Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa
File:                     15F254A8090211EEA1C06509C4F9AE02.roa (raw, json)
Hash identifier:          I/a3fxw/xnNebSv9Uo7B0A6DjmrZz7zmfH8nOiEwMdE=
Subject key identifier:   79:FE:B1:17:56:4F:24:EE:04:89:96:30:D3:1B:6C:A9:7E:AA:6B:D2
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0826
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:54:29 +0000
ROA not before:           Thu 24 Jul 2025 22:34:41 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4755
IP address blocks:        129.227.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086 (0x826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 24 22:34:41 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48b65-7834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:b3:94:74:6a:5b:15:f8:a7:c2:df:fa:b9:
                    b0:7a:89:73:26:72:15:e6:f0:ab:75:ba:80:3d:34:
                    18:8b:5c:3a:9b:ca:24:c1:2b:36:f8:77:af:dd:49:
                    e0:5d:35:36:a2:b6:a5:0d:02:b9:c6:b7:f7:4a:fe:
                    8c:d0:f8:76:e1:ca:a8:3d:e9:cf:07:bd:42:c0:73:
                    92:5b:2b:7e:f4:cb:8c:ec:cf:83:61:f9:06:d7:02:
                    2c:e2:35:07:81:eb:31:b7:b8:9c:3b:43:37:4b:f1:
                    7a:81:bf:ae:e2:8d:ae:76:f3:73:56:fc:9b:19:8e:
                    77:c5:08:04:59:9e:d0:32:df:e2:f8:c3:4d:5a:bb:
                    f7:46:e2:dc:de:62:37:6c:5a:a1:8b:f2:a9:eb:cc:
                    70:24:6b:62:fa:7c:2f:e2:fa:84:ca:6b:5a:3a:de:
                    02:0c:21:14:36:b0:f2:13:e0:a6:e1:95:b8:8a:2b:
                    4d:8f:2d:55:de:ea:1d:b9:e6:ab:8a:8f:a2:6f:fb:
                    d5:ac:6c:46:45:78:92:21:0f:24:37:e3:3b:e3:f5:
                    9c:62:dc:a9:35:0b:60:08:86:46:c0:64:c0:c9:32:
                    25:23:42:23:00:68:f5:58:3e:05:32:02:aa:79:cc:
                    48:c7:30:35:8b:77:83:d3:fa:ae:d3:94:e4:54:8e:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FE:B1:17:56:4F:24:EE:04:89:96:30:D3:1B:6C:A9:7E:AA:6B:D2
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/15F254A8090211EEA1C06509C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:42:b7:28:d9:48:dd:93:19:02:78:af:7d:1b:d7:54:fe:
         a7:fe:ab:89:c8:cf:7f:59:72:4a:d3:e5:3e:e0:fa:4f:f5:1d:
         8a:85:98:44:f9:3c:cd:a1:d6:e3:c2:6e:df:6a:bf:d4:2d:5b:
         be:f6:c0:b9:cb:81:cb:38:d2:01:71:af:48:a5:06:9c:36:cb:
         7d:76:c1:01:81:48:01:7f:94:04:7c:6c:5e:56:79:76:a1:86:
         81:c8:7a:32:b1:a2:06:be:b3:04:18:ab:73:ad:d0:e8:dc:d0:
         ca:63:41:ac:77:64:6c:27:20:ed:df:3e:5c:70:c6:bb:46:f5:
         67:86:e8:de:13:a5:df:3b:a2:c5:6d:84:90:4c:38:3b:91:61:
         a5:d4:77:b3:e3:15:4e:ee:2a:ed:0d:2d:6a:51:a7:3c:a8:8b:
         bb:9e:0d:00:fe:1d:a4:d9:bb:6f:09:da:07:13:46:7d:5e:0e:
         af:32:05:80:f8:86:fa:8a:5d:67:d6:50:ed:c4:86:b3:4d:1b:
         ef:7b:e7:8b:70:62:16:b5:96:b4:ec:c8:2f:bb:36:aa:13:0e:
         bc:d2:d1:16:07:44:75:19:53:ef:df:d4:1f:4e:c5:26:b3:1b:
         0c:f0:09:4a:e8:df:4a:60:a5:9b:0b:00:0e:28:4f:78:ba:50:
         e5:15:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:48 2026 by rpki-client