Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa
File:                     BF529990959F11EC844CAD64C4F9AE02.roa (raw, json)
Hash identifier:          OcrJ1OdtuDJwFGfS33ae+ZGC3AcOKMEW7bd8MKcrgcg=
Subject key identifier:   39:6E:25:B5:53:17:43:1A:F9:B2:AD:A1:31:50:3C:9A:13:64:A4:46
Certificate issuer:       /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Certificate serial:       083F
Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:37:27 +0000
ROA not before:           Wed 26 Feb 2025 22:20:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     399734
IP address blocks:        113.29.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
                          rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
        Validity
            Not Before: Feb 26 22:20:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a408d7-0664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:1b:65:50:21:13:73:f7:91:fc:c3:2d:b4:
                    cf:bc:0a:2a:10:0d:99:5f:ae:2b:c7:bb:e7:4f:44:
                    00:ca:c7:aa:5e:71:bc:9b:f5:80:57:c1:e9:c8:02:
                    5d:c9:af:b4:b8:48:49:01:6c:ea:bf:d4:2c:66:bb:
                    b6:12:34:47:32:1d:db:82:db:f1:7f:f2:1f:a2:61:
                    07:f3:3e:49:a2:01:6f:52:75:75:f3:8d:12:5d:ea:
                    31:3e:0b:79:c6:db:cc:23:3b:94:e5:f6:92:8d:ca:
                    aa:d6:e4:98:68:77:ae:fb:7d:7f:11:34:68:6b:21:
                    6c:6d:b3:4e:1b:26:bc:31:01:4f:74:32:6c:d1:5b:
                    95:04:f4:e4:60:60:bf:08:97:71:6e:d7:3c:bd:42:
                    da:18:4a:4c:a7:c5:f7:8c:00:61:5d:9b:81:fb:1e:
                    45:03:31:04:5a:a1:9d:9e:ef:83:3f:7d:49:0d:bd:
                    c9:f6:e0:db:73:ff:59:9d:23:81:6e:fa:31:d7:69:
                    39:ac:3d:4a:15:78:9c:19:da:cb:9a:c7:be:92:e9:
                    1a:70:db:77:b1:5c:be:dd:8f:38:c3:5c:e9:b9:4d:
                    c2:f1:a7:44:7d:89:60:8e:d2:1e:93:e2:18:8b:ec:
                    52:99:8f:98:84:dc:fe:60:d9:2f:0d:c3:e3:dd:39:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6E:25:B5:53:17:43:1A:F9:B2:AD:A1:31:50:3C:9A:13:64:A4:46
            X509v3 Authority Key Identifier:
                keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.29.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:4c:f2:bf:39:1b:97:29:d9:34:13:0f:1c:4c:2e:1d:11:21:
         33:81:5d:6e:30:c8:d5:e9:77:70:d1:6e:33:07:7e:3a:81:db:
         2d:a3:bb:cf:b7:46:af:e8:77:b8:03:c2:59:3e:75:01:bd:75:
         62:e8:f7:9f:38:46:5f:c7:f6:cc:68:fe:82:00:f9:8d:eb:0c:
         f7:4b:38:3b:72:d0:a2:44:0f:bd:2c:79:f8:57:24:28:3e:b9:
         f6:0b:e0:c9:aa:ce:08:df:74:d4:20:07:44:76:08:3f:58:6c:
         78:94:a7:08:da:8f:8d:d4:84:47:96:3c:38:8d:07:bc:55:78:
         4b:17:ff:14:28:6b:ba:e2:d7:15:55:80:fe:6e:90:ed:ae:f8:
         5e:b2:14:8c:27:46:fd:7c:70:ca:54:fe:81:48:c7:ad:2e:3d:
         56:81:d4:be:78:a5:a3:92:14:cd:49:d6:53:c4:0b:ba:30:e7:
         44:50:38:c8:94:0d:97:84:ca:be:33:f4:fa:3f:77:40:db:d7:
         e3:3d:a2:92:79:eb:70:21:0c:e3:38:82:ae:b4:ed:27:64:22:
         b5:9e:b9:32:d9:b2:3b:63:33:7d:a7:69:b4:0e:ba:5f:77:63:
         b7:92:b4:be:6e:10:56:40:35:00:28:2c:89:94:b9:0d:fd:00:
         a1:08:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:39 2026 by rpki-client