Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa
File:                     195AEC4287CF11F09EDBA229C4F9AE02.roa (raw, json)
Hash identifier:          f9ESRqKJ4W+yUzggHJXYT2JAv4ZXslIe8zOWbDGBETA=
Subject key identifier:   FB:AF:F4:FF:F9:40:9C:27:00:03:4C:E2:62:C8:AB:50:D9:97:C4:99
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1E26
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa
Signing time:             Tue 20 Oct 2026 15:14:16 +0000
ROA not before:           Tue 20 Oct 2026 15:14:16 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     133502
IP address blocks:        119.30.64.0/24 maxlen: 24
                          119.30.81.0/24 maxlen: 24
                          119.30.90.0/24 maxlen: 24
                          119.30.110.0/24 maxlen: 24
                          119.30.116.0/22 maxlen: 24
                          119.73.0.0/22 maxlen: 24
                          119.73.7.0/24 maxlen: 24
                          119.73.8.0/24 maxlen: 24
                          119.73.19.0/24 maxlen: 24
                          119.73.23.0/24 maxlen: 24
                          119.73.59.0/24 maxlen: 24
                          119.73.62.0/24 maxlen: 24
                          119.73.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7718 (0x1e26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 20 15:14:16 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ad78548-9d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:dc:ee:55:75:7e:41:fb:43:82:2b:02:48:
                    ab:8e:cc:a2:29:35:63:99:0f:f0:f0:e6:c5:9f:6f:
                    77:67:bd:79:3d:e0:9b:e5:03:f4:46:14:5b:fc:47:
                    6c:d5:94:0f:00:1b:0e:f1:d1:d6:fb:7f:6a:79:db:
                    14:2b:66:41:98:09:ea:84:bc:e3:65:55:b3:f4:a5:
                    e7:65:60:0e:c8:bb:d3:68:cd:54:1b:a0:b3:c7:2b:
                    ee:8c:a6:8d:06:f3:e5:4e:88:48:f7:60:a7:f1:8c:
                    53:10:0f:b5:84:f7:63:c7:b1:74:13:98:c6:c7:f2:
                    ad:37:cc:4c:01:59:62:ae:e3:34:17:5f:ca:6d:c2:
                    55:98:45:eb:01:a2:98:c4:da:20:46:ce:ce:2b:93:
                    46:39:3e:2b:f8:ac:ae:4d:b8:83:19:2c:29:13:37:
                    a4:10:4c:7c:ac:b7:c8:70:38:bb:26:61:93:2d:a5:
                    fa:10:ff:dd:e5:49:59:0f:00:64:d7:5a:5a:f7:2c:
                    dc:3e:4a:19:99:f3:2a:68:88:ad:7c:3b:22:b2:54:
                    1e:4a:53:ef:a7:55:62:d3:a1:18:ce:2e:e9:a6:65:
                    85:38:6f:3e:64:82:3b:5b:bc:a8:24:18:f0:af:2f:
                    13:55:27:33:03:a7:6c:76:b9:d5:2f:f1:d5:77:3c:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AF:F4:FF:F9:40:9C:27:00:03:4C:E2:62:C8:AB:50:D9:97:C4:99
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.64.0/24
                  119.30.81.0/24
                  119.30.90.0/24
                  119.30.110.0/24
                  119.30.116.0/22
                  119.73.0.0/22
                  119.73.7.0-119.73.8.255
                  119.73.19.0/24
                  119.73.23.0/24
                  119.73.59.0/24
                  119.73.62.0/24
                  119.73.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:c4:0f:9b:e1:08:62:f9:c9:66:c8:01:e5:a8:97:08:c1:
         b6:fd:cd:45:e1:b4:d8:06:35:cd:66:3e:1f:9e:b7:95:74:5f:
         4e:ac:fc:4a:05:7c:68:1e:60:13:7d:f4:e4:f6:45:99:de:10:
         7a:16:fc:2b:57:f3:ad:bb:97:79:43:48:d6:0a:bc:2b:bf:d6:
         84:b1:81:ef:91:b2:72:09:a6:d9:43:8e:06:2a:a0:cb:f8:f1:
         ff:85:9b:c3:21:51:66:ab:7e:af:be:2e:46:89:78:a5:b8:1e:
         87:07:3e:3d:1e:cb:e5:75:d9:a0:6b:9f:72:71:cc:4a:7d:71:
         40:f3:6e:72:e3:52:91:28:d5:bb:04:d4:c6:82:10:70:91:04:
         3f:b0:93:7b:e1:16:16:22:da:39:c8:42:f7:ae:ed:be:36:8a:
         a9:0c:48:8d:39:46:9e:aa:15:2a:80:c0:f2:3b:f9:75:99:eb:
         bb:14:e4:b7:91:d6:44:56:50:63:68:37:09:50:e0:cc:d8:ea:
         62:42:5e:fd:49:fd:55:07:71:a0:73:d3:af:d2:cb:5d:21:2f:
         c0:78:cc:68:cc:94:aa:5f:80:c3:86:1b:b2:32:99:50:81:12:
         52:0f:d5:04:86:cf:75:65:c5:fb:01:88:62:bb:d7:84:36:b1:
         b3:ef:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:24 2026 by rpki-client