Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D9D185C6D27A11F092DEA24AC4F9AE02.roa
File:                     D9D185C6D27A11F092DEA24AC4F9AE02.roa (raw, json)
Hash identifier:          hAsd4MgKrzzFojSm6DEKyVq+itBFW1idmKj+K2KrQmQ=
Subject key identifier:   4E:0D:A3:79:25:AE:F4:72:5F:B7:59:7E:E6:ED:B7:29:66:97:D9:28
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37CF
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D9D185C6D27A11F092DEA24AC4F9AE02.roa
Signing time:             Thu 16 Apr 2026 15:14:20 +0000
ROA not before:           Thu 16 Apr 2026 15:14:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136602
IP address blocks:        119.155.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14287 (0x37cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Apr 16 15:14:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e0fccc-846d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:32:ae:a9:17:c7:e5:3b:58:fa:c4:39:c6:
                    02:a2:69:06:a4:fa:20:e4:66:81:e8:da:7a:a5:c3:
                    b8:65:c4:a8:a0:68:0d:db:04:e0:96:c0:9c:db:ff:
                    fa:97:b5:e1:62:69:30:ab:b9:48:b8:7b:80:98:c6:
                    30:94:85:bf:ba:37:d7:1e:78:da:9a:ca:2f:6b:c5:
                    7f:6c:b3:6b:d8:48:be:e6:0c:92:3d:12:a0:e3:6a:
                    b0:fb:1f:42:39:11:03:fa:68:d7:47:a2:af:bf:d5:
                    43:4a:24:50:22:d9:04:5a:0f:ca:0f:ac:e8:8c:9f:
                    c5:37:32:01:2b:3e:b1:47:8b:82:ca:3d:a9:67:fe:
                    2a:89:85:94:e4:8b:78:42:08:74:37:75:ba:6d:33:
                    42:31:cc:ed:7c:06:28:eb:b0:97:2c:44:70:44:c3:
                    ca:13:08:e8:9c:61:50:d1:10:7e:10:a7:1c:46:fb:
                    ba:6e:07:60:5f:75:32:f8:d2:7c:9b:98:c5:f2:09:
                    f6:1d:b8:98:8f:a2:88:96:40:e5:ac:d0:7d:13:68:
                    5a:ae:8e:ae:dc:2b:c6:81:f7:5a:d0:dc:03:34:ca:
                    d7:e7:ed:ad:6b:93:ff:f4:08:64:e4:68:c9:fa:8f:
                    10:0d:77:c9:b7:b5:cf:2e:d0:88:1c:f8:b7:2f:35:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:A3:79:25:AE:F4:72:5F:B7:59:7E:E6:ED:B7:29:66:97:D9:28
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D9D185C6D27A11F092DEA24AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.155.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:de:00:f6:31:9a:6a:4a:75:36:2f:41:d0:39:a6:ab:34:60:
         67:3d:b3:f3:c9:96:6e:f3:29:58:e1:ec:90:84:9d:e4:39:b6:
         ee:61:00:d0:09:f9:83:9e:a1:87:f1:86:33:c0:5b:e0:bc:b6:
         70:74:1e:93:c8:1b:8b:83:c8:12:b4:a5:81:24:07:4a:85:90:
         b3:2b:cb:a6:50:63:40:b4:38:66:f1:f1:b2:c5:fb:dc:1d:a4:
         04:4a:19:31:06:17:84:08:56:95:b9:b6:ee:f2:8a:5b:8a:a2:
         6c:23:09:97:02:e5:d3:8c:d8:dc:88:a1:18:f5:d9:ae:bd:9f:
         07:0c:13:7a:08:41:94:bf:82:f3:db:04:d9:ca:4f:fe:52:51:
         5e:7c:2b:b0:2c:0d:d8:76:92:ef:bd:af:cf:4d:83:fc:f3:79:
         09:23:1e:32:c8:a2:0d:67:a8:87:6c:c0:d4:38:3a:7d:fd:27:
         75:64:97:db:9f:b8:a9:5b:46:64:46:b1:57:1f:3f:f4:2a:4e:
         d6:1e:b9:5c:31:c6:ee:d1:e3:4f:96:1d:91:49:e8:97:c8:77:
         71:f3:41:6e:63:c4:86:26:ae:c0:12:ed:f3:48:24:3b:ac:97:
         4e:70:b8:db:8e:ff:e1:94:5f:ba:70:40:5e:2c:e2:33:e5:94:
         ab:c8:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:08 2026 by rpki-client