Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/B403FEF04F7A11F1B793142BCC833773.roa
File:                     B403FEF04F7A11F1B793142BCC833773.roa (raw, json)
Hash identifier:          IKEvB9HOIvcPiPrVCDKQordv8ZQb5XOZI7Vg1pWDv1I=
Subject key identifier:   A5:67:9C:E4:66:E0:F2:B9:CB:F2:BF:AE:40:0B:E9:2D:41:FE:05:F0
Certificate issuer:       /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial:       35E4
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/B403FEF04F7A11F1B793142BCC833773.roa
Signing time:             Thu 14 May 2026 09:53:05 +0000
ROA not before:           Thu 14 May 2026 09:53:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     53813
IP address blocks:        120.29.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
                          rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 14:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13796 (0x35e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
        Validity
            Not Before: May 14 09:53:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a059b81-1255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:71:50:25:0b:49:82:09:95:3e:a1:a2:de:
                    a6:cd:d2:82:86:a3:d0:16:8a:4f:82:2e:a8:5f:79:
                    e7:40:02:1d:ce:a6:eb:f3:df:7e:95:0e:9c:f9:98:
                    53:8c:5e:57:ac:c0:2d:b7:a5:ff:a6:0e:4d:ca:96:
                    4b:56:2d:34:b5:db:90:65:1b:5d:b1:71:7e:d5:0b:
                    02:d1:3f:3b:08:86:96:4a:46:44:da:75:32:21:5d:
                    0f:c0:2c:93:63:c4:a4:80:2d:36:aa:3b:52:e5:35:
                    b6:cd:dd:c9:6c:6e:38:3c:28:be:7d:41:31:1e:ba:
                    7e:09:f4:db:eb:6c:a5:c7:69:28:20:fb:32:03:8e:
                    d1:a0:a3:16:f1:51:c2:a7:7f:f6:5d:c4:04:a8:14:
                    1f:7a:65:9d:a1:8f:45:ae:a0:4a:ce:28:4d:07:9f:
                    a7:b9:e5:0d:79:c4:68:87:0d:71:34:82:9e:fd:eb:
                    3a:7e:80:c6:65:00:14:fe:90:8c:fe:37:d8:bb:36:
                    e2:0c:54:b8:58:16:86:05:df:3b:0e:0e:d7:f4:4f:
                    c7:bf:7d:92:c8:87:f1:a9:bf:62:6a:9e:2f:61:25:
                    83:6d:eb:8a:ba:22:5f:c9:0e:0b:61:b4:35:76:b9:
                    5b:53:64:04:e4:da:8e:ba:b3:90:a6:9d:a8:f8:ca:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:67:9C:E4:66:E0:F2:B9:CB:F2:BF:AE:40:0B:E9:2D:41:FE:05:F0
            X509v3 Authority Key Identifier:
                keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/B403FEF04F7A11F1B793142BCC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:28:9f:02:e6:20:de:55:b2:60:8d:8d:57:3f:7d:66:2f:d7:
         a9:a6:f1:59:a8:f7:a4:2a:d0:6d:43:c7:d7:c7:cd:1a:58:7d:
         74:7d:85:3d:b5:0c:94:f8:3c:de:46:d6:32:03:82:ea:c7:a5:
         c0:34:b1:1d:86:7b:2b:f5:d8:75:9f:93:40:59:a1:7b:fa:d6:
         f7:0e:f0:6a:70:45:b0:bf:29:df:db:61:0d:6e:69:5c:93:8e:
         8a:db:5e:0d:83:89:a0:51:72:d6:39:b9:99:db:10:2f:a0:40:
         8f:17:c8:d7:ae:dd:2f:83:47:5d:73:8d:c3:dd:14:2a:05:1d:
         1d:9d:ea:4b:8b:81:30:59:93:3c:5d:53:fe:64:2c:6c:8e:32:
         2d:40:2b:67:36:f7:a7:3a:32:0c:da:a7:61:56:42:7b:10:2b:
         4b:b6:57:af:ff:ac:3e:fb:6b:8b:ff:f4:8a:12:ea:9b:61:83:
         e4:86:56:44:7d:47:a6:6c:e3:64:49:cd:6b:bc:bf:1c:41:18:
         b2:ea:62:6b:06:88:34:35:57:28:5c:3d:58:45:67:04:49:2f:
         5b:0d:76:62:7c:e0:b3:2e:71:9e:1a:0c:b9:e8:0b:a9:1d:15:
         df:56:38:99:32:b2:ba:0c:1e:06:66:1a:76:d3:d5:1c:96:e5:
         c6:41:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:17:48 2026 by rpki-client