Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F3AA4E86721511EFA7D82D3EC4F9AE02.roa
File:                     F3AA4E86721511EFA7D82D3EC4F9AE02.roa (raw, json)
Hash identifier:          +rW3AHWO9GXhbeOLZCUTs8xpI6nYZfrrZ1MhEQ49Oi0=
Subject key identifier:   FC:A4:36:63:45:EC:9D:F6:26:06:1E:CD:B7:CA:E5:26:CF:CA:39:EA
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       023D
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F3AA4E86721511EFA7D82D3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:16:35 +0000
ROA not before:           Wed 31 Dec 2025 04:24:01 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     10227
IP address blocks:        202.29.82.0/23 maxlen: 23
                          202.29.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:01 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a49093-c007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:5f:ce:1b:9b:9e:d5:92:cd:05:f4:2a:77:
                    f1:97:35:92:ca:38:5c:08:0a:a3:9e:05:c4:3d:99:
                    28:59:88:c3:6d:8c:c3:ed:c4:50:95:55:48:92:57:
                    62:7c:4e:a8:e4:dc:eb:ac:f0:33:a5:fb:36:7e:43:
                    3b:7f:df:c5:9e:9b:1c:fb:4d:47:eb:c9:8c:a4:7c:
                    bf:17:69:f0:50:fb:ea:80:a1:d3:4c:16:4e:e2:39:
                    68:83:bb:36:a0:44:b4:24:44:a1:cb:19:8a:fe:da:
                    92:f1:ed:93:17:26:ed:f8:83:06:f9:7f:bb:11:ae:
                    6b:6a:c7:ef:4b:b9:0b:57:d6:d7:e7:55:c2:ac:95:
                    0c:ea:35:4c:3f:00:e8:94:4b:83:b8:54:d3:d1:4f:
                    11:9a:21:12:0b:6d:b1:71:b1:a1:f0:7c:d8:e5:1c:
                    c2:bb:7d:44:3f:3c:81:db:c2:b2:09:cc:7d:77:f2:
                    fb:73:b5:ff:b8:5d:a2:5e:ca:19:5f:eb:8c:53:a5:
                    e8:f6:da:75:61:dd:be:43:a8:9c:10:a1:a9:a4:ae:
                    bc:49:b5:b4:0d:17:01:0d:9f:67:1c:b7:07:5c:df:
                    45:c0:4f:fd:0c:6d:b9:e5:d5:a4:d4:b1:25:b3:fc:
                    a3:0b:ae:93:98:c4:c5:62:ce:cc:4c:1a:b2:b8:61:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A4:36:63:45:EC:9D:F6:26:06:1E:CD:B7:CA:E5:26:CF:CA:39:EA
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F3AA4E86721511EFA7D82D3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:e5:42:36:02:77:44:3e:5a:05:ab:71:25:04:7a:57:36:c7:
         b6:93:96:4d:fb:63:c0:61:7a:0c:77:ee:fc:74:d2:4f:d8:01:
         0a:cd:94:f9:9b:30:06:3d:01:12:8e:5e:99:7f:1f:d9:5b:cf:
         0f:ce:fe:20:47:31:b0:41:b1:c5:0b:6e:1c:7c:cd:02:61:f6:
         49:aa:cf:80:42:10:83:f5:ad:6e:53:f1:a1:f0:72:81:e0:ad:
         25:4e:0d:de:a7:0c:ce:28:54:8d:b8:27:de:b2:31:48:0f:dc:
         8a:e6:87:12:1e:f8:2b:7f:08:5d:1f:a3:4f:c1:af:d7:ce:a3:
         22:eb:16:73:b8:51:82:bf:a3:ba:88:2d:4a:6c:5c:3b:55:f3:
         a9:52:80:e7:19:31:09:9b:b0:32:f0:27:88:e5:84:ad:c1:30:
         9c:00:aa:7f:ef:a0:c6:7c:4c:1a:9b:5f:da:69:f8:06:ae:e7:
         4c:47:e9:f2:09:40:dc:a3:06:20:63:86:00:ad:20:78:78:77:
         15:5c:48:b4:be:af:32:2f:d7:7b:74:6f:87:0e:0c:bd:dd:6d:
         61:d0:84:d4:e2:78:7e:48:e2:74:90:a0:7f:9c:d8:c7:3b:7d:
         9c:58:0c:bc:23:8c:54:79:98:8a:3e:1a:ee:2f:13:1c:83:cc:
         c4:97:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:53:26 2026 by rpki-client