Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa
File:                     E7C4738EF69011F0944A82D5396F56BC.roa (raw, json)
Hash identifier:          tF/131xYyHzc8gJFmhoa0rwUFdP5Jq9YjbacChX+Fa8=
Subject key identifier:   48:CD:E1:77:B0:E0:F1:69:AF:A6:7C:2B:5E:A4:09:1E:EF:21:AD:5D
Certificate issuer:       /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial:       35
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa
Signing time:             Sun 01 Mar 2026 05:59:51 +0000
ROA not before:           Tue 17 Feb 2026 06:52:36 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     45432
IP address blocks:        119.151.124.0/23 maxlen: 24
                          119.151.126.0/23 maxlen: 24
                          119.151.140.0/23 maxlen: 24
                          119.151.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
                          rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
        Validity
            Not Before: Feb 17 06:52:36 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3d5d7-0c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:d6:6d:91:b9:99:67:b1:cc:f2:2c:02:58:
                    84:25:83:91:80:37:99:30:61:08:30:85:41:e0:90:
                    53:c7:98:54:bc:57:5c:a4:25:bf:1e:65:25:d2:a4:
                    a9:bf:66:9c:55:41:2c:06:57:12:91:99:be:24:3b:
                    96:84:1c:0f:ea:66:c8:42:7a:f2:13:12:3f:b6:71:
                    21:2d:2b:39:e0:71:9c:98:d4:46:e3:3b:f4:92:1a:
                    77:cf:d2:d3:2f:3b:09:82:20:70:43:0c:c3:f9:14:
                    81:78:d7:50:18:57:8e:4e:be:22:fa:bd:20:fd:9c:
                    7e:ae:7f:59:1f:ac:61:fb:cc:41:19:7f:0f:9b:06:
                    40:d1:46:be:f1:d2:59:0d:3d:27:1b:75:52:47:dd:
                    d6:73:d7:69:83:67:da:74:cc:0f:41:34:14:4a:fa:
                    da:22:e9:2f:47:91:7a:9a:1c:0f:e2:a3:d5:ff:5d:
                    fb:00:4a:3e:bf:c1:d5:08:85:d1:7f:87:59:62:b3:
                    84:55:c9:78:74:e2:5b:ca:a2:c7:a2:e7:83:06:50:
                    9d:23:ff:e3:b7:96:69:67:be:fa:10:e8:c8:98:bb:
                    6a:4c:a5:d9:79:43:6d:d9:d0:ea:e4:5d:16:46:05:
                    5f:ba:14:bb:19:4c:8d:64:eb:b7:ae:dc:a8:dd:8a:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CD:E1:77:B0:E0:F1:69:AF:A6:7C:2B:5E:A4:09:1E:EF:21:AD:5D
            X509v3 Authority Key Identifier:
                keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.151.124.0/22
                  119.151.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:4a:91:42:94:dd:b8:b9:e5:d8:35:e0:b9:a2:2f:2d:bb:
         9d:25:38:1f:e1:de:92:c7:99:9e:94:82:3f:1e:9f:a0:71:db:
         dc:67:cd:f7:f7:6c:fd:0c:f8:82:52:12:b6:3f:e4:40:8c:49:
         5d:8d:cd:24:16:aa:84:94:83:36:03:0c:a8:95:20:74:bb:76:
         b8:10:61:77:59:e0:2e:48:22:1e:7d:d2:ed:05:ae:d0:3a:62:
         c6:4b:08:69:3a:56:58:82:92:5f:80:4e:71:76:39:68:ae:69:
         b1:d2:60:5d:dd:4c:35:6c:8b:f2:15:14:c7:12:5b:8c:d5:51:
         81:84:0b:29:6f:d2:5e:c9:85:5b:fe:3e:cb:ea:40:0f:60:e4:
         73:ff:a1:37:0e:b5:1a:7e:a1:16:c6:96:c9:8b:65:36:e8:8e:
         e3:b7:43:c8:04:56:30:8c:e4:4c:df:99:5a:dd:ef:33:b4:ab:
         6c:69:c5:16:fc:7a:3f:11:3c:42:55:68:82:ad:69:6c:94:d2:
         16:b9:5c:c1:4e:30:b9:17:8c:90:c2:5d:78:c0:47:18:3e:ae:
         e9:54:61:84:64:c6:49:1a:49:c1:83:ae:ce:4a:4e:07:d9:ea:
         b5:bf:5d:e6:dc:4b:1a:e9:fe:e2:09:3d:e2:ae:bb:77:4c:db:
         23:20:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:34 2026 by rpki-client