Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
File:                     B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (raw, json)
Hash identifier:          VvVjYiDQeO0/Kuu5dNnxQmNtzBeDEDxanFTxX0efrwo=
Subject key identifier:   02:5B:5F:3E:E8:5F:3B:8F:C4:72:48:99:42:2F:41:96:7C:9E:82:DF
Certificate issuer:       /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial:       0245
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:11:47 +0000
ROA not before:           Mon 27 Oct 2025 04:46:25 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        119.15.0.0/22 maxlen: 24
                          119.15.4.0/22 maxlen: 24
                          119.15.8.0/24 maxlen: 24
                          119.15.9.0/24 maxlen: 24
                          119.15.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
                          rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
        Validity
            Not Before: Oct 27 04:46:25 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46543-7175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:e0:b9:6b:64:27:9e:a0:e6:af:a3:d1:ea:
                    d6:0d:6c:69:4a:13:72:a3:7e:82:62:8f:6a:24:71:
                    e1:a9:14:22:42:f0:08:cf:2b:76:4c:3c:89:8d:55:
                    5a:13:b3:43:03:47:14:55:f2:8e:0a:85:6a:35:61:
                    83:79:49:d9:b1:e1:67:8b:6d:28:ad:c4:ca:7d:25:
                    2c:e9:4c:57:16:b0:2b:ab:56:ea:4a:e5:73:9e:68:
                    f8:b4:ff:98:c3:d1:a7:ff:7d:06:6e:bb:19:fa:b3:
                    49:d7:30:5a:36:74:db:ce:4c:39:0c:35:ee:d3:05:
                    6c:74:f6:dd:e3:b3:55:ba:a8:22:40:e8:c2:e2:74:
                    82:34:5c:3e:7e:84:92:97:c4:e1:73:d1:33:bd:94:
                    91:d6:11:d5:28:ae:2f:37:b1:a2:a5:9f:8f:72:13:
                    0d:9f:b3:44:49:52:6f:59:bb:d2:7e:20:6a:b1:84:
                    ad:5f:7c:39:dd:9d:64:72:ad:31:66:ae:8a:cc:f9:
                    32:b6:52:a7:b3:3d:ab:3b:99:55:8b:2c:9a:4c:d9:
                    09:6e:fb:15:f6:d2:cd:d7:48:80:d3:0c:ee:66:2d:
                    12:f3:ea:5a:0d:c8:05:6f:a5:76:a3:0d:34:7d:67:
                    ad:5f:2a:ee:cd:f8:5a:de:33:56:f4:f4:a9:79:5c:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5B:5F:3E:E8:5F:3B:8F:C4:72:48:99:42:2F:41:96:7C:9E:82:DF
            X509v3 Authority Key Identifier:
                keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.0.0-119.15.9.255
                  119.15.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:55:f7:3b:f2:b6:69:06:b7:db:da:5a:39:c7:fc:74:68:
         e2:17:ca:d8:c1:ac:41:f4:e9:ba:8f:f3:c1:43:a5:ba:f2:8a:
         dc:9f:bd:37:cc:77:ac:c1:e7:42:70:2f:df:42:e6:ff:5a:3a:
         21:95:95:88:75:48:69:06:68:04:0a:4f:8b:44:47:a1:c1:a9:
         f5:7d:09:9e:02:31:65:bb:92:9d:5f:80:78:78:87:52:44:ae:
         8e:4b:a0:42:9a:6e:3c:e8:2d:00:d0:97:ff:f5:21:cb:d7:a7:
         74:b6:b4:02:bc:81:0e:27:a7:b3:57:cd:3e:d9:2f:f9:fe:2e:
         08:6a:a4:73:20:3b:eb:a9:fe:9b:f4:83:ca:72:a4:09:ed:3e:
         9a:2a:6c:35:75:0f:26:45:66:7a:ae:88:09:e0:92:08:82:44:
         d7:2f:ba:ea:fb:50:56:d4:ef:05:4f:eb:b0:14:89:25:aa:65:
         59:3d:d4:10:90:88:c5:51:3b:9f:f8:86:92:c3:d8:ae:1d:0c:
         32:f5:03:81:6f:d6:2c:2d:78:81:a4:75:82:cb:93:34:46:36:
         14:f7:b8:cc:72:18:52:c2:7a:7b:a4:a7:65:48:79:67:c7:f6:
         11:9c:0e:3e:39:39:6c:30:6b:47:ac:84:c8:4c:cb:7e:21:6d:
         d9:f8:03:a8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD
NkM1QjhENkQwHhcNMjUxMDI3MDQ0NjI1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjU0My03MTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApP3guWtkJ56g5q+j0erWDWxpShNyo36CYo9qJHHhqRQiQvAIzyt2TDyJjVVa
E7NDA0cUVfKOCoVqNWGDeUnZseFni20orcTKfSUs6UxXFrArq1bqSuVznmj4tP+Y
w9Gn/30GbrsZ+rNJ1zBaNnTbzkw5DDXu0wVsdPbd47NVuqgiQOjC4nSCNFw+foSS
l8Thc9EzvZSR1hHVKK4vN7GipZ+PchMNn7NESVJvWbvSfiBqsYStX3w53Z1kcq0x
Zq6KzPkytlKnsz2rO5lViyyaTNkJbvsV9tLN10iA0wzuZi0S8+paDcgFb6V2ow00
fWetXyruzfha3jNW9PSpeVxFRQIDAQABo4ICbTCCAmkwHQYDVR0OBBYEFAJbXz7o
XzuPxHJImUIvQZZ8noLfMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5
MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODY0QTcvQzgwNTVGRDZDOTI1MTFFRDgwOTM2MTQ5QzRGOUFFMDIvQjM0RDFBMjZG
NkM4MTFFRUJDNEJFMDBCQzRGOUFFMDIucm9hMCwGCCsGAQUFBwEHAQH/BB0wGzAZ
BAIAATATMAsDAwB3DwMEAXcPCAMEAHcPDTANBgkqhkiG9w0BAQsFAAOCAQEAHM1V
9zvytmkGt9vaWjnH/HRo4hfK2MGsQfTpuo/zwUOluvKK3J+9N8x3rMHnQnAv30Lm
/1o6IZWViHVIaQZoBApPi0RHocGp9X0JngIxZbuSnV+AeHiHUkSujkugQppuPOgt
ANCX//Uhy9endLa0AryBDiens1fNPtkv+f4uCGqkcyA766n+m/SDynKkCe0+mips
NXUPJkVmeq6ICeCSCIJE1y+66vtQVtTvBU/rsBSJJaplWT3UEJCIxVE7n/iGksPY
rh0MMvUDgW/WLC14gaR1gsuTNEY2FPe4zHIYUsJ6e6SnZUh5Z8f2EZwOPjk5bDBr
R6yEyEzLfiFt2fgDqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:19 2026 by rpki-client