Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa
File:                     F73A83F4721511EFA7D82D3EC4F9AE02.roa (raw, json)
Hash identifier:          BuYD3kccAImr/2bEs9uWEzBAfMJUAqyH4yIvtnEH5g0=
Subject key identifier:   F3:55:15:B3:4A:7E:F7:DB:44:1B:CE:67:C4:F8:27:55:C2:50:FA:A1
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       02A3
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa
Signing time:             Wed 06 May 2026 02:53:21 +0000
ROA not before:           Wed 06 May 2026 02:53:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9464
IP address blocks:        202.29.144.0/21 maxlen: 21
                          202.29.144.0/24 maxlen: 24
                          202.29.145.0/24 maxlen: 24
                          202.29.146.0/23 maxlen: 23
                          202.29.148.0/22 maxlen: 22
                          2001:3c8:9007::/48 maxlen: 48
                          2001:3c8:9009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: May  6 02:53:21 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69faad21-494b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:62:ff:94:18:a1:ad:d1:35:44:64:80:d5:
                    2d:77:cb:3b:2a:21:fa:de:ca:82:30:40:97:21:d8:
                    60:40:92:f8:39:70:a6:c3:26:1d:d2:70:1e:e2:30:
                    48:7e:0c:32:fa:a2:c0:1d:87:b2:ae:7f:4c:e4:65:
                    dd:e4:20:e4:01:4c:1d:a1:8a:3b:4f:3a:9f:fb:9d:
                    49:4f:93:d6:d0:c4:d8:1c:8c:4b:54:59:6b:f3:01:
                    99:47:7a:89:0c:39:6a:ba:f9:67:44:b7:0d:1a:0b:
                    e6:a0:0c:3d:1f:27:07:76:0a:ec:4a:d6:99:48:e1:
                    75:a8:9d:7f:1d:d1:74:67:02:5a:aa:cc:2c:53:5f:
                    26:45:0f:4f:fa:7c:16:7f:35:3e:04:cb:67:af:9f:
                    bf:1b:27:0c:2d:86:65:15:6d:2d:af:6c:13:69:ec:
                    87:9a:e5:93:7e:ee:ca:d0:03:b7:39:a2:be:27:3a:
                    70:a0:7d:24:ac:b7:21:8c:61:66:04:df:4c:55:85:
                    4d:76:93:74:1f:87:9f:65:21:c1:93:a2:5a:df:92:
                    49:f3:43:c3:b6:d5:65:b6:1e:d0:b6:03:dd:50:03:
                    fd:97:2b:86:19:80:4b:2a:43:c3:ee:9b:cd:ea:e2:
                    b6:4a:00:f8:09:2a:93:75:2b:5f:fd:67:0e:91:43:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:55:15:B3:4A:7E:F7:DB:44:1B:CE:67:C4:F8:27:55:C2:50:FA:A1
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.144.0/21
                IPv6:
                  2001:3c8:9007::/48
                  2001:3c8:9009::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:3e:db:b6:58:1f:40:06:ad:6e:a4:2d:94:b1:80:ed:d7:a7:
         8a:6e:e8:5d:69:f9:94:df:e5:31:f1:25:a6:44:e0:a7:a7:cd:
         77:b5:ee:77:1a:29:31:a8:3c:2e:da:8b:e6:df:4a:75:3e:b6:
         56:af:96:1e:0d:72:41:81:6b:11:fa:4e:b0:6e:42:e5:61:98:
         3a:db:c2:8d:07:f1:58:ed:cb:d2:1c:db:3b:af:c6:e0:57:c9:
         35:b9:3d:28:71:b1:82:72:10:4d:f2:26:e8:c5:b6:57:c7:d3:
         6a:d1:cb:d6:da:59:36:60:c4:a7:54:44:09:6c:ff:a6:bc:0c:
         43:45:ac:8f:66:84:cd:0a:36:ee:cd:6b:54:36:72:5f:08:19:
         79:90:d2:78:e1:5f:3f:72:95:ce:a8:35:e5:30:2b:7c:98:96:
         a9:84:89:c3:6f:c3:74:c1:31:82:e4:56:44:b3:78:b2:33:0f:
         30:34:4d:95:25:4f:c2:c2:91:ba:8b:7d:fa:68:13:db:9b:59:
         0a:bc:c6:3c:53:5c:cd:83:27:3c:fe:03:cc:e8:1e:26:0f:f4:
         70:d5:78:f1:2c:c1:4a:36:c3:a1:82:b4:cf:1c:ba:f6:ad:94:
         16:99:90:36:23:47:c7:c1:87:c8:42:bb:73:87:52:1c:fe:86:
         c9:5d:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:44 2026 by rpki-client