Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
File:                     15434774090211EEA1C06509C4F9AE02.roa (raw, json)
Hash identifier:          TJTe6tgUzGyLs9qs0NOqJwafzleo9nZn+ooC3NLooxI=
Subject key identifier:   CF:5D:AE:06:95:6C:CF:AB:B8:17:2D:F7:18:78:52:3D:C6:C8:B9:9A
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0822
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:54:26 +0000
ROA not before:           Thu 24 Jul 2025 22:34:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136166
IP address blocks:        129.227.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 24 22:34:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48b62-279a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:21:c0:1d:0b:47:b3:cf:83:ef:03:40:fa:
                    38:d6:32:3d:9b:dc:e6:c7:6d:c5:3f:e1:cf:fc:af:
                    fc:e4:de:fe:0b:5b:f7:48:0f:1d:9a:72:41:ff:be:
                    a3:06:71:21:d2:30:11:2c:65:f5:83:48:35:c8:95:
                    3a:d5:cb:9c:d7:a9:2e:11:19:78:2e:17:62:d6:4c:
                    c6:6c:3e:c0:7b:90:95:66:93:d7:b0:b6:99:15:47:
                    29:99:ad:8a:c3:14:79:da:f2:7c:8f:6b:9d:3f:4f:
                    66:47:19:15:37:1a:29:5b:4a:58:bd:b0:3b:2b:08:
                    62:04:87:75:7f:dd:27:3e:e0:6f:68:55:9c:b0:2d:
                    e9:e4:52:16:e2:01:ba:f2:0a:98:0a:2f:29:39:ff:
                    9b:dd:a8:84:2e:25:4f:43:f7:56:fb:27:88:b4:18:
                    b0:4a:f6:e7:7d:e0:bf:41:f6:d3:aa:ef:74:e9:55:
                    66:86:7f:73:78:a3:91:ec:58:26:ce:ae:5c:05:c7:
                    b3:df:d8:50:89:cf:17:60:9f:81:4a:90:97:51:58:
                    b7:7a:29:93:2c:30:59:2e:cb:40:d0:31:52:b1:e7:
                    32:2f:63:d4:fc:56:77:6f:97:7e:34:e9:53:18:47:
                    8b:8e:23:e3:b3:a6:1b:4a:7a:f4:a4:b6:70:30:8c:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:AE:06:95:6C:CF:AB:B8:17:2D:F7:18:78:52:3D:C6:C8:B9:9A
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15434774090211EEA1C06509C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:be:20:42:01:cb:e2:2f:9c:ad:7e:62:a8:27:b8:a7:01:
         70:26:1d:1a:19:26:74:c6:c0:44:49:33:e4:e7:31:66:2f:6c:
         12:ad:7d:fb:55:ff:7a:13:93:21:9b:a1:ad:d0:f6:e2:bc:ae:
         2c:e2:79:84:3f:93:48:8c:57:09:2b:05:fd:9c:19:0a:27:88:
         e9:6b:33:68:7f:7b:91:c2:1d:d0:98:82:f3:9b:18:04:5a:b6:
         3f:15:c5:49:31:02:fe:e1:6a:60:e8:78:af:39:9b:d0:2b:f1:
         4a:30:5a:5e:d8:ed:41:b8:54:df:b0:ef:7c:24:4a:aa:61:fc:
         8c:3a:3d:0e:8a:07:6b:48:b2:af:a6:a0:81:50:72:ba:46:9f:
         94:df:6e:f8:76:cf:e9:91:6d:8f:83:c4:50:da:b9:05:91:be:
         ac:08:f4:48:09:b6:95:07:92:38:85:bc:25:50:1d:ac:b7:cd:
         dc:3a:75:bb:93:3b:66:7d:69:48:0f:6f:52:50:81:05:1c:72:
         27:a8:c3:79:db:b2:83:ac:5c:b8:d1:57:07:47:30:c1:01:69:
         09:ed:2e:ff:32:fd:88:33:03:2d:38:54:06:13:9f:88:91:45:
         47:5f:4f:d1:17:84:09:d7:c5:89:47:63:c5:41:5d:6a:10:d5:
         4a:25:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:58:03 2026 by rpki-client