Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
File:                     B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (raw, json)
Hash identifier:          QL3EiQeJFnSJIf0Rx7qnvW113xgGVL1BjiClR7EtsmI=
Subject key identifier:   F3:75:D2:55:3B:4B:BF:96:9E:C6:81:0E:16:3F:D0:1F:8A:93:B4:7B
Certificate issuer:       /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial:       02B2
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
Signing time:             Mon 21 Sep 2026 01:51:58 +0000
ROA not before:           Mon 21 Sep 2026 01:51:58 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     19905
IP address blocks:        119.15.0.0/22 maxlen: 24
                          119.15.4.0/22 maxlen: 24
                          119.15.8.0/24 maxlen: 24
                          119.15.9.0/24 maxlen: 24
                          119.15.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
                          rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
        Validity
            Not Before: Sep 21 01:51:58 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ab08dbe-1500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:74:f6:d5:57:66:9a:31:bd:7f:e9:af:38:
                    de:d4:72:0c:2d:b5:44:9e:4e:b1:56:5d:aa:71:e0:
                    dc:cf:b9:7f:24:03:f2:23:c7:06:48:da:7a:ce:5c:
                    7c:42:f9:6f:b3:4e:3e:5e:55:af:33:05:b8:c7:b4:
                    32:cc:75:0c:ad:6c:f0:93:20:4f:0b:ea:4a:2d:d6:
                    c0:de:43:56:77:ad:28:9d:be:95:68:16:54:d0:79:
                    5b:5b:a3:1d:53:ed:81:dc:20:ec:df:8e:55:72:53:
                    1e:79:d4:29:22:85:2d:b2:db:46:e5:21:16:53:f8:
                    43:18:61:39:37:90:bc:a1:09:7c:6b:2c:3c:f2:3f:
                    aa:2f:f0:e4:10:2b:95:1a:2b:38:2c:07:c0:22:bd:
                    1e:60:76:1e:7c:87:60:a2:a1:e8:1a:63:7c:e8:2d:
                    98:20:9d:17:d4:ec:41:c7:35:47:b8:2c:8c:5a:5d:
                    a4:e4:d3:83:ec:6b:b4:30:5b:c6:19:ac:03:9e:bd:
                    54:b8:e0:9c:f3:17:54:13:35:45:69:73:72:4f:58:
                    74:d7:fc:b1:4d:8a:10:82:de:1c:1f:c3:cf:77:64:
                    ec:6e:4e:1a:fc:69:51:c5:44:7c:c0:eb:47:57:18:
                    2b:ce:53:8b:ea:d6:f5:24:d3:cc:9f:6c:d0:62:cc:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:75:D2:55:3B:4B:BF:96:9E:C6:81:0E:16:3F:D0:1F:8A:93:B4:7B
            X509v3 Authority Key Identifier:
                keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.0.0-119.15.9.255
                  119.15.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:51:29:98:77:e1:1b:4c:f9:bf:1b:c0:b8:cb:d7:22:22:8f:
         7b:1d:6c:ae:3e:66:b7:62:29:50:67:b2:05:59:77:00:c7:b3:
         10:54:2d:19:06:86:9a:bb:e5:a0:01:aa:04:1a:32:87:b9:6f:
         75:a2:25:0a:1b:c6:fb:ba:19:af:7d:0f:02:00:cb:8b:35:17:
         30:34:4b:41:5b:2e:80:16:f7:e1:9a:fa:ff:e8:e9:09:5f:99:
         68:f0:42:d5:b1:b9:43:2a:3a:f5:23:53:29:05:6b:46:cb:1d:
         ae:80:1b:6e:40:b9:81:02:14:91:d1:d7:72:6f:19:25:b2:0a:
         69:f3:79:17:f4:cc:34:95:17:12:28:7f:d1:72:68:98:bb:ec:
         f3:9b:40:ff:95:58:97:fc:6b:ed:f8:98:11:6e:f3:4a:dc:9c:
         3a:33:45:bc:28:c7:db:61:41:e8:3f:90:e9:66:a5:ad:04:8f:
         d9:0e:de:bb:95:9f:d5:9e:13:b3:c3:9b:f0:97:15:4e:fb:bd:
         65:5c:0e:0a:7f:39:77:d3:0f:a8:c9:bf:be:34:7c:af:4d:17:
         d8:9d:0a:25:de:24:00:6d:37:82:dc:b4:f7:99:5e:8a:b6:cf:
         46:63:41:95:04:4e:47:6e:dd:c0:da:a0:47:f1:b5:5d:47:3f:
         ef:db:72:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:57 2026 by rpki-client