Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa
File:                     A310F2FC8AB811EA9F89B54EC4F9AE02.roa (raw, json)
Hash identifier:          fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=
Subject key identifier:   8C:94:4F:F9:22:C6:FE:50:C4:22:03:8C:1F:C9:E2:9F:D2:0A:2F:F3
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1D8E
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:27:08 +0000
ROA not before:           Tue 04 Nov 2025 15:00:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132788
IP address blocks:        119.30.80.0/20 maxlen: 20
                          119.30.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7566 (0x1d8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Nov  4 15:00:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a484fc-877b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:30:48:3e:aa:93:b9:30:e3:e3:52:d9:bf:ef:
                    93:8c:13:31:d7:cd:3e:cc:9b:59:40:65:34:9c:06:
                    10:63:2d:12:50:0f:a9:62:81:ff:2a:74:eb:76:2c:
                    79:65:b4:dd:e9:df:df:3e:0b:7a:e6:b0:d8:91:22:
                    a5:3e:01:15:c9:1f:59:3f:10:8d:fb:e5:62:9f:a6:
                    a8:8d:b2:20:3e:e1:09:c1:24:e3:a8:ea:be:63:0a:
                    38:be:f3:f0:ef:32:e3:8a:84:c1:9a:a1:9d:5b:3a:
                    47:ba:f1:38:a2:64:40:9c:f2:53:ea:b4:bf:e5:1b:
                    f8:24:b3:48:37:1c:e3:bd:5f:94:9a:42:44:51:91:
                    66:3e:3a:21:41:e5:00:d8:d6:53:f4:67:60:f9:d9:
                    20:b4:dc:0a:c6:a8:43:aa:7a:37:34:0c:4c:ab:e4:
                    a5:35:b7:7d:73:0a:7d:1d:37:79:b3:1e:98:da:5c:
                    24:50:39:9b:5b:26:e6:a9:60:97:5a:73:a2:87:dc:
                    2e:05:e3:1c:8e:bb:af:7d:df:3a:ed:e5:98:5b:a8:
                    da:9b:fc:41:24:13:5a:e3:4d:d8:2c:5f:02:e1:98:
                    c1:3d:5e:82:56:62:bb:f1:cb:0f:92:4a:39:e7:30:
                    77:7b:2a:c5:1c:e1:d0:25:99:5b:09:ea:66:66:b7:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:94:4F:F9:22:C6:FE:50:C4:22:03:8C:1F:C9:E2:9F:D2:0A:2F:F3
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:7e:2a:70:01:f0:ec:11:04:05:07:97:ee:2d:ca:d1:a0:85:
         40:ca:ee:84:9e:db:79:cb:80:fd:de:82:24:9d:89:04:2f:5d:
         1c:0f:c4:9d:f7:39:75:e6:3f:93:ef:d6:c1:b2:65:2c:85:92:
         46:f4:20:d8:b6:f7:8d:06:cb:03:6c:bf:ae:e1:2d:9a:2a:92:
         75:21:6b:b8:c3:b5:a6:7e:87:11:77:a1:fd:e3:c2:6b:2d:11:
         02:6e:53:48:27:9d:cf:73:97:13:37:59:08:0f:3e:de:ac:20:
         a1:9e:65:21:d8:f9:2a:df:47:b3:99:4c:cf:de:06:d5:08:54:
         d9:74:1c:79:62:4f:c9:bc:d4:68:5b:7d:3d:0d:44:ec:78:da:
         7b:5b:bf:06:08:35:a2:31:fb:c7:af:36:c6:6d:bb:99:bf:81:
         f8:1f:da:da:19:c5:98:fe:dc:9f:c4:d8:6e:a2:d6:3a:b3:22:
         a6:44:77:01:ad:b2:b3:16:f6:6a:75:c4:7c:2a:63:24:66:a5:
         16:5f:3d:db:79:23:ba:8a:ed:e3:97:f6:1a:19:be:fa:e6:4b:
         4b:9b:ae:bc:35:c6:ee:47:d3:3f:74:70:0b:23:ec:d7:57:bd:
         1a:40:f6:d3:d7:35:9f:f9:43:e6:02:9e:f7:cf:f4:2a:3d:58:
         b4:db:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:21 2026 by rpki-client