Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa
File:                     505CFB7465D211EFB4348E63C4F9AE02.roa (raw, json)
Hash identifier:          AAXHRkLrHoJyCDkbsgHI2KwqLCN7VUz7VH0M3ar0Syw=
Subject key identifier:   98:C5:F1:43:86:4E:93:1E:21:55:4D:28:29:9D:7B:81:3D:F8:33:52
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       08CF
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 22:43:55 +0000
ROA not before:           Tue 28 Jul 2026 22:43:55 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     4229
IP address blocks:        162.128.0.0/23 maxlen: 23
                          162.128.2.0/23 maxlen: 24
                          162.128.41.0/24 maxlen: 24
                          162.128.42.0/24 maxlen: 24
                          162.128.226.0/24 maxlen: 24
                          162.128.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 28 22:43:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6930ab-e833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:81:e6:e3:73:36:12:a4:7e:9c:cf:3e:81:
                    cf:a6:9b:d8:69:53:30:a5:2c:ca:45:99:7f:38:86:
                    58:7d:e2:ed:e7:67:56:51:1e:e6:82:d8:b0:8e:c7:
                    48:df:1b:e3:4f:b7:2d:ac:e7:74:f0:2c:8c:02:d2:
                    8e:d1:60:0d:89:24:6f:5a:95:55:dc:a8:45:4f:a6:
                    a8:74:f3:8d:06:0d:c3:d3:37:99:f4:af:82:20:ef:
                    e0:ac:a8:c6:8f:2d:3e:5c:88:09:0c:40:98:a8:af:
                    c2:fb:14:1d:61:ed:1e:6c:52:0c:f3:c9:6d:e0:28:
                    40:be:59:d8:1b:cc:2e:77:df:3f:57:b4:5f:96:f5:
                    2d:bf:8e:c4:c8:cd:4d:e2:fb:d7:61:73:bd:77:3a:
                    50:4e:d7:31:7e:d2:ba:fa:b0:81:ca:50:23:10:3c:
                    8c:3c:3a:55:68:08:a4:8c:58:af:1c:be:30:10:21:
                    ac:d5:24:a7:86:08:42:ec:e6:d5:5f:11:b9:8e:74:
                    88:b1:0d:17:4a:2e:bd:b5:2a:13:2d:e0:b7:8c:78:
                    e7:d3:7d:36:43:64:38:09:3c:45:bf:0c:17:97:6c:
                    ba:a7:a8:9a:3f:54:a6:fb:7d:9e:6c:12:f0:03:02:
                    6c:03:29:73:38:e6:10:ce:ae:bc:fa:09:c9:d8:38:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C5:F1:43:86:4E:93:1E:21:55:4D:28:29:9D:7B:81:3D:F8:33:52
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.128.0.0/22
                  162.128.41.0-162.128.42.255
                  162.128.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:b5:42:de:bb:5d:d7:a7:ee:ae:1a:df:81:23:f7:1a:9e:
         25:02:60:0c:4e:b2:6d:8f:e3:9e:e7:cc:6c:8f:3b:a3:2c:08:
         49:bc:0c:03:8c:7c:c4:66:a8:b8:8c:fe:94:0d:20:17:8e:dc:
         2a:e4:4a:26:9a:a5:a3:f6:de:02:28:02:70:8f:53:96:91:7e:
         9b:2d:63:db:21:72:cd:0a:5c:a5:2e:8c:b9:c7:b4:a3:de:39:
         2b:63:47:aa:30:2b:14:aa:9e:e9:7a:5b:7c:bf:87:9c:34:3d:
         73:27:01:d6:56:2f:eb:48:5a:58:7e:98:83:da:e5:2c:8c:ce:
         67:fa:bc:16:02:47:ff:0c:22:d0:c5:21:b4:54:2f:24:04:94:
         8e:0b:a3:5d:88:d2:c0:07:76:c8:2a:4d:ea:c7:dd:e2:7c:62:
         38:50:07:5c:8f:de:9c:c5:a5:0e:ec:14:01:4e:63:a8:b7:40:
         97:71:1d:ef:ab:73:53:3c:0d:93:0b:47:e5:e5:f8:be:9b:c8:
         0f:5d:58:a3:c0:a8:3a:d7:37:ea:dc:2d:57:c9:ea:71:a4:17:
         0d:60:af:93:12:e1:5e:7b:03:88:6e:b1:70:50:99:8f:ce:57:
         3c:ac:45:0d:89:df:18:d2:00:ff:1a:24:b8:d8:49:9d:25:fa:
         09:36:9a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:22 2026 by rpki-client