Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa
File:                     0BB29428314511EF9B1F4B46C4F9AE02.roa (raw, json)
Hash identifier:          nhgX20QyBAliVjR34gYeCpAPvjxaRsYtwg9FMkMe0f0=
Subject key identifier:   00:19:C6:33:A7:1C:DA:A6:22:D9:8C:BF:EB:55:49:68:D7:29:3F:6A
Certificate issuer:       /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial:       01D6
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:04:27 +0000
ROA not before:           Sat 07 Jun 2025 04:32:57 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134823
IP address blocks:        123.253.110.0/23 maxlen: 23
                          123.253.110.0/24 maxlen: 24
                          123.253.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
                          rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
        Validity
            Not Before: Jun  7 04:32:57 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4395b-e11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:67:a8:ad:b0:f8:da:23:60:67:a2:a6:f4:
                    a4:cf:12:6f:92:de:61:8f:83:de:2b:d6:85:d5:8e:
                    eb:f2:36:6e:8e:9d:8b:eb:83:5f:db:83:92:1b:f0:
                    37:ab:50:c0:d2:6f:97:70:48:91:a4:ff:7c:1f:ec:
                    24:67:ac:37:82:15:92:f2:e8:34:40:8b:76:19:13:
                    85:33:d8:20:c0:9b:eb:98:d3:60:55:be:b7:04:28:
                    5d:1d:21:48:34:8a:37:5e:4d:53:2f:8c:ec:93:a0:
                    85:6b:f7:8a:97:6c:a6:63:95:8f:cb:1f:5d:a6:1e:
                    cc:8a:8f:92:ed:7e:d9:be:34:10:b6:b1:f0:86:6c:
                    65:d2:8d:9e:39:99:f6:18:65:12:a8:c8:89:45:79:
                    cf:ae:b6:c3:39:83:82:64:c3:81:c6:a0:51:0a:a0:
                    0a:9d:3c:8c:a9:93:57:9a:5b:67:d8:1b:2a:61:26:
                    d4:ce:66:d9:09:ce:fa:ec:89:a7:97:59:66:7e:93:
                    4b:5e:bd:65:34:ac:b8:05:f7:6e:be:16:ba:99:b7:
                    36:28:4b:c8:c3:12:fa:58:b0:f1:9c:79:68:9e:65:
                    15:04:dc:58:39:e0:11:24:a2:e0:74:77:53:58:b4:
                    08:0b:b9:12:c5:5f:cd:ba:82:1b:dd:43:6d:36:f0:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:19:C6:33:A7:1C:DA:A6:22:D9:8C:BF:EB:55:49:68:D7:29:3F:6A
            X509v3 Authority Key Identifier:
                keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:c4:bc:b0:2e:7f:af:93:aa:c5:fa:4e:84:55:c0:9a:f4:
         42:12:d2:28:6b:d2:14:e2:c2:21:87:15:46:bc:52:21:36:b7:
         7e:4e:0c:c1:d9:e3:6e:56:6c:59:ac:fa:6c:eb:11:87:80:2d:
         5a:59:ec:77:ff:3a:47:60:e4:cb:6b:5b:8b:35:f8:dc:1b:7b:
         eb:12:78:af:7f:73:41:39:07:cb:f0:a9:cd:30:6d:e5:d3:07:
         4c:2c:73:05:45:31:ba:55:45:57:fc:93:4e:e4:fd:f7:44:65:
         f9:f2:39:e8:73:97:e2:bb:09:4c:73:31:d9:7c:71:78:e0:e8:
         23:8c:85:39:e7:a3:04:e3:16:ab:16:f8:70:04:06:29:19:d0:
         5d:48:2c:2b:cf:b3:ea:85:18:b5:2d:6a:3d:e6:af:6c:53:94:
         20:5c:33:ed:37:f1:07:88:e3:6e:7f:32:1e:ee:a3:f1:e9:52:
         ca:dc:54:5a:64:6d:74:88:db:d0:9d:ca:89:f0:c1:8b:d0:20:
         cd:55:e0:c2:8c:66:55:04:7e:af:e8:ed:96:79:22:f3:07:d0:
         1a:5e:10:8d:6b:34:39:a6:fa:7f:85:1a:40:87:c9:89:17:f8:
         37:cc:9a:7d:14:7c:d3:3c:91:17:4f:fa:88:45:6c:96:9a:4f:
         d1:49:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:09 2026 by rpki-client