Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/584506BE6AFA11F0B55F3536C4F9AE02.roa
File:                     584506BE6AFA11F0B55F3536C4F9AE02.roa (raw, json)
Hash identifier:          A/ZQCN98JGjqrAJqbFcdfQNx0O/EyAIhfhuR/Vi+Eek=
Subject key identifier:   52:26:C4:D3:3E:16:90:28:6B:65:E2:AB:78:B8:EE:1E:43:E0:8B:75
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       08C7
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/584506BE6AFA11F0B55F3536C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 22:43:40 +0000
ROA not before:           Tue 28 Jul 2026 22:43:40 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135377
IP address blocks:        129.227.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247 (0x8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 28 22:43:40 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a69309c-ddac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:24:aa:ad:bd:2b:f8:2e:49:08:22:92:e6:
                    1d:fa:60:78:d5:74:8c:03:3f:a2:ad:6c:78:5d:27:
                    b4:7b:b1:68:e5:1e:ee:69:64:59:a8:02:94:f5:85:
                    e1:e0:13:a4:8c:8b:1e:68:ca:de:22:2f:39:9e:fa:
                    91:7a:9e:ae:a4:b8:9d:4f:0d:d8:3d:d1:5a:3d:4d:
                    9b:51:b8:00:e0:3b:a4:4a:ed:7f:45:4a:fb:99:30:
                    fb:ed:0b:9f:b6:16:7b:21:d5:c0:7e:12:f4:77:25:
                    fe:f4:54:c9:5d:e3:bd:46:cf:83:07:71:03:8e:b0:
                    b4:57:ec:f6:db:8d:fd:ed:fa:7f:f3:29:56:a0:11:
                    2a:1a:e8:ee:e1:d4:a3:5c:ec:6b:a5:45:6d:82:3c:
                    64:52:a4:f0:20:12:3e:c2:e1:77:2e:c2:9d:de:34:
                    58:d3:08:f8:63:72:db:8c:af:ce:61:ea:36:97:92:
                    d4:cc:2d:5a:2a:f5:00:9c:e1:1d:ad:7b:65:af:08:
                    7b:4f:ca:06:c6:97:52:95:f8:3d:3d:86:15:4e:f3:
                    6c:75:4a:04:73:b1:d1:d6:90:a1:1c:b0:55:55:30:
                    bd:98:62:f8:b8:b3:72:d5:2d:9c:7d:a2:b6:20:d2:
                    6c:bc:da:48:1b:7e:f0:5f:57:ba:5c:8a:df:a2:41:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:26:C4:D3:3E:16:90:28:6B:65:E2:AB:78:B8:EE:1E:43:E0:8B:75
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/584506BE6AFA11F0B55F3536C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:ff:29:01:d9:15:24:70:81:9f:01:3b:6e:c7:62:a7:b4:
         9b:39:ec:cf:e9:cc:c8:d7:7a:0f:81:33:d5:01:b5:30:49:16:
         d2:fd:5f:ce:09:4c:d0:b3:88:69:74:07:ae:24:1d:81:f2:f8:
         71:1f:20:c5:ad:97:d7:ed:4d:d7:a5:d0:af:d1:7c:ad:eb:d7:
         48:d5:f9:c2:ee:52:2f:d4:31:29:a5:a8:04:b5:d2:53:bb:ff:
         c4:49:a0:21:65:99:da:1a:fa:45:e5:91:7a:77:33:06:17:29:
         a8:c9:69:80:c4:38:d5:90:6e:df:d3:77:bb:fb:41:2c:ad:24:
         b9:f7:6c:9e:4f:2f:bb:bc:ff:17:a4:95:4e:e0:6a:6a:fb:7e:
         c1:ff:af:0b:af:58:de:a4:af:5f:ea:b0:aa:97:fb:7f:11:04:
         e6:f9:57:c3:6f:dc:e1:18:ce:b0:98:da:cc:15:a2:49:43:c0:
         5a:c5:1f:7b:ec:d2:e8:10:b6:0b:d3:4e:2a:46:6c:0a:03:f6:
         a5:11:f4:15:b0:ad:b3:89:77:28:ab:03:3b:0f:bf:60:8d:c2:
         9b:37:8c:6d:1f:da:da:90:6b:bd:7a:55:29:88:a7:d9:f2:a1:
         24:b3:3f:82:b5:67:e4:78:6f:b7:b6:8b:5f:56:80:64:84:66:
         f1:28:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:17 2026 by rpki-client