Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F35347DC721311EFA9D7CA3AC4F9AE02.roa
File:                     F35347DC721311EFA9D7CA3AC4F9AE02.roa (raw, json)
Hash identifier:          UKke8OeB+p7yp6L3xMVU+tuxkR9Lw43TvuvyxlaIfBk=
Subject key identifier:   3F:03:45:8C:5A:AA:10:C5:7A:E0:28:03:AD:B0:D6:2E:CA:BD:A7:DF
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       025E
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F35347DC721311EFA9D7CA3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:17:04 +0000
ROA not before:           Wed 31 Dec 2025 04:24:31 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150107
IP address blocks:        202.29.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:31 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490b0-3d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:73:a0:96:f8:6c:47:3d:d7:07:1e:19:a8:
                    4d:c1:a3:3d:2e:59:80:78:a7:9c:64:fc:80:ab:ad:
                    4e:6b:97:1a:51:a4:f4:fe:ae:35:a4:1a:3e:20:db:
                    2f:e5:35:ea:63:8c:36:f6:00:bd:20:b3:e3:c5:90:
                    93:45:fe:ab:05:f9:84:a5:dd:d4:bc:70:48:d2:29:
                    e8:f6:c6:f2:c8:0c:e9:0c:94:2b:90:d6:a7:97:b6:
                    7c:d6:44:b4:0d:46:45:c9:da:e7:21:47:65:62:58:
                    c1:60:b2:82:70:b9:bc:3e:f6:b4:e5:fe:85:8f:68:
                    80:4c:d8:9c:3b:e4:1f:48:57:b9:aa:07:c7:86:8b:
                    20:9f:a5:37:ec:99:94:c4:a6:a8:7f:ee:2c:7b:4a:
                    2e:c1:1f:d9:26:8d:e2:d9:d2:f4:f6:9c:1a:3b:9b:
                    ec:28:cf:fc:90:a2:b1:e9:99:4d:7b:0a:29:55:83:
                    c0:6f:f5:9d:e1:8a:ef:12:e9:9b:79:8b:66:26:0e:
                    f6:78:bb:be:ce:1e:0b:3c:e0:aa:2a:2f:83:6a:9e:
                    15:35:b7:ec:49:d4:23:68:53:d2:64:66:46:1d:50:
                    ab:bd:3a:22:6e:64:98:b8:ad:23:05:1b:e2:0e:3e:
                    23:f9:10:aa:a6:af:eb:c0:99:b2:36:8b:5c:9a:6a:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:03:45:8C:5A:AA:10:C5:7A:E0:28:03:AD:B0:D6:2E:CA:BD:A7:DF
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F35347DC721311EFA9D7CA3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:0d:32:eb:c7:ad:af:7b:5e:b3:aa:c8:67:42:07:74:36:
         d4:bd:20:c7:8a:1a:b4:f2:01:6b:62:78:87:8b:d6:2e:61:4e:
         58:36:78:0b:f6:4b:ce:9c:a1:e9:db:a9:2f:a3:00:37:b9:56:
         b1:fe:d9:0d:95:f5:1e:42:ce:b4:a2:c4:dc:76:1d:af:e4:73:
         a0:4e:43:12:59:8e:5a:ed:2e:35:3e:89:1f:77:02:86:4a:bf:
         1c:00:03:2a:32:4d:ea:08:98:5d:17:d9:b0:30:28:0a:a1:cf:
         73:17:6d:dd:97:19:2b:0d:ba:18:58:3b:8e:af:f3:21:41:37:
         f5:3d:f8:84:bc:4b:e1:55:39:3f:2e:be:00:e3:14:19:ce:35:
         0a:d5:4e:80:5e:b7:92:e9:8c:e8:e7:fe:f5:89:79:fc:e3:d7:
         c4:0b:5e:14:09:1d:b3:04:8a:25:f3:cf:db:b6:72:cc:f7:7e:
         d6:60:9a:81:d9:19:95:bb:e2:e9:68:71:66:6d:c8:6a:5e:85:
         42:0c:08:25:f0:89:bb:28:3e:3d:86:b8:34:ef:8d:57:3a:25:
         cc:5f:cb:71:f7:40:be:23:d8:1e:c6:a4:be:b6:35:13:85:ed:
         f1:c2:54:c8:b7:36:76:85:3c:03:e5:d1:e0:29:c5:35:25:ad:
         4a:93:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:53:24 2026 by rpki-client