Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
File:                     0BB5ECE8697611F18B2B119D7D47A888.roa (raw, json)
Hash identifier:          jFKWCgw2IaP+V8gXvqed4I97VaiNX5egdl68CteD0u4=
Subject key identifier:   94:70:C7:D2:82:FA:D0:42:C1:C6:3F:5C:7C:87:F8:7E:57:EA:C0:34
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       08CD
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
Signing time:             Tue 28 Jul 2026 22:43:52 +0000
ROA not before:           Tue 28 Jul 2026 22:43:52 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     29752
IP address blocks:        129.227.123.0/24 maxlen: 24
                          162.128.104.0/24 maxlen: 24
                          162.128.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253 (0x8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 28 22:43:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6930a7-df02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:e4:f6:02:ad:15:24:ac:63:1f:0c:df:75:
                    cb:ef:2c:e3:d4:b3:7a:38:fc:51:a7:e6:cf:3d:9c:
                    8a:7d:7b:f4:46:46:60:43:c5:75:e9:dc:30:76:cb:
                    a3:fe:04:5a:20:59:b5:73:dc:e7:59:77:17:5d:d2:
                    2c:15:ac:23:71:47:e8:31:e8:f3:df:7a:84:d2:bf:
                    95:c3:5a:54:12:91:64:0b:4b:b5:36:d5:1d:f5:6f:
                    79:a8:91:0e:9b:82:26:da:46:e9:23:e8:2f:30:67:
                    d7:b3:03:0b:25:67:7d:21:04:5b:d9:e0:51:c2:37:
                    bf:f1:9d:d4:da:cb:ae:f3:7b:3f:52:c4:53:f5:e6:
                    42:74:17:61:cf:6b:3e:56:d1:d0:a6:fd:ac:0c:86:
                    15:22:1d:62:ca:30:55:b0:1d:2d:73:a9:a2:a8:de:
                    26:ef:41:be:27:9d:61:22:c6:0e:f2:1f:a7:2a:2b:
                    05:1c:d1:0b:0b:48:e7:ec:b0:17:3f:0e:80:3b:9c:
                    30:97:37:ee:fa:dd:31:b3:43:94:83:de:df:b6:c3:
                    31:a7:45:df:41:8f:d0:b5:9a:71:fd:9c:eb:ce:54:
                    c0:32:a8:78:d8:5a:56:5b:c3:c2:a6:ee:a2:25:cf:
                    a9:35:32:af:b3:aa:75:46:ea:d0:6b:d7:9c:11:e9:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:70:C7:D2:82:FA:D0:42:C1:C6:3F:5C:7C:87:F8:7E:57:EA:C0:34
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.123.0/24
                  162.128.104.0/24
                  162.128.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:5e:29:f0:da:dc:11:5f:29:54:3b:28:8c:57:15:01:85:08:
         f3:63:8f:ef:c6:65:8f:90:a2:20:27:15:13:69:c4:0b:a8:63:
         25:f9:ed:1a:1d:b1:25:f2:b4:c4:38:24:8a:d5:6e:14:e5:aa:
         99:51:3f:da:bc:1a:21:4b:a8:87:ec:a0:4e:6b:c0:4e:8a:7f:
         bd:b2:35:a8:0c:64:1d:a9:ed:28:24:f1:62:54:7a:96:b6:d6:
         9f:eb:af:50:a7:fa:ca:c0:0e:e3:5d:24:60:58:79:92:52:21:
         0b:b6:91:2b:fa:35:f9:0d:2a:0d:38:bd:c5:b6:fe:5f:81:9f:
         85:71:ac:6f:16:7f:8d:ac:78:7a:19:87:af:18:fc:fa:20:a2:
         4e:00:7a:00:54:43:54:e2:31:c5:96:b3:fc:e8:95:27:ce:95:
         30:54:c9:b7:61:a7:b2:e5:10:77:e9:8f:7f:92:43:15:00:62:
         22:ba:3f:75:6e:3a:d3:e1:f9:aa:5a:85:94:03:ee:a2:b7:17:
         ef:34:64:47:c3:5b:01:89:0d:9b:0c:c6:62:cb:1f:79:37:b1:
         96:36:99:71:65:c1:f6:c6:c5:ea:08:7b:96:73:f9:19:93:05:
         d9:9d:90:7c:14:f6:ba:19:5e:09:51:91:2a:f9:ab:fb:aa:84:
         e0:40:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:54:11 2026 by rpki-client