Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa
File:                     4E9A620EAEBB11EA8A15501DC4F9AE02.roa (raw, json)
Hash identifier:          HNXckESs9p2B7hBXFGXSxheRpKaGOIpjirWPhDwh1Dg=
Subject key identifier:   CC:C5:EE:6D:FA:55:30:1E:17:B8:AE:0F:6D:1E:C6:F0:3B:80:AF:28
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BF6
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:33 +0000
ROA not before:           Mon 06 Jul 2026 15:11:33 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     15133
IP address blocks:        119.46.85.0/24 maxlen: 24
                          2001:fb0:109f:8005::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15350 (0x3bf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:33 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5a5-08b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:4d:1d:1d:a2:0b:24:aa:57:a7:c8:99:d4:
                    4b:4e:8a:e4:38:c0:b4:31:0a:42:8d:2f:89:e7:ee:
                    35:6e:8b:ac:09:dc:36:e6:ef:29:cb:49:19:84:87:
                    5f:78:ce:03:92:6e:1d:20:74:d6:13:2a:d1:34:5f:
                    2a:42:9c:0d:5f:08:16:3e:a7:72:88:35:7c:dc:a7:
                    1f:34:6a:d6:7d:42:49:70:52:c5:fa:67:3e:a1:97:
                    b5:08:09:af:34:26:c1:1d:80:61:0e:ca:48:9a:df:
                    30:fc:68:65:ee:c2:51:5c:4f:47:08:79:0c:12:68:
                    da:7a:ef:a0:ea:43:90:6e:4c:67:70:69:63:b0:ea:
                    b1:95:78:43:95:be:de:a8:2b:3c:73:01:7f:23:a2:
                    a2:9f:7f:1e:d2:ef:58:8f:8f:86:f1:a7:40:97:dd:
                    42:f7:02:b1:09:46:99:bb:23:59:35:60:e3:c0:5a:
                    78:18:7c:b6:31:30:d0:b3:12:13:0e:26:aa:8a:a9:
                    16:51:8c:7f:ef:ca:24:42:8e:4d:e4:dc:e7:89:bd:
                    fe:0f:56:44:c4:fb:0d:4c:62:f6:74:72:6d:cc:e2:
                    af:cf:77:31:63:03:e3:40:e4:e8:a3:d4:a6:ea:1a:
                    2d:06:4b:f7:08:4b:bd:56:92:00:ed:89:32:79:d7:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C5:EE:6D:FA:55:30:1E:17:B8:AE:0F:6D:1E:C6:F0:3B:80:AF:28
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.85.0/24
                IPv6:
                  2001:fb0:109f:8005::/64

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:34:ff:34:87:79:e6:18:82:a2:80:ae:fc:2b:4c:09:f7:
         cb:6f:0f:a4:77:60:d9:fc:77:f6:f6:2c:8a:07:36:d3:0c:a5:
         7e:b7:84:a7:d7:a9:e1:7b:e0:dc:ad:9b:87:b6:80:bf:e1:a3:
         5c:81:45:ba:4b:cb:5b:eb:2d:6e:fc:55:ca:22:d9:5a:70:10:
         28:65:05:52:31:a3:63:25:34:df:37:8b:fa:df:c4:cc:95:96:
         c1:1e:1e:23:dd:70:a4:d7:e3:26:b9:99:b2:8e:65:36:0c:62:
         c5:61:24:3a:37:f0:20:b3:54:2b:e9:cc:f8:d5:29:98:63:4e:
         cc:e2:a8:b8:eb:31:5d:ab:26:0a:07:b6:91:b2:fb:2b:25:94:
         88:e1:0b:65:66:24:e8:26:a4:93:c7:00:5c:f9:ff:f3:34:55:
         70:03:de:2b:16:6f:31:6e:95:db:91:f6:b6:c3:7c:62:9e:f1:
         e4:8c:6a:3f:cd:f3:26:87:59:45:1c:64:df:1f:97:a3:a8:3d:
         fe:1b:a2:8c:46:37:28:ab:88:ee:54:86:11:01:b3:a4:63:dc:
         90:ea:4a:12:0c:c9:93:61:2d:4b:12:c4:a2:bb:7f:dd:4f:ba:
         f8:36:b8:31:5e:d8:34:86:ce:24:4d:8f:05:ac:7e:cd:a1:e5:
         7e:7b:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:05 2026 by rpki-client