Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
File:                     FD6881C4438111ECBC63AC7BC4F9AE02.roa (raw, json)
Hash identifier:          Rbl2KzlFG4HRgcL2yyd8dnS5ncuLP5I8W/FqPOTuByw=
Subject key identifier:   CB:37:85:2B:56:85:89:EA:8F:C7:3F:5C:4A:D4:26:AF:DB:9E:80:74
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       082B
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:54:34 +0000
ROA not before:           Tue 11 Nov 2025 05:55:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     62610
IP address blocks:        129.227.143.0/24 maxlen: 24
                          156.59.73.0/24 maxlen: 24
                          156.59.123.0/24 maxlen: 24
                          156.59.146.0/24 maxlen: 24
                          156.59.184.0/24 maxlen: 24
                          162.128.82.0/24 maxlen: 24
                          162.128.83.0/24 maxlen: 24
                          162.128.84.0/24 maxlen: 24
                          162.128.85.0/24 maxlen: 24
                          162.128.86.0/24 maxlen: 24
                          162.128.87.0/24 maxlen: 24
                          162.128.88.0/24 maxlen: 24
                          162.128.90.0/24 maxlen: 24
                          162.128.91.0/24 maxlen: 24
                          162.128.92.0/24 maxlen: 24
                          162.128.93.0/24 maxlen: 24
                          162.128.94.0/24 maxlen: 24
                          162.128.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Nov 11 05:55:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48b69-b18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:cd:4b:2f:84:ea:23:b5:a2:6d:7f:c9:b5:
                    62:ca:0d:2b:ae:d5:34:a8:f5:c1:d2:22:2d:ba:d2:
                    b6:29:a8:27:ac:e7:8f:d0:1c:6b:66:f7:7b:dc:f1:
                    4e:11:96:d0:20:38:4c:91:1c:62:5b:5e:9f:47:71:
                    da:ef:df:97:af:40:ca:cf:72:b5:6c:42:6e:77:51:
                    1f:39:5d:d1:0d:65:b8:4e:a4:3a:6f:2c:7a:68:30:
                    a1:a1:fc:15:9c:18:d3:65:b6:99:06:64:1f:24:c4:
                    91:52:14:41:97:65:ec:72:36:9a:9c:34:de:e2:f7:
                    2d:f5:fb:e5:d1:7a:cc:a6:ae:7d:48:69:a2:79:8e:
                    6a:33:d5:5b:fe:1f:bb:53:eb:6a:e9:c3:41:46:62:
                    4e:a6:8e:04:a2:9a:f4:15:e7:2d:62:61:6e:68:11:
                    3c:c6:68:68:3c:ec:62:f0:54:04:ba:5d:80:b2:e1:
                    9d:c3:3f:99:d8:da:d3:f0:d5:01:39:1c:9f:89:7a:
                    77:11:9c:43:40:48:1b:97:51:4c:cf:36:3e:56:04:
                    9d:e0:69:13:7d:54:af:86:30:8b:f3:0f:4e:67:a5:
                    b7:54:ea:63:e4:ce:9f:ad:a7:d7:89:34:a9:ee:96:
                    b9:5c:a9:83:fb:f6:75:b5:b7:cd:5d:cd:b3:41:83:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:85:2B:56:85:89:EA:8F:C7:3F:5C:4A:D4:26:AF:DB:9E:80:74
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.143.0/24
                  156.59.73.0/24
                  156.59.123.0/24
                  156.59.146.0/24
                  156.59.184.0/24
                  162.128.82.0-162.128.88.255
                  162.128.90.0-162.128.95.255

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:8b:2e:e6:49:6f:33:d4:21:58:07:2d:e7:22:61:f2:21:
         cb:d4:21:18:3e:11:69:e6:09:29:25:b1:a1:87:4e:3a:6d:41:
         fd:37:64:c6:42:3d:de:67:ec:36:b2:2e:01:4c:35:4d:61:62:
         6a:bb:d2:76:fb:a2:21:e8:80:5d:84:7c:08:98:99:21:28:92:
         c2:02:06:57:23:d9:a2:2e:c5:ce:bd:f2:fe:61:d8:34:a3:49:
         79:e6:21:1a:44:59:8b:93:a9:83:d9:2b:2c:31:0f:5e:ae:c7:
         a3:d6:d8:12:74:c6:e6:67:af:1e:4e:4f:bf:93:f2:cf:ef:0b:
         32:46:c4:c2:3c:6e:77:36:35:05:f0:a9:f0:e5:51:26:80:2b:
         93:78:3a:b3:e4:6b:f7:0d:bf:31:a7:01:dd:aa:d6:e4:35:0c:
         23:cb:ba:82:73:8e:75:c4:06:0d:f3:6c:ea:35:3b:2f:69:e4:
         d5:1a:c1:a7:57:54:f4:0e:2e:a6:b7:20:b5:68:14:f3:ea:f5:
         cd:76:34:e0:2b:fa:37:89:14:1a:dd:64:ca:f0:e5:fb:5a:c0:
         18:ff:1e:24:ed:b5:12:4b:58:de:6f:68:b6:d5:54:80:5d:12:
         55:ed:5f:0b:1a:27:1f:97:43:0e:55:ca:da:f7:a3:41:3e:e8:
         7e:c4:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 04:33:46 2026 by rpki-client