Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
File:                     E206DF40E79011E699B81D0FC4F9AE02.roa (raw, json)
Hash identifier:          P1JfODy9ggFysOgtu/OU47FjHyLvrjYoVlv3KO8vNIQ=
Subject key identifier:   19:33:AB:4F:DA:63:E7:82:AA:AE:5E:C4:74:36:A4:E2:A5:10:BF:12
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1E31
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
Signing time:             Tue 20 Oct 2026 15:14:38 +0000
ROA not before:           Tue 20 Oct 2026 15:14:38 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     9387
IP address blocks:        119.73.14.0/24 maxlen: 24
                          119.73.15.0/24 maxlen: 24
                          119.73.32.0/24 maxlen: 24
                          119.73.33.0/24 maxlen: 24
                          119.73.34.0/24 maxlen: 24
                          119.73.35.0/24 maxlen: 24
                          119.73.36.0/24 maxlen: 24
                          119.73.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7729 (0x1e31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 20 15:14:38 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ad7855e-fefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:6a:cc:f2:2f:af:43:96:88:bf:75:1f:2e:
                    9c:3d:eb:dc:b1:1b:d4:c4:15:72:ef:b5:4c:40:73:
                    ef:66:b6:96:6f:e7:3a:1c:56:a4:41:cc:d0:0b:5f:
                    92:c3:77:91:72:d6:20:1e:86:a0:17:bc:83:a1:a2:
                    b9:d5:15:08:a3:fb:d6:12:d0:ed:41:3c:9b:59:8e:
                    c1:b3:a6:93:2e:f8:97:a3:02:93:99:65:a0:cf:4b:
                    53:60:72:8a:7f:dc:e2:8d:0d:45:50:e9:e3:6a:42:
                    b1:20:54:bc:4b:fb:75:97:8a:37:d0:cf:10:85:f5:
                    92:22:3c:72:37:c3:52:b9:3c:a0:ea:ed:26:2c:24:
                    3c:f8:1f:3b:87:a4:56:3c:4f:c5:b4:32:a8:aa:a1:
                    ab:e5:5b:71:bb:ef:b3:58:eb:82:c1:71:74:b9:45:
                    d7:a8:79:69:eb:09:1f:8e:73:0f:0c:e0:a1:d4:f5:
                    76:c2:f0:a7:ab:73:d2:cc:2d:23:a6:8a:12:47:6f:
                    ef:c7:eb:22:77:cb:e6:53:5e:65:b6:76:dd:fe:1c:
                    c2:ce:35:0d:40:f2:6d:e0:26:48:9a:54:e2:c6:3b:
                    06:43:4b:fd:13:dd:18:1f:bb:40:94:e7:62:4e:5d:
                    85:3c:a5:2f:95:09:2f:b9:5d:87:06:8f:04:52:2c:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:AB:4F:DA:63:E7:82:AA:AE:5E:C4:74:36:A4:E2:A5:10:BF:12
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.73.14.0/23
                  119.73.32.0-119.73.37.255

    Signature Algorithm: sha256WithRSAEncryption
         47:06:d0:60:f8:38:8c:86:85:11:04:0d:94:75:c8:5a:72:1d:
         a4:34:d4:a1:37:97:c5:56:8d:41:ab:33:4e:b6:43:c5:ae:4b:
         33:de:7e:4b:2f:1e:ba:94:92:19:30:be:70:af:14:b2:b7:32:
         1f:35:02:51:a6:19:e7:b3:ec:ac:12:54:50:65:45:2f:62:58:
         38:c5:c6:df:41:c7:99:e4:5e:21:ed:54:59:54:44:f6:b9:9a:
         e6:4b:0e:e6:2d:8f:d6:bc:21:d6:c3:69:0a:a6:04:5d:a4:ce:
         bb:da:22:ac:5d:92:1b:3b:ed:27:45:90:8a:ae:34:9e:4c:7f:
         e1:3b:48:84:1d:b0:0e:c1:34:f8:67:6d:05:b5:bc:4e:bb:06:
         c4:71:cb:47:4f:71:0f:3c:57:c3:9f:bb:2c:86:96:26:c6:c1:
         86:df:3b:64:11:a9:26:6d:0d:a6:b1:d4:67:2f:34:bf:a4:e0:
         a4:cf:62:de:d7:06:95:19:87:0b:4a:9a:8e:85:5e:26:19:3a:
         b1:ae:67:1c:7d:fd:38:8f:56:7e:9a:fe:99:b1:17:c0:46:62:
         95:46:ee:34:2a:18:af:13:5b:71:ef:aa:87:9c:bb:24:cf:be:
         33:ba:f3:3c:b2:96:f5:15:85:c1:38:49:85:a4:94:25:91:7d:
         32:85:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:24:29 2026 by rpki-client