnoONywPRfUqsoE7m3F5Egd5H3PHHdiCwl8VzX5oXUpsoJT715bteqGs
lxB2By3KZG0UnL/2npXPjfQappbMFJhTGbNsY66iEymbjhDZKKvwYieH0G4/HaKo
xEEBN27O4sq0aAazO+gUKy7KGf5cO2ZCQiucWFIKcT/9hAeaC6MuZGB1PZHiZqB2
7ww4bvADc5RFzo6CpOSarFwrHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH30RFAH
3DXvEgUi+4KOJvJacd9MMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvN0RDQzJDNDI3
MjFCMTFFRjgxNjU0RTY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyh0nMA0GCSqGSIb3DQEBCwUAA4IBAQB2oAcR7ZSHxlZ+F95rt6M2
q7ntwvXHKjQuHdLrPJxYQPRKC3Z6eRjlhM6C652lTNwh713uMcU7k8jw7Z5At8HV
LXlzOu0p9IEFn2waoOES6Lv+mfDbfx2lpiKOnFB4UpW1HDMiM0sXHqg1wDzI2cfK
hT775gMD0QlkmFwV4x49YfH9yplmihYgAJ240ksp5U5KAcEBNBCxUTrLJwGuWO0T
1cn0wdP7t30Hp+uPv2xJV7qB67kbFA/B9XSD+nLUfUnzFGZQVpMT1pXuxe7QwmYx
hqUby5R+NHzdI4rE9gJP+cv3nyaMbJY6m58i1XVUCVswjy3Hf+QC6HiRwQvgqR5l
-----END CERTIFICATE-----
Generated at Sun Mar 15 05:50:59 2026 by rpki-client