Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F47CC898721511EFA7D82D3EC4F9AE02.roa
File:                     F47CC898721511EFA7D82D3EC4F9AE02.roa (raw, json)
Hash identifier:          CTQVxqMfUAx/ozACyfVxwuLiZExLIvcAsNcA2WuQHJw=
Subject key identifier:   AA:00:7C:26:DB:EF:79:D1:35:D9:87:94:91:D0:3D:BF:42:64:DE:09
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       0263
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F47CC898721511EFA7D82D3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:17:09 +0000
ROA not before:           Wed 31 Dec 2025 04:24:36 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     23687
IP address blocks:        202.29.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:36 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490b5-f77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:52:2e:90:bf:67:4b:cc:55:f7:ab:0f:13:
                    c1:dc:40:fa:1d:2f:df:a4:9a:59:50:18:19:12:e8:
                    6d:e5:83:b9:cb:04:62:4d:ab:f2:99:4a:04:c1:14:
                    29:fc:2f:2d:08:6f:16:1e:99:49:dd:48:65:c4:99:
                    47:d2:35:ad:eb:93:0e:36:30:bf:a1:84:60:01:61:
                    98:e7:66:e4:3f:d8:08:5b:fa:ba:f1:02:18:85:da:
                    9f:6b:6d:09:bb:23:57:c2:be:6b:33:c5:db:f0:d2:
                    24:34:36:ec:6a:a5:20:0f:35:eb:e6:c0:2b:61:39:
                    00:f2:97:04:f7:a3:4a:88:d5:8d:63:7e:46:6f:30:
                    56:19:b3:76:23:0e:94:ff:cb:e7:7d:9c:6c:8b:66:
                    1d:fa:0b:f4:34:e5:25:aa:62:82:a8:69:a7:cc:02:
                    3b:9c:40:93:72:73:91:e5:fc:c7:89:a9:31:19:36:
                    cb:a3:6a:9d:59:58:e5:8b:a1:d3:25:3f:48:d8:90:
                    e5:08:53:33:3e:be:64:93:50:fc:3c:7d:93:d2:5d:
                    6c:9b:6d:61:07:82:85:c4:f6:2e:a4:22:b0:e8:af:
                    75:99:38:0f:67:90:1f:bc:03:72:09:0e:b1:7c:2a:
                    11:8f:b1:e8:48:61:f1:d4:42:8f:75:3d:0b:a8:2a:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:00:7C:26:DB:EF:79:D1:35:D9:87:94:91:D0:3D:BF:42:64:DE:09
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F47CC898721511EFA7D82D3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:11:0e:09:ce:8a:39:06:9f:ba:2a:61:99:bf:98:53:a5:
         d7:25:5d:47:18:24:c8:a5:00:47:dc:80:fa:a8:3e:cf:9e:70:
         81:03:91:7b:13:4a:0b:30:8b:7b:bc:5b:b7:c5:b8:68:f8:b0:
         b6:e2:25:2b:16:08:2a:82:e1:ff:88:63:b4:62:d3:cb:e6:6f:
         f7:f4:ba:7a:72:f6:57:73:45:ef:59:21:be:14:64:9a:19:e3:
         7f:0b:f5:fe:12:b9:ab:8a:30:cf:21:d4:12:d1:de:53:f1:cd:
         4a:65:b7:f8:a7:21:94:35:92:10:ad:58:d2:0b:25:53:53:04:
         70:c6:e7:34:eb:73:c9:7d:2e:c6:3d:94:d7:04:1f:4a:f7:f8:
         3d:ee:95:9d:2c:49:b4:12:ec:e6:4b:47:26:83:bc:e6:05:eb:
         1b:3a:f0:67:ab:4e:0a:0e:ef:8b:b2:e0:5c:aa:c7:31:ac:ec:
         6f:dc:3c:38:be:28:c3:cc:8e:7b:4c:16:e3:46:71:b1:2d:8a:
         33:26:84:bd:0f:9d:68:be:0c:fe:81:9d:a0:c5:70:11:81:51:
         fd:8a:0a:eb:47:71:55:69:0f:cc:c1:c5:c9:7b:d9:a6:2a:90:
         32:89:82:03:fe:83:9b:77:82:fb:24:78:fe:fb:b6:1a:76:23:
         13:0e:11:0f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTBiNS1mNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuONSLpC/Z0vMVferDxPB3ED6HS/fpJpZUBgZEuht5YO5ywRiTavymUoEwRQp
/C8tCG8WHplJ3UhlxJlH0jWt65MONjC/oYRgAWGY52bkP9gIW/q68QIYhdqfa20J
uyNXwr5rM8Xb8NIkNDbsaqUgDzXr5sArYTkA8pcE96NKiNWNY35GbzBWGbN2Iw6U
/8vnfZxsi2Yd+gv0NOUlqmKCqGmnzAI7nECTcnOR5fzHiakxGTbLo2qdWVjli6HT
JT9I2JDlCFMzPr5kk1D8PH2T0l1sm21hB4KFxPYupCKw6K91mTgPZ5AfvANyCQ6x
fCoRj7HoSGHx1EKPdT0LqCrwjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKoAfCbb
73nRNdmHlJHQPb9CZN4JMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjQ3Q0M4OTg3
MjE1MTFFRkE3RDgyRDNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyh1NMA0GCSqGSIb3DQEBCwUAA4IBAQB35xEOCc6KOQafuiphmb+Y
U6XXJV1HGCTIpQBH3ID6qD7PnnCBA5F7E0oLMIt7vFu3xbho+LC24iUrFggqguH/
iGO0YtPL5m/39Lp6cvZXc0XvWSG+FGSaGeN/C/X+ErmrijDPIdQS0d5T8c1KZbf4
pyGUNZIQrVjSCyVTUwRwxuc063PJfS7GPZTXBB9K9/g97pWdLEm0EuzmS0cmg7zm
BesbOvBnq04KDu+LsuBcqscxrOxv3Dw4vijDzI57TBbjRnGxLYozJoS9D51ovgz+
gZ2gxXARgVH9igrrR3FVaQ/MwcXJe9mmKpAyiYID/oObd4L7JHj++7YadiMTDhEP
-----END CERTIFICATE-----
Generated at Sun Mar 15 05:54:41 2026 by rpki-client