Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
File:                     E206DF40E79011E699B81D0FC4F9AE02.roa (raw, json)
Hash identifier:          HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=
Subject key identifier:   2A:A0:95:15:07:66:BB:F1:6A:45:32:AE:EB:32:4A:34:B9:AB:8B:86
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1D99
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:27:18 +0000
ROA not before:           Tue 04 Nov 2025 15:00:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9387
IP address blocks:        119.73.14.0/24 maxlen: 24
                          119.73.15.0/24 maxlen: 24
                          119.73.32.0/24 maxlen: 24
                          119.73.33.0/24 maxlen: 24
                          119.73.34.0/24 maxlen: 24
                          119.73.35.0/24 maxlen: 24
                          119.73.36.0/24 maxlen: 24
                          119.73.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7577 (0x1d99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Nov  4 15:00:37 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48506-043d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:5b:c7:de:c0:41:a1:04:c7:f4:9f:92:e5:
                    61:a4:87:20:14:37:bf:3c:da:4b:78:49:2e:e1:52:
                    df:60:62:05:c8:bc:cd:22:0a:c5:ce:5d:aa:95:14:
                    7f:38:c7:6d:b8:0c:b9:4e:c1:d3:10:9b:95:2e:5a:
                    66:a4:9c:d8:02:c2:6d:57:a9:69:03:57:32:c5:b3:
                    f7:2b:57:19:f0:03:b2:92:9d:69:51:b0:a3:1f:7d:
                    5b:29:31:2c:69:0e:f1:4e:cd:55:63:a7:fb:e0:7e:
                    cc:1b:ca:34:3b:db:00:1e:af:f6:de:17:dc:d3:8d:
                    ea:09:a2:41:d1:38:33:00:ea:cc:24:3e:30:46:c4:
                    de:d5:84:d1:96:8f:44:cf:16:8f:8e:90:2a:8b:e2:
                    6f:cf:08:6b:48:d7:05:6a:da:9b:83:de:92:51:0e:
                    b2:ac:cc:f3:ac:14:27:17:3d:0d:bc:00:d3:42:c2:
                    88:38:82:66:11:54:fb:3a:a1:8b:96:b3:dd:ac:a5:
                    51:23:71:66:d3:8d:7d:1a:88:3c:99:5b:37:cf:a7:
                    8c:f0:42:6e:96:07:37:04:2e:43:27:02:cf:1f:be:
                    10:bd:75:fc:af:de:b0:32:49:3f:8d:07:88:fc:38:
                    35:5e:3f:6e:02:07:4e:df:a1:ea:4c:ad:65:15:fd:
                    24:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A0:95:15:07:66:BB:F1:6A:45:32:AE:EB:32:4A:34:B9:AB:8B:86
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.73.14.0/23
                  119.73.32.0-119.73.37.255

    Signature Algorithm: sha256WithRSAEncryption
         84:1b:1b:53:60:bd:be:47:4b:a8:48:d3:02:04:eb:95:da:45:
         55:67:66:b9:45:78:7b:9a:31:49:9c:8e:82:25:a0:54:76:12:
         c0:3c:b9:f5:95:d3:a7:3b:15:9a:48:06:b6:32:88:5d:4d:8d:
         fa:67:3d:84:48:c1:2d:7b:a9:2a:a5:7c:d6:4a:52:51:99:6c:
         7c:ca:60:25:f6:c8:35:d1:1c:09:5a:15:31:91:28:4d:32:da:
         9f:86:6c:7c:13:8f:b6:86:dc:45:8e:fd:4e:95:fb:83:29:c9:
         07:40:65:5f:a5:1a:1d:2e:6f:95:a9:16:1d:a4:f6:b9:21:f2:
         88:4a:c5:22:9d:19:5a:fd:f6:b0:59:ee:e7:c3:e4:fb:6a:22:
         96:a1:47:3a:ed:46:af:54:58:5c:b9:63:42:d8:76:c7:32:ce:
         cb:40:b7:30:b5:1b:1a:36:4f:ef:62:e5:45:7c:a6:fe:74:a1:
         96:25:c0:41:4f:1a:a2:da:75:dc:f3:07:f5:d1:79:a1:e2:28:
         8d:df:76:06:f6:c5:a7:39:ed:9b:06:1d:d9:a1:c4:3e:8a:e8:
         0d:69:fa:85:87:ce:38:a3:53:98:b4:dc:df:31:b1:62:18:43:
         3a:27:88:5d:8a:3f:cb:ea:53:9a:8d:9b:42:70:1e:31:87:90:
         f1:75:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:12 2026 by rpki-client