Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F60CA67E721511EFA7D82D3EC4F9AE02.roa
File:                     F60CA67E721511EFA7D82D3EC4F9AE02.roa (raw, json)
Hash identifier:          mhs/EGuAlHqaqnp2cCn7Cv7gRpbWVTuVvV6FR+xWkYw=
Subject key identifier:   B0:3A:E5:32:C7:1C:DB:D4:7B:59:EA:7D:63:C7:3D:DC:CB:71:D4:D6
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       0265
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F60CA67E721511EFA7D82D3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:17:11 +0000
ROA not before:           Wed 31 Dec 2025 04:24:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24344
IP address blocks:        202.29.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:37 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490b7-2307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:6d:13:d6:9e:0e:86:01:a4:68:32:f1:ee:
                    00:15:0c:3c:b8:b0:10:aa:98:7e:57:5d:69:d8:05:
                    c4:bd:99:b8:66:9a:51:44:ed:9d:71:ab:86:33:e0:
                    33:03:e4:5a:e4:10:e4:1f:57:9e:97:72:ad:64:0b:
                    d2:9c:09:3f:6f:fe:b3:c4:41:2a:f1:5b:ed:85:22:
                    01:ff:5b:be:35:4f:e3:93:47:e6:c1:07:c0:e7:bf:
                    9a:47:9c:a8:2a:cc:c9:7f:4d:e0:8f:7e:d7:b4:81:
                    47:5d:69:3f:c8:e0:86:6c:3a:96:10:17:67:4d:42:
                    de:da:31:49:39:de:d2:21:38:8f:d7:3c:9a:7c:d2:
                    2f:17:df:b1:d3:a1:7b:47:af:aa:63:46:ed:4c:ee:
                    dd:c8:d0:cc:0b:f3:78:0c:db:35:09:b4:96:a0:82:
                    f1:2c:2b:ab:a9:44:ff:ea:32:03:40:f8:87:28:cb:
                    24:20:e1:64:04:62:c4:b4:17:d5:f7:2b:c0:52:82:
                    1e:4c:21:cb:9f:2d:9f:1f:30:a9:e2:2f:62:27:85:
                    b5:59:e4:6e:38:06:f0:04:24:98:81:39:96:50:3e:
                    53:fc:85:ee:b9:3d:0b:73:fa:75:f9:23:45:95:ab:
                    01:b3:54:3c:b3:5f:d9:71:25:f7:2a:42:2f:52:11:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3A:E5:32:C7:1C:DB:D4:7B:59:EA:7D:63:C7:3D:DC:CB:71:D4:D6
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F60CA67E721511EFA7D82D3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:96:34:32:d0:04:04:e5:c6:36:0c:fe:ec:ed:29:48:0b:81:
         f9:74:82:83:c0:75:cd:3d:58:72:7a:09:c0:a7:72:2a:bd:bc:
         1d:84:67:fc:ff:fb:be:24:8d:ba:93:16:b9:02:28:49:ff:f4:
         1b:01:cb:0f:d7:d2:e5:8c:ca:51:f8:4e:cf:c9:ec:77:66:19:
         c1:46:c9:5f:39:dc:ea:57:75:9a:2c:ff:43:7c:14:86:92:12:
         a6:97:0d:4f:67:cf:77:a3:9c:04:cc:05:4b:fd:02:7d:bc:db:
         30:ed:9c:e3:14:df:30:68:03:38:37:a0:30:7a:5e:a1:69:49:
         d0:01:e6:db:df:01:3a:a5:b7:62:ac:ad:25:f5:fb:b9:95:31:
         a8:c9:de:38:7c:2e:bf:68:84:8d:d3:4b:39:30:8a:6a:29:53:
         4b:8e:a5:05:1f:03:a0:9b:29:8a:08:61:0b:26:ac:be:b1:92:
         79:8a:ac:5b:98:53:63:bb:a9:0f:8a:3b:6f:8f:c3:6d:57:bb:
         c4:08:97:d9:59:ec:98:68:fc:0f:49:5f:6b:e2:4f:11:2c:19:
         bd:30:bc:ed:01:2c:4c:5d:0c:25:6b:3e:a1:25:08:32:22:4c:
         d4:90:75:e9:82:7a:8f:51:97:be:91:41:73:c1:24:dd:84:e7:
         00:81:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:53:23 2026 by rpki-client