Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
File:                     15434774090211EEA1C06509C4F9AE02.roa (raw, json)
Hash identifier:          G1gWA3NuGTjrmLqdnFErd8lUrHVOe6ufs6NL/Fz9CCQ=
Subject key identifier:   1D:D4:FB:54:81:77:62:1D:57:54:EF:F8:E3:0B:5E:62:C1:27:3C:AB
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       08C8
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 22:43:42 +0000
ROA not before:           Tue 28 Jul 2026 22:43:42 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136166
IP address blocks:        129.227.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 28 22:43:42 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a69309e-0ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:05:54:c0:7a:9d:fc:e9:48:da:76:47:73:80:
                    04:9e:02:da:b8:2c:13:5d:7d:5b:30:26:0a:67:13:
                    8f:f5:3a:f2:97:16:2b:96:a5:55:92:2e:8a:df:07:
                    29:f3:5a:a7:8a:17:ab:77:08:2b:fa:69:7f:05:e3:
                    93:d8:74:15:59:69:90:75:fa:95:7b:5b:df:19:5a:
                    a0:76:71:14:24:9a:ae:40:6d:5b:61:23:07:6d:73:
                    74:f7:d9:98:76:92:62:2e:bb:f4:5c:f3:9f:af:00:
                    a2:69:dd:56:28:92:6c:63:fd:ca:9c:b6:6c:01:fe:
                    44:fc:94:c5:f8:93:8e:90:c2:21:2a:c2:da:e3:28:
                    40:89:bb:97:ef:6f:2c:d5:74:64:47:e6:1f:93:da:
                    12:31:bc:7f:89:07:ba:a2:a7:b1:3a:8d:27:b9:87:
                    39:d1:cf:57:58:22:0e:2e:61:fe:89:7f:76:4c:8d:
                    57:82:af:c4:44:96:04:31:b0:85:53:5d:77:57:a8:
                    ba:e3:2a:5e:e9:14:2b:4a:1e:89:b8:f3:a3:c0:98:
                    78:04:89:5e:37:e3:9c:f3:b3:3a:26:48:ac:a5:da:
                    be:97:3b:07:5c:0b:f6:ec:5e:c5:93:69:b0:15:39:
                    66:12:ff:a9:3f:56:a8:b5:0f:98:fa:6f:01:c5:3c:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D4:FB:54:81:77:62:1D:57:54:EF:F8:E3:0B:5E:62:C1:27:3C:AB
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:0f:7c:b8:a3:a7:d0:0e:23:53:e1:37:ca:dc:58:b6:7b:74:
         df:d1:03:ea:8f:ca:dc:cd:3b:5c:75:f3:6e:ad:9a:dc:22:11:
         7f:61:32:e2:c3:75:19:5f:d7:5a:19:81:9c:78:c0:88:9b:18:
         b6:fb:f3:29:f6:a5:03:00:0b:73:0d:95:f7:84:90:f1:9d:fe:
         2a:4d:99:20:f6:9f:9a:fb:2f:45:41:79:58:d5:70:f2:62:41:
         31:80:2e:fa:d3:6f:a4:3c:78:4f:b5:61:e1:b9:d9:26:6a:87:
         a5:c9:f4:38:2c:f9:cd:7b:f8:c6:89:09:19:a7:dd:84:43:e4:
         49:44:8e:ea:8c:d7:e4:4d:cc:ea:5f:e6:e5:29:2d:89:20:87:
         34:80:1e:27:55:c8:58:90:bd:3b:2d:a3:84:16:5e:20:ae:8e:
         c9:f2:a2:42:76:14:1a:90:b0:da:0c:e5:c0:64:0e:3c:5a:d4:
         c7:77:c9:77:88:4b:6f:3a:61:c6:6a:ec:68:5a:99:5d:b5:1b:
         bd:1f:2f:6d:23:73:0a:cc:f2:2c:55:09:50:ff:b0:0b:d8:9e:
         77:a7:7c:1b:ad:59:fa:22:ee:71:90:7d:14:6f:47:ba:62:0c:
         96:46:a1:89:e0:09:15:0f:35:82:4f:b8:7e:20:cd:85:ac:c1:
         4a:31:ae:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:10 2026 by rpki-client