Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
File:                     0BB5ECE8697611F18B2B119D7D47A888.roa (raw, json)
Hash identifier:          Gs2eGiEkmx7D2o9ZNJRrk3E0H7PosdKL1RS95BtnvP8=
Subject key identifier:   8F:9C:A7:D7:1F:14:F0:C0:B3:62:50:5F:71:66:FF:7E:3C:2A:19:D5
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       08A9
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
Signing time:             Fri 10 Jul 2026 03:20:53 +0000
ROA not before:           Fri 10 Jul 2026 03:20:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     29752
IP address blocks:        129.227.123.0/24 maxlen: 24
                          162.128.104.0/24 maxlen: 24
                          162.128.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 10:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 10 03:20:53 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a506514-3f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:81:eb:7d:13:ab:b8:87:4a:33:8c:4a:ef:
                    04:7a:dd:14:4f:5b:a4:0f:c4:20:02:dc:08:bc:62:
                    c7:11:19:a1:20:a6:78:73:5a:b1:db:09:11:15:ea:
                    d8:84:79:9b:a6:c6:87:ec:0a:21:bc:c0:74:db:aa:
                    98:03:cc:73:cb:99:33:4a:fc:d6:7d:4c:5b:68:b0:
                    a5:39:76:d7:14:45:a2:3b:d2:07:7f:b8:e5:ea:0d:
                    dd:80:b6:84:46:69:a8:12:56:6b:22:5d:7f:2c:6f:
                    6c:8a:70:58:89:62:c9:2e:3e:79:55:cd:7b:0c:2a:
                    8c:a6:b2:19:dd:72:de:3c:3e:dd:4a:dd:a5:f8:b5:
                    a2:82:cb:79:70:87:16:85:dd:30:6c:6b:f7:89:62:
                    70:cd:93:3a:77:46:10:b7:c5:81:e0:1c:fa:bc:99:
                    93:d5:4d:f0:59:b9:ed:9f:78:24:ad:72:a6:b2:d5:
                    d5:c7:2f:16:c9:22:a2:cc:47:cd:45:3d:a7:c2:e0:
                    a9:5b:e5:df:b1:a2:ea:a2:f7:8c:74:59:63:59:f8:
                    9f:de:93:97:df:09:3d:4a:ed:c7:20:00:19:94:cf:
                    ae:c8:f9:8b:8a:f0:69:7e:71:40:85:ee:01:ff:7d:
                    9a:fe:c9:e9:32:fe:7b:7d:a7:c9:dc:a3:4d:ae:5e:
                    16:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9C:A7:D7:1F:14:F0:C0:B3:62:50:5F:71:66:FF:7E:3C:2A:19:D5
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.123.0/24
                  162.128.104.0/24
                  162.128.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:3a:63:3e:60:41:95:41:55:bd:67:7a:03:15:ca:76:93:39:
         f3:e4:48:1f:00:90:ec:c7:3c:d9:89:61:ed:af:a6:39:68:d7:
         7a:89:97:81:b0:28:9f:50:d1:8d:69:41:20:7b:88:01:5f:73:
         13:10:67:67:44:1d:6a:78:be:dc:d4:82:9f:b9:e7:e8:85:e4:
         80:c4:e8:bc:9a:9a:b1:3d:9a:b5:6a:71:ae:4a:71:bc:9f:35:
         8e:51:bb:db:73:46:be:dd:3f:34:28:47:df:09:7d:71:0f:aa:
         5c:70:9d:bc:f1:d7:b6:ef:46:28:ef:42:ee:d2:a5:23:1c:ae:
         44:df:48:72:ff:a5:e5:a2:b3:f0:99:c1:aa:f7:de:97:c0:8b:
         62:ee:6e:02:05:6b:fc:05:91:42:87:a3:c4:eb:b0:b4:f3:25:
         ef:9b:66:e2:1e:e9:5a:c6:1f:1a:a1:11:6d:1b:e9:56:60:f9:
         29:39:a9:85:2e:e2:5a:bb:85:a6:f9:51:5d:5c:8d:2f:27:79:
         02:a2:b9:18:e4:da:cd:d2:74:a6:ae:c4:b8:53:0a:ca:97:a8:
         d5:f3:89:c3:08:1b:a3:ed:05:ae:62:04:58:3a:8b:32:85:c7:
         65:62:c1:31:be:df:e2:ee:ec:57:b2:65:ed:26:ba:8d:a0:9f:
         69:ff:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:17 2026 by rpki-client