Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/D97BFEC0175911EC87322F85C4F9AE02.roa
File:                     D97BFEC0175911EC87322F85C4F9AE02.roa (raw, json)
Hash identifier:          W217Cvl+a3RS3snx4LYy35dWortZRD2tZixavhdLGx8=
Subject key identifier:   73:03:FB:98:95:87:19:AA:83:FA:32:64:6F:61:BC:E5:59:E9:CB:25
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       068A
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/D97BFEC0175911EC87322F85C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:06 +0000
ROA not before:           Sun 03 Aug 2025 00:06:20 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132581
IP address blocks:        119.225.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:20 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48752-ed64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:15:b4:c8:1f:6b:7f:8b:e3:10:e1:95:54:
                    3b:32:90:dd:37:06:64:5b:ab:cd:10:5f:b0:c9:7a:
                    fa:a6:12:bc:e6:4a:be:b6:2d:4a:8e:6d:68:2e:c9:
                    c2:fb:0f:2a:88:17:88:24:2c:3c:f5:e5:c4:b8:83:
                    40:0b:0b:9c:26:ea:5b:c0:fd:5f:14:1e:19:54:19:
                    0c:ab:b6:a0:11:4e:e3:32:a5:40:c9:29:53:11:0f:
                    eb:2a:2c:1f:35:fd:93:ad:c5:b0:1d:f1:03:ff:d7:
                    1b:8a:1f:40:c4:8d:9c:0e:88:4f:34:37:19:be:03:
                    0c:80:81:c8:64:1f:6a:1a:d3:c8:ef:89:4f:c2:1f:
                    c3:c2:aa:d6:84:80:7d:5c:bf:e4:4f:30:b1:34:cc:
                    20:28:33:d0:71:e4:20:02:57:d4:d0:85:63:60:3c:
                    49:fc:05:e3:e4:a6:3d:a6:85:3d:e1:af:f8:80:90:
                    a6:58:53:a6:db:f7:01:6a:b9:f9:16:f3:73:18:cc:
                    57:7e:25:da:0b:cd:c7:df:f3:36:bc:05:fa:b2:65:
                    82:ff:9f:69:90:c6:db:26:8b:b6:ca:1a:cf:a4:e8:
                    1e:d6:27:a7:19:79:f2:f6:bd:4b:58:a0:cc:54:e0:
                    09:93:7c:42:9c:2e:ba:e5:b2:cc:e4:05:ac:26:58:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:03:FB:98:95:87:19:AA:83:FA:32:64:6F:61:BC:E5:59:E9:CB:25
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/D97BFEC0175911EC87322F85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.225.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:d1:31:c4:7f:1a:33:96:da:71:1d:7c:84:d5:2a:10:ec:
         26:3f:e1:ba:9c:6f:f8:e5:51:40:c1:c7:19:85:82:fc:ba:7d:
         fb:66:51:e5:ba:3e:2c:46:0e:d6:0e:9a:ce:2b:95:57:aa:d7:
         65:18:16:79:10:0d:d0:e9:24:ca:09:5e:3e:41:1a:ed:c8:59:
         93:27:6d:21:49:b2:34:7c:d5:61:c1:72:ed:03:f2:7a:cb:38:
         75:34:f3:0b:1c:d6:a0:da:d2:29:fa:72:1a:86:29:d9:6f:8b:
         6b:5b:c1:d7:b7:92:68:e1:49:59:f5:12:7d:28:83:51:0b:8a:
         3f:29:67:40:86:e6:2a:9c:4d:2f:32:04:a2:f9:47:39:ce:e2:
         3b:8e:c0:a4:7f:82:37:8b:65:d7:dc:d3:b4:fb:17:75:2f:68:
         6d:f2:e5:09:4f:67:c0:67:0f:cc:3d:6c:49:83:5d:2b:d9:a2:
         67:21:37:8f:c6:4d:6e:b8:dc:36:24:22:bd:a0:2a:ec:8e:07:
         02:80:57:2f:1e:8c:a8:be:3f:d2:72:79:e5:ca:eb:3e:76:b7:
         67:13:c9:65:2b:e5:82:f5:4d:bf:47:f3:d2:6e:10:4f:b2:5e:
         ca:54:7c:57:79:d2:74:e2:40:6b:d7:6e:84:20:b5:cf:d6:68:
         ac:07:d5:7c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjUwODAzMDAwNjIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODc1Mi1lZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpEVtMgfa3+L4xDhlVQ7MpDdNwZkW6vNEF+wyXr6phK85kq+ti1Kjm1oLsnC
+w8qiBeIJCw89eXEuINACwucJupbwP1fFB4ZVBkMq7agEU7jMqVAySlTEQ/rKiwf
Nf2TrcWwHfED/9cbih9AxI2cDohPNDcZvgMMgIHIZB9qGtPI74lPwh/DwqrWhIB9
XL/kTzCxNMwgKDPQceQgAlfU0IVjYDxJ/AXj5KY9poU94a/4gJCmWFOm2/cBarn5
FvNzGMxXfiXaC83H3/M2vAX6smWC/59pkMbbJou2yhrPpOge1ienGXny9r1LWKDM
VOAJk3xCnC665bLM5AWsJlg7uwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHMD+5iV
hxmqg/oyZG9hvOVZ6cslMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvRDk3QkZFQzAx
NzU5MTFFQzg3MzIyRjg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAd+GBMA0GCSqGSIb3DQEBCwUAA4IBAQBJbdExxH8aM5bacR18hNUq
EOwmP+G6nG/45VFAwccZhYL8un37ZlHluj4sRg7WDprOK5VXqtdlGBZ5EA3Q6STK
CV4+QRrtyFmTJ20hSbI0fNVhwXLtA/J6yzh1NPMLHNag2tIp+nIahinZb4trW8HX
t5Jo4UlZ9RJ9KINRC4o/KWdAhuYqnE0vMgSi+Uc5zuI7jsCkf4I3i2XX3NO0+xd1
L2ht8uUJT2fAZw/MPWxJg10r2aJnITePxk1uuNw2JCK9oCrsjgcCgFcvHoyovj/S
cnnlyus+drdnE8llK+WC9U2/R/PSbhBPsl7KVHxXedJ04kBr126EILXP1misB9V8
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:55 2026 by rpki-client