Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/584506BE6AFA11F0B55F3536C4F9AE02.roa
File:                     584506BE6AFA11F0B55F3536C4F9AE02.roa (raw, json)
Hash identifier:          rJtIFizn/sQTm217EeawbIANI0Uxj/WGOrOl2uJ5f2c=
Subject key identifier:   63:DE:0F:7F:AD:48:40:87:16:56:3F:8F:B0:54:A6:93:70:98:16:9D
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0748
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/584506BE6AFA11F0B55F3536C4F9AE02.roa
Signing time:             Sun 27 Jul 2025 14:59:50 +0000
ROA not before:           Sun 27 Jul 2025 14:59:50 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135377
IP address blocks:        129.227.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 27 14:59:50 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68863ee6-f7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:77:29:b3:81:40:63:9f:1f:58:4e:da:64:
                    60:ad:73:f8:b2:3d:74:c0:19:32:e2:b8:7e:63:d4:
                    af:9f:03:11:9e:c8:e1:f4:a3:3f:c4:7d:5a:73:77:
                    0e:ee:05:33:40:e1:2e:2a:ab:55:3e:cb:5a:db:8a:
                    56:fe:ac:39:81:a0:8c:42:3a:bb:ee:18:ee:9b:49:
                    f4:d2:bf:92:39:44:f4:44:6c:77:6f:c8:ce:85:b7:
                    29:0d:a6:61:da:4c:09:79:80:be:45:1c:8c:7d:b8:
                    f9:fd:7c:9e:ab:2f:2a:77:46:a1:84:7f:f9:32:b6:
                    af:66:ed:03:db:50:d2:1e:9a:41:10:c2:33:50:80:
                    44:4f:bb:b6:3d:76:06:32:30:6d:8e:e0:41:a4:f9:
                    d4:d4:fd:bf:a4:b7:f7:fb:05:3e:b0:74:ba:75:38:
                    c9:98:57:cb:f7:b0:ad:2c:40:a0:b3:b8:2b:b0:99:
                    99:f0:52:83:d1:e5:2c:9a:1b:1c:8b:de:47:f9:7a:
                    e9:95:b6:19:30:41:e8:7d:30:0a:4b:a8:24:28:02:
                    39:cd:ab:7f:c9:8e:87:f2:e5:51:d8:04:23:93:80:
                    6f:5b:86:b4:b7:23:7a:7e:01:18:28:47:8e:b1:b6:
                    aa:76:cf:c0:9c:ee:89:a0:8e:9d:64:01:d3:58:d0:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DE:0F:7F:AD:48:40:87:16:56:3F:8F:B0:54:A6:93:70:98:16:9D
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/584506BE6AFA11F0B55F3536C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:db:87:a5:28:99:b3:58:41:6d:ca:50:de:75:e8:97:fc:
         d3:95:e6:1c:0f:90:dd:9a:8f:c3:4b:59:7f:70:86:8b:91:98:
         ef:d0:1a:6c:ba:50:c6:15:37:2a:ff:73:39:91:9e:51:20:c2:
         92:59:73:05:b8:74:95:0f:40:1a:d6:24:3b:43:8d:66:fb:6f:
         54:60:b7:dd:a5:de:87:4e:e7:97:b9:89:9e:2f:03:ac:da:b9:
         33:f0:2d:97:58:ad:48:27:d9:c0:50:cb:b1:db:ae:87:7a:99:
         c3:52:9b:b2:1d:4a:dc:31:ef:ea:28:b6:08:eb:f3:77:66:24:
         cf:4f:b1:10:16:57:9b:2a:7f:a6:af:03:25:6e:9a:c2:e4:04:
         36:51:d6:1a:00:a1:94:60:bc:03:03:00:de:90:b9:58:8e:13:
         95:38:04:50:d9:0a:f4:e3:59:4e:9b:fe:a8:1d:e3:da:d3:ab:
         7c:35:cf:70:f1:eb:14:41:77:44:e3:a9:22:f3:0a:8e:59:0c:
         b1:b8:f5:30:94:f8:cf:32:e4:cd:28:e1:ba:46:16:2c:91:9b:
         70:42:03:78:ed:39:99:fb:c7:d8:f4:3b:37:c5:8c:af:8e:0b:
         b1:68:6c:c0:12:cc:14:25:45:8f:36:e5:a6:5b:e9:8e:6e:15:
         36:93:7e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:41:54 2025 by rpki-client