Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/FFD36784600111F19064A2768247A888.roa
File:                     FFD36784600111F19064A2768247A888.roa (raw, json)
Hash identifier:          V3bllZSRhm3+TX1SYEI07qXQ37w5NHGT/3GcjZvebcg=
Subject key identifier:   6D:F3:C1:CC:44:DE:D6:00:0B:0D:95:30:E4:20:23:9B:E1:39:DF:E3
Certificate issuer:       /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial:       020D
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/FFD36784600111F19064A2768247A888.roa
Signing time:             Thu 04 Jun 2026 10:41:53 +0000
ROA not before:           Thu 04 Jun 2026 10:41:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     53813
IP address blocks:        129.127.226.0/24 maxlen: 24
                          129.127.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
                          rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
        Validity
            Not Before: Jun  4 10:41:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a215671-136c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:c7:3a:5d:fb:1d:1a:c7:69:c4:a7:6f:70:
                    43:e8:bc:f3:b3:9b:82:b4:21:82:a2:83:46:88:b6:
                    6e:c0:f2:53:f2:26:b6:36:a5:4c:96:70:41:44:9a:
                    13:4a:58:5f:e2:15:70:24:34:3a:85:98:bb:ad:45:
                    e7:12:a4:47:a2:33:52:48:7b:87:6f:30:39:35:28:
                    ae:a8:d1:aa:b0:8b:c2:47:5c:b2:24:20:21:f5:d4:
                    7e:99:1f:8d:fa:22:78:16:75:a3:d2:03:41:4a:1f:
                    0e:82:0c:55:48:83:ef:d7:14:76:c5:7d:4c:89:70:
                    64:92:23:7d:c7:f5:fc:ba:37:b6:8a:1a:ed:ae:a4:
                    8b:1c:d7:01:a6:64:af:74:4c:37:9c:20:79:f8:06:
                    8e:9e:9b:af:4c:cc:41:70:96:20:ef:0f:75:9a:31:
                    35:17:c5:34:92:b8:6d:44:d7:0d:2f:b1:83:d0:cd:
                    ee:45:40:18:ff:ad:4b:f2:d2:eb:93:76:ca:33:a0:
                    1b:e8:62:41:d9:70:d9:6a:35:0b:1a:a1:ac:b1:f2:
                    06:e2:24:11:0f:0d:88:55:45:6d:91:71:8c:d4:4d:
                    49:fb:46:32:a4:58:73:cd:9e:85:95:f8:57:f8:f8:
                    4f:75:f6:03:d4:f8:4d:4f:4d:09:23:89:25:58:7c:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:C1:CC:44:DE:D6:00:0B:0D:95:30:E4:20:23:9B:E1:39:DF:E3
            X509v3 Authority Key Identifier:
                keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/FFD36784600111F19064A2768247A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.127.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:3b:a9:6b:dc:63:71:07:86:a6:b7:72:18:82:ea:ad:bf:7d:
         95:7b:b7:8e:56:09:3e:2e:ea:dc:fa:d7:fb:86:3a:5c:90:23:
         35:21:54:33:86:04:5a:fe:35:a2:d1:7a:e5:05:ab:20:d6:60:
         56:82:9e:74:fd:98:19:8b:87:38:20:47:c5:3b:5c:b4:12:11:
         2b:fb:fc:f7:f6:ab:0f:29:11:17:d0:54:ea:d7:4e:c7:4c:f8:
         d4:e1:05:16:dd:27:ef:16:46:65:2e:8e:b0:57:fa:16:86:39:
         2c:49:20:46:c3:79:d7:06:2b:f0:a4:be:f3:5a:74:8a:c5:2a:
         62:d5:76:bd:22:23:a0:34:5c:9c:46:fb:b2:d2:b4:e0:f8:39:
         c4:59:1c:bf:c0:ec:2e:0c:38:52:04:4f:24:78:14:7d:01:3d:
         16:86:04:9e:5f:f9:59:bb:cb:ed:0f:b1:b9:43:1c:e1:ac:cb:
         0d:55:1b:2c:5a:f2:fb:bf:4e:c3:a3:0e:cf:af:83:82:10:09:
         ee:b1:81:69:51:18:a2:60:a7:8f:3d:f0:ef:ab:fe:b4:99:4c:
         71:95:9e:c5:32:2a:e6:9b:78:7d:31:fe:3a:f2:04:bc:0f:c9:
         44:79:a7:96:9f:fc:0c:db:1e:5c:db:c1:06:e4:79:21:9a:01:
         5a:6a:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:45 2026 by rpki-client