Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/05F2D47EFBE511EFA186694BC4F9AE02.roa
File:                     05F2D47EFBE511EFA186694BC4F9AE02.roa (raw, json)
Hash identifier:          B4EyYqKcPSbH73unQTcCJGydlsadgYIozZsyHYDf07M=
Subject key identifier:   F9:ED:80:36:06:2C:DC:49:94:0E:E7:94:AD:8F:2A:70:6E:F8:A9:10
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       042B
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/05F2D47EFBE511EFA186694BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:51:59 +0000
ROA not before:           Wed 21 May 2025 01:18:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135386
IP address blocks:        157.119.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067 (0x42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: May 21 01:18:21 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47cbf-b1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:93:cf:49:00:2d:9e:90:94:b5:cc:b8:01:
                    69:a9:36:28:35:a8:f1:84:fe:81:ab:68:be:54:e7:
                    55:9d:e0:a5:81:f5:a8:66:3e:37:6f:00:df:23:d9:
                    92:a4:c5:c3:ff:9d:e3:f0:2d:a1:41:68:6a:28:c5:
                    0d:58:71:5a:fe:d2:a2:58:73:41:d2:c4:8f:08:03:
                    17:39:1f:ef:01:02:d9:e1:b7:48:ec:80:b5:7f:08:
                    71:9d:15:17:f0:d1:39:4e:d3:ef:32:88:8a:5e:ba:
                    6f:d2:c4:2c:93:1a:fd:ae:c1:9a:de:e4:fe:dc:5f:
                    dd:9c:c3:88:3e:e3:b7:e8:e6:08:3a:39:f7:93:f4:
                    c5:e6:bb:1b:35:c0:15:a0:f7:bc:31:2d:42:22:66:
                    95:5f:d2:a4:72:68:fc:08:b7:55:00:fe:49:95:12:
                    13:39:0e:c9:fa:9f:24:94:6b:cb:3c:17:bd:99:43:
                    1d:b8:ca:3f:da:46:be:dd:73:8a:c8:11:ba:f6:66:
                    28:3b:a9:71:69:1a:54:1f:5e:ea:93:81:b6:e7:ab:
                    dc:3b:83:a2:b1:1a:71:cb:da:8d:85:64:df:d5:4d:
                    4c:49:89:83:e2:70:70:d8:0b:1a:cf:bf:12:f2:20:
                    61:0b:41:79:f6:28:27:b5:fc:69:aa:cd:5a:46:88:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:ED:80:36:06:2C:DC:49:94:0E:E7:94:AD:8F:2A:70:6E:F8:A9:10
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/05F2D47EFBE511EFA186694BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:48:0b:8e:d9:bf:00:12:da:da:4f:6c:e2:f2:ea:4f:19:4e:
         63:b1:4a:3d:69:ad:fd:fb:2d:99:7c:7b:ca:7f:b6:28:8c:c2:
         b7:d2:5a:54:bc:e6:71:c7:65:4a:18:a5:4d:7c:0c:35:b1:a9:
         79:83:85:29:d7:d5:48:33:f3:10:0b:16:84:30:b0:5c:5e:77:
         ec:92:65:31:ee:a2:78:eb:46:04:e1:ea:f3:bd:5a:08:86:4d:
         06:fe:da:a4:8d:3b:ff:c9:29:a0:15:4e:44:26:eb:a6:a5:67:
         28:31:b8:2a:a7:03:32:9a:53:25:3c:67:ec:7c:e6:95:c1:7c:
         62:74:12:1b:6d:67:28:88:38:11:43:ec:de:36:a6:99:f4:6d:
         25:88:52:d4:21:da:0b:e5:af:15:f7:db:fd:6a:c8:0a:d0:d2:
         aa:ef:b8:c1:bc:8c:dc:b3:8e:1b:82:c8:c1:57:02:32:f9:2a:
         95:0a:03:e9:28:cb:03:73:a6:cc:05:bf:44:cc:c1:de:d8:6d:
         cc:b3:06:5c:8a:40:12:ec:7f:f2:34:c7:b9:02:46:9e:bf:21:
         11:66:73:9d:9b:02:93:ef:11:95:17:98:ed:e6:7b:20:43:a5:
         0c:7f:31:8d:dc:13:0d:21:0b:a4:5f:88:c4:fe:e5:12:fb:2f:
         0b:fd:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:10 2026 by rpki-client