Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/168FD534090211EEA1C06509C4F9AE02.roa
File:                     168FD534090211EEA1C06509C4F9AE02.roa (raw, json)
Hash identifier:          LsnwlK7DefLtSS/BzYkBKwSgqLJRLWbsRQykrYnBnjc=
Subject key identifier:   17:B1:D9:47:A0:46:57:8B:D0:7B:79:F1:52:5F:32:35:D3:36:BA:71
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       08D3
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/168FD534090211EEA1C06509C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 22:44:02 +0000
ROA not before:           Tue 28 Jul 2026 22:44:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        129.227.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259 (0x8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 28 22:44:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6930b2-4617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:23:81:93:5f:7a:6f:8a:43:bf:0d:72:ed:
                    75:aa:fb:3a:c0:7e:ef:39:96:37:4e:f3:50:b7:d7:
                    11:f9:d1:d4:96:e3:76:b6:9c:8a:20:4a:51:32:ff:
                    76:62:a6:50:79:10:18:3b:f8:18:1e:88:c8:ee:b6:
                    8d:a8:44:e8:ac:ac:6d:ae:14:d7:ee:5a:33:7e:f0:
                    42:07:66:15:3a:45:90:41:83:ef:40:51:06:a0:1a:
                    a0:fc:7a:5b:e1:c1:f6:ce:15:d6:25:52:16:ff:6a:
                    2b:78:f9:cf:cd:f1:ec:db:fb:69:cf:3f:a0:95:e1:
                    72:ab:44:e6:ac:65:5c:75:79:c0:f8:b7:51:06:48:
                    74:03:8f:03:29:2f:38:a4:5f:01:c6:dc:44:72:7f:
                    59:0c:cc:94:2a:a4:ec:ca:ce:67:9f:08:e2:b0:42:
                    c7:40:7c:3b:10:c9:c6:c5:5a:d7:4c:44:bc:63:3e:
                    38:46:fa:91:2d:05:dc:00:5c:f9:fc:2b:e4:80:21:
                    42:07:89:4f:74:63:b0:6a:d2:9f:95:44:c6:03:ae:
                    95:1a:63:99:2a:c3:d5:6f:76:3c:f4:86:97:4f:79:
                    7a:d0:a1:9d:bc:4e:e6:3c:97:5f:f0:a0:e9:4a:8f:
                    f6:92:f2:79:db:b0:e7:82:c4:a6:9d:d4:69:b7:14:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B1:D9:47:A0:46:57:8B:D0:7B:79:F1:52:5F:32:35:D3:36:BA:71
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/168FD534090211EEA1C06509C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:45:63:d3:78:49:24:83:09:80:ac:a8:b2:13:62:2a:6e:00:
         8a:04:64:10:86:34:1d:c2:12:e2:92:d6:8d:56:63:ff:61:e7:
         ef:c5:5c:2a:92:bd:72:af:b7:e8:41:d3:5a:c6:ae:af:72:57:
         e6:7b:cb:b3:75:78:39:25:fe:c2:b1:ca:ae:a2:61:46:31:a7:
         6d:03:76:f3:b4:78:c8:52:8e:4f:30:a9:15:84:71:0f:2b:76:
         cc:0e:78:47:a0:a0:d5:49:47:dc:e0:c4:82:9c:8f:07:0c:e9:
         de:a7:01:52:e6:cd:3a:48:8c:8f:23:fb:63:03:87:49:a0:e1:
         27:40:4e:6d:34:ef:6c:d1:a8:fa:34:ce:fa:fd:96:02:37:e9:
         91:f8:cf:11:3f:6d:ef:98:1f:f0:18:43:08:c1:1a:a9:cb:99:
         a7:53:15:4f:ea:d7:98:c5:fb:b2:ed:49:b1:90:4e:c1:35:1e:
         0b:35:8c:47:a3:b1:54:f5:ce:8b:0e:f9:44:94:35:29:a9:04:
         19:56:b6:af:f5:a9:02:fc:96:05:3c:b1:3c:5c:64:b3:5b:b0:
         a1:eb:f3:b3:b8:36:6c:6c:96:39:e0:28:3f:02:55:46:07:a7:
         66:62:f3:8d:65:68:99:8d:94:bd:e2:09:61:d4:56:ff:1e:2f:
         7a:c3:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:36 2026 by rpki-client