Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/119B53BA7C2B11F182BB7F515CA30FBC.roa
File:                     119B53BA7C2B11F182BB7F515CA30FBC.roa (raw, json)
Hash identifier:          Mr1FD25aFAgVJHv2hQSYzc14gyYsI3zGy2m0LXVcbAo=
Subject key identifier:   67:A8:A9:7B:65:5F:15:1D:5C:46:87:B3:D2:6D:CF:66:3E:C3:81:C2
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       1157
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/119B53BA7C2B11F182BB7F515CA30FBC.roa
Signing time:             Fri 10 Jul 2026 06:46:25 +0000
ROA not before:           Fri 10 Jul 2026 06:46:25 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132203
IP address blocks:        43.151.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 17:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4439 (0x1157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Jul 10 06:46:25 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a509540-4cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:c2:e2:cf:ad:97:69:66:0a:5f:96:f3:f0:
                    2d:3a:89:6b:fd:29:6c:73:ea:af:16:ae:71:19:b1:
                    dc:0c:56:64:95:ac:f9:fe:1a:9e:13:58:78:58:7e:
                    17:4f:85:0c:3b:fa:e0:8d:3d:e9:2a:90:c2:9d:7c:
                    cf:7b:f5:db:c9:36:31:35:74:c2:6e:be:d3:06:f8:
                    c9:83:d6:e4:a0:ad:44:f4:a9:6b:7c:e2:be:dd:30:
                    82:6c:64:83:67:fb:7a:72:11:91:c0:a9:8d:1d:06:
                    af:bd:dd:e5:cd:90:58:0a:e6:83:d8:c1:26:49:fb:
                    64:0f:fa:ae:7f:6c:f1:ce:27:13:42:cd:d9:e2:fd:
                    02:dd:5c:63:13:8d:f1:f0:3f:32:d2:74:ab:25:7a:
                    9e:ca:08:ef:1c:d3:94:a8:03:f6:8e:bc:d0:c9:87:
                    ad:75:e4:13:bd:22:c2:67:8d:24:42:1b:08:43:99:
                    e5:ad:c2:62:6e:bd:09:0b:d8:0c:ee:d4:a7:88:51:
                    69:71:8f:88:78:47:72:4d:de:ca:e9:3b:dc:20:b4:
                    7a:f5:b5:ff:9a:a8:ae:fa:58:aa:8d:28:55:74:60:
                    3e:f7:67:da:8e:19:ba:55:6e:7a:c7:cc:6b:4d:2b:
                    dc:1c:12:0c:54:3e:c4:62:77:5e:e9:61:5e:c3:dc:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A8:A9:7B:65:5F:15:1D:5C:46:87:B3:D2:6D:CF:66:3E:C3:81:C2
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/119B53BA7C2B11F182BB7F515CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:78:76:10:fa:32:8d:79:ba:14:1a:dc:63:8c:e8:d3:02:
         2c:b0:e8:49:c2:24:6e:46:39:3b:0a:ee:71:92:58:24:3b:74:
         8a:8c:ad:dd:19:16:1c:ee:85:b3:fe:34:f9:e8:5c:88:bc:8d:
         2b:bd:4f:40:3a:bd:64:f6:fe:b0:95:55:c0:fa:cf:1d:70:24:
         92:32:d0:a9:77:57:3a:07:ac:72:4c:58:da:00:6a:b0:e5:00:
         04:d2:e5:85:d9:be:30:7e:58:18:63:dd:bc:c8:f3:bb:ea:19:
         a8:fd:8d:b9:1c:ca:42:49:2c:f5:80:35:06:ca:06:09:bb:9d:
         21:89:c7:93:c0:5d:15:6b:3b:49:44:c6:a3:61:b3:bb:39:96:
         10:8f:73:f4:39:74:e3:e9:9a:ed:73:99:0b:bd:74:09:7a:2c:
         19:48:79:47:a6:8e:ef:2e:18:01:ba:eb:71:2d:48:ee:1b:fe:
         31:1b:2a:dc:2e:df:a8:aa:c4:7e:a8:0c:94:51:d1:46:9c:c9:
         46:d9:63:8d:54:a3:14:01:d2:f4:c5:e8:51:67:fa:ca:ea:bf:
         b7:f2:16:c7:b5:e5:28:6b:ab:76:38:61:36:39:a6:92:fa:c2:
         0e:82:59:49:7e:ea:e8:fe:b0:a0:ef:f7:f9:1f:75:92:a7:59:
         21:75:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:36 2026 by rpki-client