Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
File:                     0BB5ECE8697611F18B2B119D7D47A888.roa (raw, json)
Hash identifier:          sc6HBlpraUzrOjX9zc23mCVsJdecicAdigVC/k00hdc=
Subject key identifier:   F8:26:F1:5D:20:B7:6B:21:2D:05:B3:EC:8B:81:B2:7C:51:B7:FA:85
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       089A
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa
Signing time:             Mon 22 Jun 2026 07:15:08 +0000
ROA not before:           Mon 22 Jun 2026 07:15:08 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     29752
IP address blocks:        129.227.123.0/24 maxlen: 24
                          162.128.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 15:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jun 22 07:15:08 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a38e0fc-384d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:b1:c6:b4:50:a8:6e:3f:ed:40:05:c3:94:
                    f1:75:08:ac:77:50:99:08:da:57:49:08:43:0d:58:
                    db:a2:bc:16:7e:5b:55:56:e4:5b:b2:8f:8c:04:cb:
                    fa:6b:76:e2:58:4b:89:b4:36:d8:89:ce:7c:07:55:
                    4c:c6:e9:d6:5b:b9:30:64:a3:e2:b9:ec:f1:87:8d:
                    c2:d2:4f:d3:47:12:ca:e9:43:30:b8:77:34:9a:c8:
                    43:f8:a7:20:bf:d8:65:76:1b:11:4d:af:ec:be:de:
                    80:9e:e0:81:f2:0f:59:a1:e8:6e:c5:48:d5:8e:dc:
                    c9:c0:3d:50:7e:1b:f5:1e:f0:35:e0:a2:74:23:8e:
                    d5:45:5c:0a:7f:42:01:2b:f4:b3:85:ec:0f:b5:39:
                    3f:59:55:76:c4:1b:75:d0:e1:51:2d:70:f7:d7:57:
                    a5:55:02:14:54:9f:f6:2f:3c:88:68:35:63:6d:ed:
                    f3:3e:37:a8:3f:d9:10:29:f1:81:16:be:8c:9a:5e:
                    f4:d1:44:5d:0d:8b:e8:e7:20:da:4f:e2:96:eb:59:
                    dd:3b:57:d9:0a:83:ae:4c:9d:21:00:b1:dd:f1:f5:
                    89:96:9e:50:a0:be:e8:d0:de:95:bb:54:eb:42:24:
                    ff:23:7f:8c:63:dd:9c:85:ca:52:b1:c8:19:e5:d9:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:26:F1:5D:20:B7:6B:21:2D:05:B3:EC:8B:81:B2:7C:51:B7:FA:85
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0BB5ECE8697611F18B2B119D7D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.123.0/24
                  162.128.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:44:e0:20:ea:f3:64:c9:e0:64:35:16:51:db:8e:59:e8:90:
         73:46:03:02:1d:2c:19:ff:7c:c5:d6:b4:2b:c5:e2:78:ec:50:
         fb:81:dd:fd:3a:51:d2:81:00:cf:53:66:71:84:90:8d:71:de:
         6a:20:e3:93:04:1e:72:83:30:27:a8:c1:77:fc:be:61:25:e9:
         69:79:d8:37:84:1d:ec:65:8f:d1:63:43:a3:b2:67:da:80:84:
         1a:a7:9b:34:e6:8f:8d:5d:68:06:91:03:ae:1a:8a:4d:42:d1:
         da:00:c8:3f:fb:39:87:29:ea:72:52:f8:e5:f9:03:d4:72:3d:
         40:6d:d0:ec:83:9a:55:0f:5f:16:21:6f:e9:7a:55:39:ea:3f:
         66:57:91:1a:23:fa:d3:71:c8:08:c4:33:50:46:1f:16:00:b4:
         07:89:bb:61:68:46:bd:b8:0b:09:b2:72:65:13:b9:3b:9a:0e:
         30:8e:9c:0b:af:07:29:98:0e:51:31:e5:c2:d1:93:62:72:99:
         18:fb:01:1d:c7:13:0d:ae:1a:7f:8a:e4:39:ac:e3:fc:39:31:
         87:25:f6:a1:d5:7d:56:07:0c:d9:22:12:91:65:51:9e:ef:e5:
         cf:25:ec:f6:2c:82:19:6f:1b:27:79:47:cd:03:60:6a:a4:c8:
         14:49:e3:13
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE
RTA3MkI3RjMwHhcNMjYwNjIyMDcxNTA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM4ZTBmYy0zODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqsyxxrRQqG4/7UAFw5TxdQisd1CZCNpXSQhDDVjborwWfltVVuRbso+MBMv6
a3biWEuJtDbYic58B1VMxunWW7kwZKPiuezxh43C0k/TRxLK6UMwuHc0mshD+Kcg
v9hldhsRTa/svt6AnuCB8g9ZoehuxUjVjtzJwD1Qfhv1HvA14KJ0I47VRVwKf0IB
K/SzhewPtTk/WVV2xBt10OFRLXD311elVQIUVJ/2LzyIaDVjbe3zPjeoP9kQKfGB
Fr6Mml700URdDYvo5yDaT+KW61ndO1fZCoOuTJ0hALHd8fWJlp5QoL7o0N6Vu1Tr
QiT/I3+MY92chcpSscgZ5dmuvwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPgm8V0g
t2shLQWz7IuBsnxRt/qFMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvMEJCNUVDRTg2
OTc2MTFGMThCMkIxMTlEN0Q0N0E4ODgucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAgeN7AwQAooBoMA0GCSqGSIb3DQEBCwUAA4IBAQCaROAg6vNkyeBk
NRZR245Z6JBzRgMCHSwZ/3zF1rQrxeJ47FD7gd39OlHSgQDPU2ZxhJCNcd5qIOOT
BB5ygzAnqMF3/L5hJelpedg3hB3sZY/RY0OjsmfagIQap5s05o+NXWgGkQOuGopN
QtHaAMg/+zmHKepyUvjl+QPUcj1AbdDsg5pVD18WIW/pelU56j9mV5EaI/rTccgI
xDNQRh8WALQHibthaEa9uAsJsnJlE7k7mg4wjpwLrwcpmA5RMeXC0ZNicpkY+wEd
xxMNrhp/iuQ5rOP8OTGHJfah1X1WBwzZIhKRZVGe7+XPJez2LIIZbxsneUfNA2Bq
pMgUSeMT
-----END CERTIFICATE-----
Generated at Wed Jul 1 02:14:18 2026 by rpki-client