Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB267A60A8C311F0AE780647C4F9AE02.roa
File:                     EB267A60A8C311F0AE780647C4F9AE02.roa (raw, json)
Hash identifier:          o5CgHcc7+j8brjKpt25v9CKhkjYv3l/nyODL0IqtZ4g=
Subject key identifier:   28:8F:84:13:F4:B7:4C:69:E7:7D:1D:F4:F9:A3:64:80:86:09:BC:D3
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D23
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB267A60A8C311F0AE780647C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:27:12 +0000
ROA not before:           Tue 14 Oct 2025 06:06:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     396073
IP address blocks:        223.29.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11555 (0x2d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 14 06:06:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af30-b274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:3a:95:d4:21:9d:f8:a5:c9:bc:3e:d6:96:
                    33:0c:86:f3:a9:5e:92:7b:05:e1:cd:0d:4d:d8:89:
                    e6:0a:19:e3:4d:23:21:a8:ef:32:25:45:98:f5:4a:
                    24:f8:71:f7:6c:f6:e8:f7:a0:21:51:1c:ed:98:e9:
                    a7:7d:4b:01:70:43:16:44:b1:87:7a:77:29:0c:55:
                    1e:03:f8:05:84:b4:78:d2:33:cd:0c:b7:e8:48:12:
                    ae:69:69:68:ac:c6:48:1c:f6:7d:ba:a6:35:52:71:
                    a9:ce:23:17:99:2f:74:12:88:8d:b5:db:db:9c:4a:
                    44:2e:81:14:16:4c:1c:4f:83:3e:d3:2a:72:fa:f1:
                    33:00:d0:82:d9:c6:8b:f1:2a:61:9d:97:1b:e7:9e:
                    07:c5:d3:b5:68:49:9d:ba:d2:e0:c0:43:50:b3:61:
                    06:4f:6d:9b:7f:a5:4c:b1:9d:06:c2:e5:71:f7:7a:
                    4e:3a:52:f2:29:75:2f:eb:d2:19:ae:69:a9:c2:0d:
                    1a:9b:92:b7:7c:70:5c:f3:2b:70:42:53:d7:61:10:
                    d4:d4:31:fa:a7:bd:40:9a:0c:1a:5f:94:6e:7f:2b:
                    77:19:da:96:f4:6a:08:6a:ce:7b:c0:46:b4:c9:db:
                    f6:b7:82:53:df:d6:db:fd:a2:a9:b0:e8:54:e0:f3:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8F:84:13:F4:B7:4C:69:E7:7D:1D:F4:F9:A3:64:80:86:09:BC:D3
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EB267A60A8C311F0AE780647C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:40:da:62:fe:09:37:68:be:13:e6:f1:4d:9b:c1:ce:81:c2:
         1f:9b:fb:13:f6:49:52:30:fb:2c:30:df:0c:45:9e:38:5f:c8:
         12:55:53:2e:69:71:05:91:37:84:8e:0b:e6:73:56:26:f0:3d:
         c9:6e:f1:73:5e:b0:3a:10:04:ef:bf:a9:5e:69:89:80:05:f8:
         90:eb:5a:61:8f:07:b5:1d:c1:51:d6:79:bc:32:e6:a0:38:25:
         d0:05:ed:83:6e:57:c2:fc:72:4c:62:94:77:1a:60:97:8e:ae:
         26:6a:8f:64:18:9d:6b:fc:80:45:30:56:f4:3f:d4:43:1b:61:
         db:e0:73:ee:21:59:4d:09:0f:cc:89:f9:c6:48:e5:2e:dc:6e:
         11:f1:3a:03:b1:9f:04:13:c6:fc:c4:89:04:01:65:b3:40:e5:
         50:d9:05:99:ea:f2:6e:b7:2a:df:ef:4a:4b:c4:cd:2c:09:3a:
         ae:21:4e:bf:53:d2:33:03:2e:2b:29:2b:06:ab:6d:a4:22:09:
         17:f3:37:9d:d9:14:b8:0a:9a:09:0a:00:8e:27:66:2f:2f:f6:
         23:5c:52:a8:4f:c2:a5:62:3c:55:99:55:5d:24:26:e7:93:bc:
         49:4f:ac:91:0c:2b:c5:18:ff:42:db:24:0d:41:b3:17:47:8c:
         39:cb:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:38 2026 by rpki-client